Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/323830343a376435633a3a2f33342d3334203d3e20323731353536.roa
File:                     323830343a376435633a3a2f33342d3334203d3e20323731353536.roa (raw, json)
Hash identifier:          ogCrjNUm20CpWMu9i0b9vkFIbYs1P1UzPbgAgb1LfPM=
Subject key identifier:   DF:84:EA:7B:0C:CF:87:F4:EE:84:4D:B1:AE:C8:C2:DB:5E:C4:DB:A5
Certificate issuer:       /CN=849EDC8B01488DAA924378D7A31D412647B39B67
Certificate serial:       5AF70165094B9D1987B2BD8598BC26C3186BA124
Authority key identifier: 84:9E:DC:8B:01:48:8D:AA:92:43:78:D7:A3:1D:41:26:47:B3:9B:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/849EDC8B01488DAA924378D7A31D412647B39B67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/323830343a376435633a3a2f33342d3334203d3e20323731353536.roa
Signing time:             Mon 04 Mar 2024 23:29:36 +0000
ROA not before:           Mon 04 Mar 2024 23:24:36 +0000
ROA not after:            Mon 03 Mar 2025 23:29:36 +0000
asID:                     271556
IP address blocks:        2804:7d5c::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:f7:01:65:09:4b:9d:19:87:b2:bd:85:98:bc:26:c3:18:6b:a1:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=849EDC8B01488DAA924378D7A31D412647B39B67
        Validity
            Not Before: Mar  4 23:24:36 2024 GMT
            Not After : Mar  3 23:29:36 2025 GMT
        Subject: CN=DF84EA7B0CCF87F4EE844DB1AEC8C2DB5EC4DBA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fb:99:e5:a2:da:a9:b4:4f:e5:02:13:48:6a:
                    db:db:ce:35:7a:7d:93:be:f5:cf:3c:fa:0e:52:44:
                    4f:b6:bd:0c:d8:6d:92:c9:2b:45:13:b6:e3:17:64:
                    e7:fd:bc:79:81:de:d5:e5:0f:a6:73:cc:b9:6d:86:
                    8f:8f:5b:6d:3e:68:fc:7d:da:1e:b8:8f:e5:c3:a8:
                    a6:59:a2:53:9b:39:14:6b:84:e3:69:ea:b4:b6:ce:
                    82:3f:8f:94:36:2d:33:df:5d:07:a2:8b:52:7a:9a:
                    bc:e1:24:58:12:e9:de:96:60:2b:44:e3:ff:ac:ed:
                    cd:71:6c:be:79:1b:c5:5d:d6:c8:30:8e:ee:e7:7c:
                    4b:e5:93:5a:c0:be:9a:87:51:5d:18:da:a7:90:ad:
                    9b:ee:89:53:54:17:75:a6:75:78:03:81:57:15:97:
                    92:14:29:cf:0c:7b:a7:da:23:ec:ec:74:76:e9:b0:
                    75:2a:8f:ac:81:ec:47:02:e7:d5:bf:cb:ec:9c:f2:
                    b7:a4:7c:b6:32:f1:1a:f7:ce:6d:21:77:e6:2e:98:
                    44:a2:78:18:15:2f:b0:de:26:5b:c1:8c:08:33:0c:
                    56:bc:c4:47:d6:15:42:b3:c6:ea:06:c1:e1:e0:29:
                    4a:98:61:19:56:30:c8:a2:ed:de:d7:a4:fb:ee:59:
                    b2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:84:EA:7B:0C:CF:87:F4:EE:84:4D:B1:AE:C8:C2:DB:5E:C4:DB:A5
            X509v3 Authority Key Identifier:
                keyid:84:9E:DC:8B:01:48:8D:AA:92:43:78:D7:A3:1D:41:26:47:B3:9B:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/849EDC8B01488DAA924378D7A31D412647B39B67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/849EDC8B01488DAA924378D7A31D412647B39B67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/323830343a376435633a3a2f33342d3334203d3e20323731353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d5c::/34

    Signature Algorithm: sha256WithRSAEncryption
         9c:bf:34:40:e2:d6:53:13:46:01:18:ab:65:75:e1:03:41:b8:
         8f:b5:79:b4:88:0b:34:6b:43:06:37:f9:2b:ea:20:a7:5a:6b:
         60:6e:a2:38:40:53:d2:e4:82:c0:3c:99:a4:81:43:31:56:04:
         d7:78:66:d0:1a:2e:2d:27:52:4d:7e:05:10:8e:bf:ce:6b:c7:
         e9:e1:21:bc:61:13:26:48:81:7c:67:3d:b0:d2:0f:4d:dc:62:
         21:f3:00:88:7e:af:66:2f:54:e6:81:cd:fc:ae:38:74:1a:ab:
         0d:64:01:35:f5:8b:51:6b:88:bc:31:5f:31:6f:77:84:05:9e:
         ca:a8:d3:04:5d:a8:e6:ee:d4:4a:a1:6d:3d:7b:c3:76:e4:9f:
         84:6c:e1:5b:5e:8c:31:7a:5b:9d:5a:95:ea:30:82:5a:69:e3:
         53:28:40:0e:cd:69:d4:68:4e:51:15:ee:7b:86:93:e2:06:a6:
         4c:b3:33:68:8a:1a:08:25:b3:a9:d7:c7:61:06:69:1e:e1:bb:
         9e:17:61:7a:e8:3f:9b:74:a0:b9:71:ef:e0:3c:1c:36:f3:8a:
         52:32:6d:bc:ed:d8:0f:97:5d:30:90:a8:d9:b1:e5:b5:1b:5c:
         7a:85:8e:aa:e9:7c:06:db:f8:ac:cb:a4:99:09:82:e3:23:b4:
         8a:9f:8f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:17 2024 by rpki-client on console-ams.rpki-client.org