Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/0/323830343a356538383a3a2f33322d3438203d3e20323639303339.roa
File:                     323830343a356538383a3a2f33322d3438203d3e20323639303339.roa (raw, json)
Hash identifier:          ti5TwMNRx4HrXnhJKF3yYuM5KZZCbOFE/WLVHH7tVZs=
Subject key identifier:   99:6D:9F:C9:D2:A1:51:D3:92:4E:D7:4D:65:2D:80:9A:0E:21:50:00
Certificate issuer:       /CN=5D1544514BDB8648BB33246FCF0EAA3DFC2E97E7
Certificate serial:       24612D8393D0FCDE324A8942C97BF1377B761618
Authority key identifier: 5D:15:44:51:4B:DB:86:48:BB:33:24:6F:CF:0E:AA:3D:FC:2E:97:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D1544514BDB8648BB33246FCF0EAA3DFC2E97E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/0/323830343a356538383a3a2f33322d3438203d3e20323639303339.roa
Signing time:             Fri 01 Mar 2024 20:01:04 +0000
ROA not before:           Fri 01 Mar 2024 19:56:04 +0000
ROA not after:            Fri 28 Feb 2025 20:01:04 +0000
asID:                     269039
IP address blocks:        2804:5e88::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:61:2d:83:93:d0:fc:de:32:4a:89:42:c9:7b:f1:37:7b:76:16:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1544514BDB8648BB33246FCF0EAA3DFC2E97E7
        Validity
            Not Before: Mar  1 19:56:04 2024 GMT
            Not After : Feb 28 20:01:04 2025 GMT
        Subject: CN=996D9FC9D2A151D3924ED74D652D809A0E215000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:35:d3:b0:d7:f5:6b:3b:6d:b5:f8:ba:67:87:
                    14:7d:97:d0:61:3b:8c:4b:56:96:37:4f:8d:69:e2:
                    10:fd:19:9e:23:e1:cb:2d:a7:af:a5:90:0d:ec:31:
                    11:19:c3:d9:2c:1b:0e:fd:50:d8:92:77:c5:f7:d6:
                    a6:19:97:82:b1:94:61:47:fd:cf:29:50:5a:bb:4c:
                    83:e5:d8:ae:4d:29:a4:3f:7a:19:24:42:aa:59:cf:
                    d9:4c:64:87:2f:45:d2:f8:80:64:e2:fc:fc:c7:ff:
                    bc:5f:27:6b:4f:ce:ef:20:f0:6b:0a:79:05:80:43:
                    37:bb:d7:7b:5e:26:cd:f2:aa:d5:d9:7e:3c:96:18:
                    39:79:7e:24:65:09:aa:a7:30:a1:5c:a7:4b:a7:fd:
                    35:02:b8:c3:23:3e:c9:83:25:bd:30:7e:cc:65:79:
                    0c:f6:8a:8b:a2:d0:30:d5:df:db:f0:fa:e0:07:34:
                    79:21:2c:54:8d:9f:ec:e7:09:05:77:c1:6d:e0:06:
                    74:90:9c:25:82:6c:30:17:5b:b9:4d:c0:0b:5e:6e:
                    96:9b:9e:39:b5:ad:10:f7:77:51:47:a1:84:66:03:
                    8a:4a:6d:e5:9f:eb:ca:10:56:17:7d:14:f3:48:03:
                    be:d7:30:6f:f4:af:e6:b3:d8:bb:4b:90:02:cd:35:
                    c7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:6D:9F:C9:D2:A1:51:D3:92:4E:D7:4D:65:2D:80:9A:0E:21:50:00
            X509v3 Authority Key Identifier:
                keyid:5D:15:44:51:4B:DB:86:48:BB:33:24:6F:CF:0E:AA:3D:FC:2E:97:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/0/5D1544514BDB8648BB33246FCF0EAA3DFC2E97E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D1544514BDB8648BB33246FCF0EAA3DFC2E97E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/0/323830343a356538383a3a2f33322d3438203d3e20323639303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e88::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:89:c6:8e:73:ca:89:74:94:53:fc:be:10:16:ad:fb:3f:d1:
         43:9e:e5:88:7c:75:df:72:c9:24:ab:99:a0:dc:fb:73:5f:6b:
         c7:1f:eb:dd:ba:ee:68:1c:a7:8b:26:81:c0:c7:90:87:b2:55:
         cc:d4:a8:59:f5:4d:ff:0e:bd:1f:b5:63:ab:f3:7a:39:49:2d:
         4e:56:4b:15:d1:4a:ea:1b:2b:2f:e3:2d:a3:48:97:08:75:3b:
         0a:27:98:86:98:41:b9:0a:0f:36:58:e5:9a:7f:90:d1:e2:fd:
         93:18:7f:5f:ab:46:95:68:1d:27:d9:48:97:e5:eb:f6:ed:44:
         00:21:92:9e:01:1c:65:5f:15:0a:dd:e6:76:3b:3e:13:3b:f5:
         6e:2a:24:cb:6f:31:d7:89:33:2a:29:b3:9c:d8:6a:48:77:92:
         71:5d:35:cc:2b:7d:fc:1d:ea:6b:a8:b2:1a:0c:2f:c7:a1:92:
         a5:55:32:12:1b:4c:97:3c:54:b7:39:66:4f:27:89:a0:c4:f9:
         8c:62:03:3a:9c:10:95:bc:6d:27:4e:54:2c:5f:0f:fe:18:cc:
         ab:dc:a2:7b:3d:53:f4:68:62:b4:a9:08:93:ad:b0:ed:cd:8b:
         72:24:65:1b:c4:fc:7e:df:db:d0:6c:52:e4:d8:48:e9:70:af:
         21:1e:32:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org