Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/1/323830343a326233343a343030303a3a2f33342d3334203d3e20323635313430.roa
File:                     323830343a326233343a343030303a3a2f33342d3334203d3e20323635313430.roa (raw, json)
Hash identifier:          TsluSkY+JfvleVtGFFGBCO3ItvIfSue8xFRz9IYc2fo=
Subject key identifier:   02:50:AE:DE:C1:9E:4E:19:58:58:62:5A:5E:DA:BD:83:2E:0E:00:00
Certificate issuer:       /CN=AB74D1409E020E9FC44ACD2821DE9138F94DD415
Certificate serial:       55E5F476A26CAE2DE6A40A9A1795484142D16F21
Authority key identifier: AB:74:D1:40:9E:02:0E:9F:C4:4A:CD:28:21:DE:91:38:F9:4D:D4:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB74D1409E020E9FC44ACD2821DE9138F94DD415.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/1/323830343a326233343a343030303a3a2f33342d3334203d3e20323635313430.roa
Signing time:             Thu 04 Apr 2024 15:20:51 +0000
ROA not before:           Thu 04 Apr 2024 15:15:51 +0000
ROA not after:            Thu 03 Apr 2025 15:20:51 +0000
asID:                     265140
IP address blocks:        2804:2b34:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e5:f4:76:a2:6c:ae:2d:e6:a4:0a:9a:17:95:48:41:42:d1:6f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB74D1409E020E9FC44ACD2821DE9138F94DD415
        Validity
            Not Before: Apr  4 15:15:51 2024 GMT
            Not After : Apr  3 15:20:51 2025 GMT
        Subject: CN=0250AEDEC19E4E195858625A5EDABD832E0E0000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:29:9a:eb:6e:0e:f2:49:cf:e7:66:16:f7:10:
                    43:95:24:5a:ca:40:23:34:36:a0:85:bf:26:96:79:
                    a0:ee:64:99:4c:bc:b2:7d:e3:b4:2c:bc:23:f2:1f:
                    6d:d6:61:ad:4c:e5:59:de:5d:83:1c:52:73:df:14:
                    e2:57:6a:39:12:73:53:a5:20:a3:b8:65:cd:5d:7b:
                    f0:a8:be:07:0d:25:0e:a5:41:93:2d:39:35:96:fd:
                    2d:bc:a7:cc:3f:40:d5:55:64:6c:fe:fa:70:3f:07:
                    10:66:b2:55:58:16:13:f8:f0:9d:c8:6b:46:56:ac:
                    04:6b:5b:3e:45:11:2e:0b:f1:56:4d:24:e8:e3:04:
                    29:6d:be:1a:40:d9:da:d8:7b:8b:a6:07:91:90:7b:
                    5c:4e:49:9e:cf:36:fc:41:ef:04:ec:f6:41:fd:5e:
                    c8:10:bd:1e:87:96:51:bf:44:2b:b9:1a:91:e0:02:
                    36:09:73:1b:23:ab:2d:bd:1f:75:0f:24:79:6d:82:
                    37:a7:25:79:88:fa:64:5a:8d:36:a3:80:34:ed:c1:
                    98:32:02:cf:8c:26:18:7d:06:f1:c6:db:7d:de:de:
                    98:68:3d:75:ed:49:cf:97:cc:19:fc:1e:ea:90:32:
                    7b:09:c1:50:f1:aa:c5:ab:52:c0:5f:ca:9d:f3:e2:
                    75:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:50:AE:DE:C1:9E:4E:19:58:58:62:5A:5E:DA:BD:83:2E:0E:00:00
            X509v3 Authority Key Identifier:
                keyid:AB:74:D1:40:9E:02:0E:9F:C4:4A:CD:28:21:DE:91:38:F9:4D:D4:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/1/AB74D1409E020E9FC44ACD2821DE9138F94DD415.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB74D1409E020E9FC44ACD2821DE9138F94DD415.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/1/323830343a326233343a343030303a3a2f33342d3334203d3e20323635313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b34:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7f:7a:df:13:fe:4c:3f:b4:3b:cc:35:2f:80:c8:56:01:f9:82:
         03:90:22:5d:5c:06:a7:d0:6f:93:7b:01:74:ce:be:ca:d8:f2:
         4d:fb:55:b0:d9:3d:b8:59:40:e4:c9:8b:84:69:db:0c:ec:01:
         2a:18:6d:81:db:9c:ba:b2:2a:ee:4c:67:3d:5b:68:48:b2:6c:
         28:04:a5:f9:24:2d:7e:22:89:ef:9c:e6:e4:ba:ac:e5:9d:81:
         50:b1:8d:e2:da:48:d2:a3:f3:63:bd:f7:51:e6:2a:e2:14:04:
         be:43:ba:47:43:91:38:43:0d:fa:25:51:d7:39:57:8d:9c:99:
         83:8a:f7:dc:57:41:ea:c2:2f:52:85:78:d8:f4:5e:6a:94:da:
         d4:e4:66:d2:a0:92:e2:af:6b:2d:56:d7:5d:54:d0:72:cd:53:
         b2:84:50:a4:ca:8a:19:e5:42:2b:2d:17:86:43:37:82:f8:93:
         57:cd:4b:f8:1b:af:c8:d2:4d:bd:74:4d:b7:cc:7c:bc:a7:48:
         dd:58:a9:e2:cf:14:87:5b:0f:db:e2:fc:af:66:a3:2e:77:70:
         48:35:37:45:91:e8:60:d4:ed:f0:22:b7:61:cf:2b:80:70:5a:
         43:f7:53:50:36:b4:5c:87:55:94:d0:d8:62:1c:ff:20:59:3c:
         e4:b7:e4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org