Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/323830343a383832343a3230303a3a2f34302d3432203d3e20323732373533.roa
File:                     323830343a383832343a3230303a3a2f34302d3432203d3e20323732373533.roa (raw, json)
Hash identifier:          RoxoSA8J3q8o3Q1Qdi8dOX/0JdEIFCoR2JLRpf4RSq0=
Subject key identifier:   0F:EE:A8:CC:22:3D:F6:0F:55:3B:70:45:DC:71:82:E9:66:6F:94:2A
Certificate issuer:       /CN=CA298D59E7C66D747401ACF553288EF82DA95796
Certificate serial:       50B31C3A96E860F82AD518F45EA836DFFB725ECC
Authority key identifier: CA:29:8D:59:E7:C6:6D:74:74:01:AC:F5:53:28:8E:F8:2D:A9:57:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA298D59E7C66D747401ACF553288EF82DA95796.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/323830343a383832343a3230303a3a2f34302d3432203d3e20323732373533.roa
Signing time:             Thu 07 Mar 2024 13:50:47 +0000
ROA not before:           Thu 07 Mar 2024 13:45:47 +0000
ROA not after:            Thu 06 Mar 2025 13:50:47 +0000
asID:                     272753
IP address blocks:        2804:8824:200::/40 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b3:1c:3a:96:e8:60:f8:2a:d5:18:f4:5e:a8:36:df:fb:72:5e:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA298D59E7C66D747401ACF553288EF82DA95796
        Validity
            Not Before: Mar  7 13:45:47 2024 GMT
            Not After : Mar  6 13:50:47 2025 GMT
        Subject: CN=0FEEA8CC223DF60F553B7045DC7182E9666F942A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5d:66:e6:d0:b0:f6:87:64:50:62:3a:6e:30:
                    4b:08:d9:85:9b:50:54:d1:bf:c2:a3:1a:c1:8c:fa:
                    7a:66:8a:ec:8b:8d:23:f2:31:cf:8d:bb:5f:3d:3f:
                    96:40:ab:13:8c:c0:c4:66:d9:70:fd:d5:af:83:a4:
                    de:8b:43:0d:65:c4:c4:6a:42:02:12:29:41:12:7e:
                    00:84:52:ae:a6:aa:d2:17:9b:21:e5:73:b5:58:b8:
                    5c:27:e3:6c:4b:0a:4f:3c:76:d9:20:2c:20:c2:30:
                    3b:0e:70:07:1b:b1:48:a0:ea:09:ab:f7:cc:be:ae:
                    37:7e:9b:27:13:b1:89:c2:e0:bf:6a:46:fe:44:08:
                    b1:a2:9e:d1:ca:21:58:07:e5:7b:3a:ad:e2:33:1e:
                    9a:9c:dc:b4:20:4c:00:60:36:ea:a7:2b:a3:79:d0:
                    76:1b:90:5b:87:6f:e6:44:3b:1f:84:43:d7:79:f5:
                    66:ae:87:09:17:e1:9f:fb:9b:08:3d:10:a4:63:a2:
                    53:af:b9:4b:55:b7:13:dc:0b:77:6d:a5:8d:28:89:
                    1c:17:17:87:33:fa:82:b9:85:2c:4a:5d:f6:98:6b:
                    b7:c5:ae:e0:97:68:10:5f:d6:6c:74:e3:51:69:2a:
                    bd:e8:b7:f2:78:7e:0a:57:10:d5:3e:02:98:e8:a1:
                    71:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:EE:A8:CC:22:3D:F6:0F:55:3B:70:45:DC:71:82:E9:66:6F:94:2A
            X509v3 Authority Key Identifier:
                keyid:CA:29:8D:59:E7:C6:6D:74:74:01:AC:F5:53:28:8E:F8:2D:A9:57:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/CA298D59E7C66D747401ACF553288EF82DA95796.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA298D59E7C66D747401ACF553288EF82DA95796.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/323830343a383832343a3230303a3a2f34302d3432203d3e20323732373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8824:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         5f:90:e3:ec:a4:05:b4:6b:4f:86:09:99:77:4b:3e:3c:61:87:
         23:7f:7d:b1:39:24:3a:9a:18:7c:eb:73:c5:53:88:40:56:96:
         ca:c5:21:59:31:93:3f:c2:98:d3:b4:8b:af:05:94:c0:2a:05:
         58:c1:3a:72:02:79:fb:04:ce:c7:2f:ae:1a:62:27:de:a2:c5:
         c6:40:75:66:0d:9a:a7:ac:75:5b:a9:55:79:1f:7e:ec:21:f0:
         86:5f:74:c0:1c:0d:fc:d4:21:95:75:34:14:c6:3c:53:38:64:
         81:6b:f4:ed:74:15:0a:a5:65:95:a9:bf:ec:c8:bd:45:96:5c:
         00:59:ab:6d:e8:e0:7e:81:ee:55:cb:c7:40:a0:45:3a:57:92:
         5f:4c:75:5d:b6:e5:a0:60:53:d8:a1:ca:46:0e:91:d7:c1:1d:
         af:57:d1:6e:bf:a8:d7:c3:08:4d:f0:8d:41:9b:a5:a4:3b:f6:
         fd:cb:56:eb:75:ec:62:c8:9e:7f:b8:f2:fe:93:e7:fd:fb:6a:
         52:c3:6e:8d:9e:4a:7a:71:12:39:d0:13:b9:79:11:ea:70:d7:
         ca:a2:f5:4f:16:39:31:18:58:d8:12:fd:f1:32:b1:5a:f1:a5:
         52:2b:60:fb:99:04:f1:13:1c:ac:74:6d:c1:23:3c:c8:eb:90:
         87:e3:46:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org