Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/323830343a383832343a3130303a3a2f34302d3432203d3e20323732373533.roa
File:                     323830343a383832343a3130303a3a2f34302d3432203d3e20323732373533.roa (raw, json)
Hash identifier:          UgQ31JHRt7QKLd3aOubwFQOTFstKFA+8QRQoq6x4hRE=
Subject key identifier:   15:3B:3A:20:DE:ED:24:67:C2:54:0E:11:18:4F:07:F4:89:23:39:F3
Certificate issuer:       /CN=CA298D59E7C66D747401ACF553288EF82DA95796
Certificate serial:       769443284ADAC57F8A4DFA9084E08930A5040314
Authority key identifier: CA:29:8D:59:E7:C6:6D:74:74:01:AC:F5:53:28:8E:F8:2D:A9:57:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA298D59E7C66D747401ACF553288EF82DA95796.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/323830343a383832343a3130303a3a2f34302d3432203d3e20323732373533.roa
Signing time:             Thu 07 Mar 2024 13:50:41 +0000
ROA not before:           Thu 07 Mar 2024 13:45:41 +0000
ROA not after:            Thu 06 Mar 2025 13:50:41 +0000
asID:                     272753
IP address blocks:        2804:8824:100::/40 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:94:43:28:4a:da:c5:7f:8a:4d:fa:90:84:e0:89:30:a5:04:03:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA298D59E7C66D747401ACF553288EF82DA95796
        Validity
            Not Before: Mar  7 13:45:41 2024 GMT
            Not After : Mar  6 13:50:41 2025 GMT
        Subject: CN=153B3A20DEED2467C2540E11184F07F4892339F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:49:bd:64:99:24:c1:d9:e3:39:4e:0a:31:4b:
                    db:fc:5f:8b:78:79:72:6c:78:26:25:c9:36:a7:82:
                    20:2e:01:95:bf:b3:62:c1:75:c0:8b:32:92:05:91:
                    6a:e8:c6:0a:f3:52:28:2a:c8:fc:b5:d9:62:ae:ed:
                    fd:07:1b:62:c1:5d:dc:49:44:6d:bf:57:30:f1:c4:
                    01:8d:7f:51:71:e4:ef:56:f4:0b:cc:94:68:a9:61:
                    f4:69:3d:42:e8:c5:0d:a7:d4:a4:11:90:ca:d7:1c:
                    a8:1f:73:fe:10:4a:21:cc:49:2e:6b:9f:61:22:b5:
                    6d:f7:67:27:44:db:62:65:22:8d:84:fb:f9:d3:e6:
                    1e:90:0f:79:e5:39:83:c3:13:f1:4f:90:30:8e:b7:
                    79:1a:b0:85:db:3c:c3:20:0d:7f:e5:e2:4d:25:be:
                    d0:23:2f:ab:14:70:30:cf:0d:fe:9a:fe:6b:f4:43:
                    47:ec:9f:ae:91:b6:d5:6e:41:30:82:c8:52:a4:e2:
                    af:32:e2:0e:3f:a2:50:6e:1b:a6:f4:b6:50:4d:ab:
                    63:4b:ec:0b:02:63:e8:68:a0:93:c9:78:72:ef:3f:
                    8c:b1:61:42:94:42:5b:a9:54:3a:19:3b:43:55:41:
                    dd:2f:87:c6:f7:ca:d2:b2:47:a0:81:44:e5:53:be:
                    b5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:3B:3A:20:DE:ED:24:67:C2:54:0E:11:18:4F:07:F4:89:23:39:F3
            X509v3 Authority Key Identifier:
                keyid:CA:29:8D:59:E7:C6:6D:74:74:01:AC:F5:53:28:8E:F8:2D:A9:57:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/CA298D59E7C66D747401ACF553288EF82DA95796.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA298D59E7C66D747401ACF553288EF82DA95796.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/323830343a383832343a3130303a3a2f34302d3432203d3e20323732373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8824:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         12:43:84:37:ca:51:23:9e:70:2f:35:aa:0c:55:9b:c0:13:08:
         3a:9c:ff:75:12:dd:93:06:90:e7:a8:15:d6:86:50:67:0d:12:
         9d:c7:65:7d:d9:7e:d3:5a:1a:32:a4:54:e8:3f:c7:7e:54:cc:
         63:a4:c2:e3:c7:4e:54:d1:8c:1f:58:84:5e:17:69:af:09:4d:
         71:59:5f:ff:4b:98:06:ef:1d:ac:56:24:9f:bd:28:6f:7f:aa:
         3e:4e:fe:48:2e:a5:a9:8c:81:71:fe:62:6d:70:8c:d0:3d:37:
         07:4a:fd:60:b2:af:9b:49:99:79:ba:82:27:69:c7:06:f3:78:
         e8:9c:e0:e1:5f:1a:b9:bc:e7:d8:be:1f:31:79:9c:d2:52:a2:
         60:25:6b:c2:fe:de:39:98:fa:30:60:a4:1c:91:79:70:80:d6:
         d7:ce:cf:42:1a:a4:17:c1:fc:67:a5:e8:dc:eb:4d:58:a4:d0:
         14:e6:a8:84:60:7d:0d:35:68:fe:e1:e0:e1:08:da:2b:d8:4f:
         54:ab:49:bc:ae:5f:d9:d2:ba:36:3c:48:ff:be:2e:39:f3:c5:
         1b:d4:50:da:33:f1:d3:d1:39:cf:01:43:62:a9:eb:c0:19:ae:
         4e:2a:1e:2e:1f:6b:cb:6d:61:4d:02:f6:89:75:32:57:fd:07:
         b2:71:75:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org