Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/323830343a323763633a3a2f33332d3333203d3e203533313235.roa
File:                     323830343a323763633a3a2f33332d3333203d3e203533313235.roa (raw, json)
Hash identifier:          Y8IT+U6txIkc+YOzuJisr+Wbwjdgl053Lpyi+wfJzdA=
Subject key identifier:   D1:19:39:95:4D:B3:6C:01:E6:98:88:4F:6B:EC:32:6F:99:E4:7E:C7
Certificate issuer:       /CN=4AE4E57F7E0DB3A20F920599A286A672EE761AF3
Certificate serial:       5F36B17A7FFE2CDCDE3DABD2BAB7279E9FEBB155
Authority key identifier: 4A:E4:E5:7F:7E:0D:B3:A2:0F:92:05:99:A2:86:A6:72:EE:76:1A:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AE4E57F7E0DB3A20F920599A286A672EE761AF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/323830343a323763633a3a2f33332d3333203d3e203533313235.roa
Signing time:             Tue 31 Oct 2023 21:00:00 +0000
ROA not before:           Tue 31 Oct 2023 20:55:00 +0000
ROA not after:            Tue 29 Oct 2024 21:00:00 +0000
asID:                     53125
IP address blocks:        2804:27cc::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:36:b1:7a:7f:fe:2c:dc:de:3d:ab:d2:ba:b7:27:9e:9f:eb:b1:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AE4E57F7E0DB3A20F920599A286A672EE761AF3
        Validity
            Not Before: Oct 31 20:55:00 2023 GMT
            Not After : Oct 29 21:00:00 2024 GMT
        Subject: CN=D11939954DB36C01E698884F6BEC326F99E47EC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:55:13:b8:7d:84:7c:ec:fe:91:84:86:5c:7e:
                    5d:18:07:4f:56:fc:fc:d1:12:7d:da:2a:9c:ab:cb:
                    34:54:83:b6:e7:ad:4f:bc:51:f5:f7:6c:67:c1:1d:
                    0d:1d:a4:e9:e9:34:f8:6c:64:20:04:b0:c5:b3:d8:
                    23:ad:11:a2:6c:8f:3d:d6:65:18:30:72:b8:2d:c2:
                    17:59:6f:ce:e8:6c:04:5d:77:14:3b:50:e2:9c:4b:
                    b8:84:11:bf:c2:8a:7e:6f:fb:23:4f:ea:87:53:00:
                    4f:27:35:27:79:11:89:2b:cd:04:56:59:4d:11:2e:
                    6d:d4:2f:3e:46:27:b7:b4:73:46:e0:9e:61:73:2f:
                    06:e7:3f:83:fe:c3:b6:46:fa:c3:4f:2f:48:d6:2a:
                    d1:f0:11:8f:89:d8:ab:e2:d0:9c:ea:4f:a3:33:70:
                    0d:b8:53:78:ba:44:a2:2d:62:1f:34:fe:fe:5e:c3:
                    03:7b:9a:bb:69:55:cb:0e:35:ac:db:00:87:5d:b3:
                    26:53:f8:ca:b6:92:42:43:d0:8b:7c:3c:5c:95:5e:
                    2c:0f:30:86:47:87:92:b7:f9:d9:90:c6:23:5b:d0:
                    bb:46:3f:96:3d:cf:df:8b:ce:8b:8a:69:88:4b:5b:
                    20:4a:41:7f:8f:3f:8f:2e:32:80:89:b2:74:8c:dc:
                    e8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:19:39:95:4D:B3:6C:01:E6:98:88:4F:6B:EC:32:6F:99:E4:7E:C7
            X509v3 Authority Key Identifier:
                keyid:4A:E4:E5:7F:7E:0D:B3:A2:0F:92:05:99:A2:86:A6:72:EE:76:1A:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/4AE4E57F7E0DB3A20F920599A286A672EE761AF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AE4E57F7E0DB3A20F920599A286A672EE761AF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/323830343a323763633a3a2f33332d3333203d3e203533313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27cc::/33

    Signature Algorithm: sha256WithRSAEncryption
         95:e4:4d:d4:59:60:b8:ba:29:e3:d3:9c:a7:2c:ce:16:52:00:
         49:b2:f1:9f:65:ff:1f:3a:ac:8c:e6:ea:32:53:c0:d2:da:bf:
         66:27:86:17:56:0a:2a:35:57:51:0a:05:34:85:a6:28:fa:17:
         91:5c:85:de:7f:cb:d5:5e:04:18:3c:89:31:7f:ff:a6:2f:ae:
         bd:c6:4a:c1:96:6c:a4:af:ea:f1:60:88:0d:a9:7a:06:eb:5e:
         2c:68:b6:a1:39:72:50:b1:2b:63:3a:e4:1b:82:c1:66:37:46:
         b7:4f:b3:23:c7:f2:fe:ae:90:a1:de:1b:6b:a0:14:66:5b:8b:
         76:a3:61:e1:d9:1d:ad:54:9a:6d:20:af:a2:f8:7e:07:8d:7f:
         22:03:29:7d:e4:0c:a6:d3:07:7b:3c:fd:d5:e1:c9:ea:87:2c:
         36:7a:7d:f7:0f:1d:02:ae:8a:89:3b:4d:43:2d:5c:cb:6c:af:
         da:9f:09:ab:91:c2:7a:f9:ea:fd:21:04:c9:37:ed:fd:f1:24:
         cd:ee:61:f7:a2:c0:ef:61:90:a2:54:af:6b:03:14:de:bb:1f:
         fc:28:23:66:ea:e2:b7:93:68:9e:41:25:0b:83:12:c7:59:4d:
         ec:f5:b6:f7:6d:75:7d:1b:44:a4:45:98:89:2f:52:1d:8a:77:
         4c:d0:7f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:16 2024 by rpki-client on console-ams.rpki-client.org