Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/1/323830343a326233343a3a2f33332d3333203d3e20323635313430.roa
File:                     323830343a326233343a3a2f33332d3333203d3e20323635313430.roa (raw, json)
Hash identifier:          DyHE0+ERwht6RW/rBuRjrUG5QdDEzWEVTu4f3HEdvVY=
Subject key identifier:   15:3D:3C:59:1A:5F:9B:65:8A:DE:23:12:91:20:63:79:A4:BA:02:53
Certificate issuer:       /CN=AB74D1409E020E9FC44ACD2821DE9138F94DD415
Certificate serial:       54544E56810F163A893D9FAA9D0EEA8BB5676615
Authority key identifier: AB:74:D1:40:9E:02:0E:9F:C4:4A:CD:28:21:DE:91:38:F9:4D:D4:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB74D1409E020E9FC44ACD2821DE9138F94DD415.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/1/323830343a326233343a3a2f33332d3333203d3e20323635313430.roa
Signing time:             Thu 04 Apr 2024 15:20:50 +0000
ROA not before:           Thu 04 Apr 2024 15:15:50 +0000
ROA not after:            Thu 03 Apr 2025 15:20:50 +0000
asID:                     265140
IP address blocks:        2804:2b34::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:54:4e:56:81:0f:16:3a:89:3d:9f:aa:9d:0e:ea:8b:b5:67:66:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB74D1409E020E9FC44ACD2821DE9138F94DD415
        Validity
            Not Before: Apr  4 15:15:50 2024 GMT
            Not After : Apr  3 15:20:50 2025 GMT
        Subject: CN=153D3C591A5F9B658ADE231291206379A4BA0253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a4:92:ef:f8:88:77:08:d9:ba:fe:d6:4b:3a:
                    4d:3e:12:f6:39:00:72:8e:ee:e1:07:11:0c:1a:30:
                    10:ed:10:b9:07:83:20:0a:a3:7a:1f:00:cd:e8:af:
                    f0:5d:d1:16:cf:b2:01:f8:3f:5e:33:2b:ac:16:a5:
                    ab:37:36:71:c6:c7:e5:99:cd:95:23:16:ed:3a:17:
                    83:87:ac:7a:4c:d5:89:41:28:e3:e2:90:b5:29:1f:
                    fa:2c:8f:33:d2:ae:38:4a:be:1b:24:82:d4:6f:4b:
                    b6:42:89:4c:4a:f9:cf:d5:dd:5b:72:5e:f5:a2:f8:
                    ad:8b:7f:52:27:e4:68:f4:01:e1:3b:38:d4:ec:c8:
                    e0:7e:ee:a9:85:ab:62:0f:68:fa:59:ca:b1:9a:95:
                    38:c8:69:b4:87:38:e1:66:65:08:26:09:be:79:59:
                    be:fd:02:82:3b:9d:40:6b:dc:fb:c4:f3:13:7a:62:
                    7a:6d:46:59:a1:52:71:e3:86:30:1c:46:cc:57:66:
                    da:6d:09:ad:a9:20:0e:34:df:31:7a:c9:4a:eb:9d:
                    d8:e0:e5:59:23:f4:ff:54:c3:9e:47:d6:7a:a3:e4:
                    8a:aa:9d:ac:09:c8:94:88:f0:0e:f3:c7:00:9c:e4:
                    fd:b5:8f:d5:ba:ea:4e:1b:c4:a7:cd:c8:77:08:cb:
                    76:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:3D:3C:59:1A:5F:9B:65:8A:DE:23:12:91:20:63:79:A4:BA:02:53
            X509v3 Authority Key Identifier:
                keyid:AB:74:D1:40:9E:02:0E:9F:C4:4A:CD:28:21:DE:91:38:F9:4D:D4:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/1/AB74D1409E020E9FC44ACD2821DE9138F94DD415.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB74D1409E020E9FC44ACD2821DE9138F94DD415.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/1/323830343a326233343a3a2f33332d3333203d3e20323635313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b34::/33

    Signature Algorithm: sha256WithRSAEncryption
         60:0a:b6:7f:6e:b3:be:5e:71:e5:27:ce:32:dc:af:06:fa:db:
         1e:db:51:b4:55:45:33:e9:bf:e0:5a:22:ad:7f:0b:de:d4:70:
         32:4b:a0:5d:d3:05:a8:b3:c0:b4:e8:00:bb:58:b9:37:a9:aa:
         5e:5d:f5:9f:b0:87:a1:9a:be:6c:ce:d2:64:9d:a8:f9:78:d5:
         26:0c:80:f3:97:85:a2:68:12:bd:d5:42:9e:73:39:73:25:8e:
         88:17:47:62:77:7f:c8:5e:cb:04:2e:6f:d3:26:df:c9:ba:f5:
         e1:13:33:9e:a3:94:0e:d1:b6:c8:95:f9:65:82:bd:d8:85:a7:
         60:0b:78:cc:8d:28:24:39:3e:98:7d:c0:51:13:c5:c5:64:7a:
         61:b7:80:bd:89:ce:98:77:ce:60:b2:43:5a:ca:12:bd:ee:84:
         2e:fb:62:74:71:07:6d:79:2a:2a:96:79:2c:56:c7:75:96:0e:
         17:20:a3:c8:69:04:eb:73:2c:51:5f:c6:35:00:14:3e:56:50:
         c2:a2:ad:73:cf:32:b7:12:a3:2a:90:f7:83:0e:ba:43:dd:a2:
         1a:e2:61:94:c7:68:39:dd:3d:81:09:4d:c1:37:ce:94:5c:f8:
         e9:33:ca:dc:c0:2b:f8:a0:97:eb:e3:c5:f6:3e:a5:6e:83:de:
         90:8a:34:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-ams.rpki-client.org