Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A6Jv5P21ryQCg6UtP5fVQvmr2BZeM7QUiVhFa2YsCmWc/0/323830343a353535633a3a2f33322d3438203d3e20323634313035.roa
File:                     323830343a353535633a3a2f33322d3438203d3e20323634313035.roa (raw, json)
Hash identifier:          aZd2mxRSvtlkWdUZ21MKAg80bq8sjQZvFHHUt1OOVCI=
Subject key identifier:   D5:F3:7E:43:99:F1:62:23:48:A4:A3:3C:4A:4C:0C:1A:71:4F:CA:A5
Certificate issuer:       /CN=4C483F3DEA6A720D81A717A29A9A42D57E85D048
Certificate serial:       688371A66CA416FC898603A1B706C0324F45AF41
Authority key identifier: 4C:48:3F:3D:EA:6A:72:0D:81:A7:17:A2:9A:9A:42:D5:7E:85:D0:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C483F3DEA6A720D81A717A29A9A42D57E85D048.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A6Jv5P21ryQCg6UtP5fVQvmr2BZeM7QUiVhFa2YsCmWc/0/323830343a353535633a3a2f33322d3438203d3e20323634313035.roa
Signing time:             Fri 12 Jan 2024 14:49:12 +0000
ROA not before:           Fri 12 Jan 2024 14:44:12 +0000
ROA not after:            Fri 10 Jan 2025 14:49:12 +0000
asID:                     264105
IP address blocks:        2804:555c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:83:71:a6:6c:a4:16:fc:89:86:03:a1:b7:06:c0:32:4f:45:af:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C483F3DEA6A720D81A717A29A9A42D57E85D048
        Validity
            Not Before: Jan 12 14:44:12 2024 GMT
            Not After : Jan 10 14:49:12 2025 GMT
        Subject: CN=D5F37E4399F1622348A4A33C4A4C0C1A714FCAA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:93:a4:f9:7c:86:8b:48:2d:29:e8:77:a6:df:
                    4e:a3:17:97:56:91:b4:9b:5c:e2:f9:3e:3c:ef:4a:
                    e8:a7:91:1e:57:c9:4c:4f:41:87:69:03:8d:a6:fd:
                    aa:e8:11:cf:6f:c6:46:85:29:4b:4b:d6:da:99:0d:
                    cc:67:8f:7b:0f:f4:eb:b5:8c:3a:f2:b1:dd:3f:59:
                    65:8e:62:1c:35:3a:1f:64:e7:7f:f6:06:06:8e:67:
                    50:f7:85:00:b6:10:c3:f4:06:8d:31:76:73:57:6b:
                    24:38:11:f7:2f:66:fe:ef:db:c2:65:0b:8d:3a:b1:
                    0b:a6:14:b8:65:9e:16:f2:74:d4:fc:0d:51:98:32:
                    fb:75:8a:12:e8:5a:86:90:6d:65:33:0a:6c:64:9d:
                    81:a1:f1:4a:d3:0b:c0:45:ed:ab:77:61:3d:6c:6c:
                    66:66:ce:32:80:13:57:e9:8c:93:8c:26:43:f4:ce:
                    0b:79:e7:cc:fd:7d:db:50:0d:fc:69:c8:6f:4b:17:
                    ef:ad:7b:da:89:8c:64:45:5f:af:b2:d7:12:d9:fe:
                    61:29:c4:5a:d9:b4:7a:49:3e:4f:8c:ae:8f:93:f7:
                    63:91:73:58:b5:58:54:2e:a8:5a:d5:91:c7:83:d5:
                    9e:4e:27:5c:99:aa:3b:3f:4b:2d:b2:b1:73:d8:ca:
                    2b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F3:7E:43:99:F1:62:23:48:A4:A3:3C:4A:4C:0C:1A:71:4F:CA:A5
            X509v3 Authority Key Identifier:
                keyid:4C:48:3F:3D:EA:6A:72:0D:81:A7:17:A2:9A:9A:42:D5:7E:85:D0:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A6Jv5P21ryQCg6UtP5fVQvmr2BZeM7QUiVhFa2YsCmWc/0/4C483F3DEA6A720D81A717A29A9A42D57E85D048.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C483F3DEA6A720D81A717A29A9A42D57E85D048.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A6Jv5P21ryQCg6UtP5fVQvmr2BZeM7QUiVhFa2YsCmWc/0/323830343a353535633a3a2f33322d3438203d3e20323634313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:555c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:38:c2:bf:4a:79:73:9e:e8:0e:06:9c:15:cc:57:df:ad:e5:
         f2:8b:db:c4:d8:61:f8:af:a6:1f:01:d0:68:d6:3f:72:9f:78:
         e1:a2:9a:b0:2e:01:06:09:6f:39:e0:d4:af:98:29:14:42:fd:
         e9:98:4b:53:73:0b:ab:21:d0:46:0a:f7:c3:4a:6a:9f:bb:f4:
         12:38:c8:4b:66:f1:59:3a:a9:9e:bf:81:8a:13:6e:86:27:62:
         22:70:d2:d6:88:17:7f:36:63:ef:e0:a4:ff:34:8b:e2:61:81:
         01:dc:d0:5c:0a:53:21:7d:d4:73:8c:2f:f8:ff:1c:ac:1c:16:
         08:85:0b:f1:f7:96:ff:b4:05:b6:93:7b:4b:ce:9c:ec:d5:51:
         73:96:e1:12:18:83:75:37:ea:da:e4:1c:83:20:d5:bc:fc:cd:
         8e:0f:67:de:29:cc:8e:d2:0d:08:fb:ca:b6:29:ca:a6:fd:9f:
         c3:1b:30:4b:a3:0c:0a:6a:77:78:15:44:8d:c9:90:f2:ed:69:
         c0:1b:d0:8c:e4:4d:a5:34:de:3c:8a:80:de:18:74:07:3f:3d:
         1f:fc:26:a1:ec:5c:67:24:9b:3c:7a:e9:f6:ff:19:3c:98:58:
         5e:9d:33:cc:57:bb:b9:7e:e1:ee:e3:87:aa:38:6f:f3:d1:8b:
         21:fb:a9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org