Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/323830343a313132633a383030303a3a2f33332d3334203d3e20323633363633.roa
File:                     323830343a313132633a383030303a3a2f33332d3334203d3e20323633363633.roa (raw, json)
Hash identifier:          0wFVLaKscbApPUYWiC6YkI8zRiaMVp9NEekpdFPBbSg=
Subject key identifier:   29:B2:A5:BA:FA:91:0D:76:FE:C4:3B:13:54:AD:AC:0E:86:A5:57:09
Certificate issuer:       /CN=9CC5CFF7E9D168495B51D83F3C355F10409474FF
Certificate serial:       4F2411A97B3F286EF4E3429079FF3F182E3A7216
Authority key identifier: 9C:C5:CF:F7:E9:D1:68:49:5B:51:D8:3F:3C:35:5F:10:40:94:74:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CC5CFF7E9D168495B51D83F3C355F10409474FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/323830343a313132633a383030303a3a2f33332d3334203d3e20323633363633.roa
Signing time:             Fri 22 Mar 2024 14:33:03 +0000
ROA not before:           Fri 22 Mar 2024 14:28:03 +0000
ROA not after:            Fri 21 Mar 2025 14:33:03 +0000
asID:                     263663
IP address blocks:        2804:112c:8000::/33 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:24:11:a9:7b:3f:28:6e:f4:e3:42:90:79:ff:3f:18:2e:3a:72:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CC5CFF7E9D168495B51D83F3C355F10409474FF
        Validity
            Not Before: Mar 22 14:28:03 2024 GMT
            Not After : Mar 21 14:33:03 2025 GMT
        Subject: CN=29B2A5BAFA910D76FEC43B1354ADAC0E86A55709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c8:4a:b4:84:9a:8e:72:25:68:9b:8c:a5:0b:
                    2c:ce:6a:31:66:c0:a4:d3:40:3b:c6:84:ee:03:92:
                    5b:65:79:93:26:03:69:25:1b:c3:6c:a4:bb:fb:3f:
                    2b:66:6d:b7:3d:b3:bb:2c:b9:f1:a3:a5:57:ea:d2:
                    9d:18:14:7c:18:ae:07:00:19:30:51:0c:60:f0:24:
                    b7:f8:be:b5:00:52:d6:d2:e7:ff:70:be:9e:b5:05:
                    35:bb:cf:62:79:54:4c:4e:c5:07:93:e5:e6:67:0d:
                    4e:7b:e1:2a:bd:35:b9:6c:50:48:8a:c0:72:c9:78:
                    1f:e4:b9:57:ad:3c:ff:a9:14:70:93:85:81:41:45:
                    56:86:bb:4e:bb:a8:56:d4:43:dd:f8:1e:24:fd:aa:
                    e9:8c:0e:f7:2c:52:9a:ab:2c:51:45:e7:55:79:d6:
                    65:40:be:73:86:da:f2:f5:76:2b:0e:02:e5:2b:ba:
                    a2:4e:c1:10:4b:ed:42:53:05:90:1b:c5:05:2e:6a:
                    63:95:fb:d8:14:90:e3:22:18:5d:13:06:5e:4d:ab:
                    17:d2:2b:76:ad:bb:81:7b:22:8a:57:14:e0:e9:95:
                    20:ce:3e:da:7f:20:b4:d6:31:61:74:fc:a5:19:d6:
                    90:92:45:39:b4:b8:dc:bf:af:c5:88:e8:6f:98:11:
                    2e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B2:A5:BA:FA:91:0D:76:FE:C4:3B:13:54:AD:AC:0E:86:A5:57:09
            X509v3 Authority Key Identifier:
                keyid:9C:C5:CF:F7:E9:D1:68:49:5B:51:D8:3F:3C:35:5F:10:40:94:74:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/9CC5CFF7E9D168495B51D83F3C355F10409474FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CC5CFF7E9D168495B51D83F3C355F10409474FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/323830343a313132633a383030303a3a2f33332d3334203d3e20323633363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:112c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         69:d6:de:7f:65:ee:68:07:00:15:81:c6:57:64:e4:5a:87:54:
         6c:d1:1e:09:00:b9:09:f1:d6:35:ec:cc:45:4d:d9:d0:c5:8f:
         5a:c5:d4:a7:72:13:03:4c:6f:9d:b2:7e:b2:d7:2e:bf:29:50:
         a6:a5:8c:82:cb:fc:ff:bb:55:56:bf:55:ad:09:9f:d8:aa:0c:
         0c:dc:8a:8b:f7:63:e6:98:8e:a0:30:d3:fa:e2:e2:e9:24:18:
         b8:4a:06:3a:0f:29:4d:51:f2:94:68:46:1c:0a:3b:4a:e0:63:
         77:a5:d9:33:18:11:f9:14:1e:f7:8f:f0:dc:62:4f:46:2a:ee:
         e7:3d:e0:d5:e4:b6:6d:e2:62:24:37:2b:d9:5b:23:03:a3:1c:
         a2:ac:04:52:b7:5d:0e:4e:16:0c:13:53:4c:99:ef:1a:f3:1d:
         e6:56:68:12:03:49:cd:b4:05:85:e9:f7:ac:c2:57:ab:ab:c5:
         ea:bb:3d:9a:91:a7:2c:29:5b:0d:62:9e:16:cb:a0:1a:f6:f1:
         cd:d2:94:1f:7c:ff:5e:7b:79:93:ab:12:95:fa:5f:7b:5b:54:
         06:f3:de:af:ad:5f:96:2b:c2:02:f6:ca:4c:72:0f:b9:de:e9:
         be:e1:d9:01:85:68:2e:f3:20:19:bd:a0:4c:85:2f:09:07:06:
         0b:11:31:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:43 2024 by rpki-client on console-ams.rpki-client.org