Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/323830343a333934303a3a2f33322d3438203d3e20323636303231.roa
File:                     323830343a333934303a3a2f33322d3438203d3e20323636303231.roa (raw, json)
Hash identifier:          CbZvQDW5loni875Gy6mm2rc9xxGzGAXibcKfU+mcS1I=
Subject key identifier:   92:6E:2A:AF:29:16:9E:42:94:57:16:1F:20:D0:3D:17:31:57:A1:D3
Certificate issuer:       /CN=24326A41E1604EEB0BA230080D6E547EDDBA58F0
Certificate serial:       155109F75ACF56F6F205A24B7761E19C7490ADA5
Authority key identifier: 24:32:6A:41:E1:60:4E:EB:0B:A2:30:08:0D:6E:54:7E:DD:BA:58:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24326A41E1604EEB0BA230080D6E547EDDBA58F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/323830343a333934303a3a2f33322d3438203d3e20323636303231.roa
Signing time:             Fri 03 Nov 2023 15:58:03 +0000
ROA not before:           Fri 03 Nov 2023 15:53:03 +0000
ROA not after:            Fri 01 Nov 2024 15:58:03 +0000
asID:                     266021
IP address blocks:        2804:3940::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:51:09:f7:5a:cf:56:f6:f2:05:a2:4b:77:61:e1:9c:74:90:ad:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24326A41E1604EEB0BA230080D6E547EDDBA58F0
        Validity
            Not Before: Nov  3 15:53:03 2023 GMT
            Not After : Nov  1 15:58:03 2024 GMT
        Subject: CN=926E2AAF29169E429457161F20D03D173157A1D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:be:7d:05:99:19:c2:22:77:ea:ce:a2:24:8a:
                    69:09:77:13:0e:f4:b7:7b:98:cb:fc:8d:2d:f1:53:
                    c4:0c:7d:07:43:35:e6:5b:4a:ec:86:99:7a:0c:2b:
                    12:09:07:bd:81:ef:17:c2:70:b1:94:99:e3:86:2c:
                    b9:46:a7:f9:b5:d8:57:35:81:30:93:1d:ad:21:74:
                    db:d6:02:b8:16:f4:1a:e5:94:85:6e:fc:ec:94:74:
                    23:55:a0:ff:f2:75:5a:9c:fb:f1:74:4e:04:62:92:
                    0c:7b:56:be:f7:a4:59:30:7c:c4:f1:92:62:cd:16:
                    c6:48:03:c8:5f:d6:1d:a3:ca:ad:9c:a8:b5:57:91:
                    eb:5a:e2:42:44:1a:6b:db:28:16:29:7d:58:64:e5:
                    f2:c8:8e:25:ba:2e:f8:ef:10:59:5e:8c:69:3e:5e:
                    30:62:17:3b:24:27:ec:c7:ea:48:54:5f:aa:5a:38:
                    ba:08:4c:f9:01:68:dc:0b:67:7c:d9:68:35:45:d4:
                    15:55:1e:2e:07:26:85:8e:c5:e0:28:1b:cd:20:c4:
                    ca:bf:11:ac:3c:7d:f0:e0:f4:e2:13:73:c3:97:ad:
                    ec:76:c4:e5:a5:b0:66:f4:23:44:7c:d9:1d:98:03:
                    2b:f3:b0:e7:25:09:f7:e0:8d:43:e6:fb:6a:6e:18:
                    93:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:6E:2A:AF:29:16:9E:42:94:57:16:1F:20:D0:3D:17:31:57:A1:D3
            X509v3 Authority Key Identifier:
                keyid:24:32:6A:41:E1:60:4E:EB:0B:A2:30:08:0D:6E:54:7E:DD:BA:58:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/24326A41E1604EEB0BA230080D6E547EDDBA58F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24326A41E1604EEB0BA230080D6E547EDDBA58F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/323830343a333934303a3a2f33322d3438203d3e20323636303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3940::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:6d:fd:b3:6e:51:17:16:73:3c:09:74:99:6a:ae:00:98:b7:
         e0:ab:64:96:71:50:11:1f:df:75:6a:66:f3:57:19:a7:99:23:
         c7:13:69:0e:b8:e7:0f:65:e0:f7:30:21:28:a2:1c:40:aa:c6:
         68:91:fe:fd:f8:89:91:d5:3a:c9:0b:eb:97:90:46:24:d7:ac:
         69:e4:0b:bd:6f:41:4f:bc:7b:eb:8c:12:b4:86:9e:f1:95:50:
         61:19:26:ea:c5:14:a2:6c:cf:7d:30:ad:a5:d1:1d:5f:17:3d:
         25:1c:4e:60:e2:da:59:e4:46:79:26:64:00:11:3f:d0:1d:68:
         79:bf:70:4f:cc:94:58:d4:3c:f3:98:89:99:78:c8:91:aa:a6:
         84:94:eb:29:ff:43:90:99:0c:31:7e:cc:bb:44:41:17:81:36:
         af:64:6c:00:ff:e8:3c:dc:6d:18:c2:5d:25:7a:f7:b4:d7:0b:
         f9:e9:25:7f:73:2b:c4:f5:53:d4:58:77:22:29:10:3c:d1:48:
         38:32:44:46:ae:5a:1b:57:ca:b0:11:65:56:4f:b8:f2:6e:3b:
         4f:f7:02:8a:cd:90:fa:98:81:30:5c:e3:51:f0:5b:35:ac:df:
         78:29:7f:d8:9b:c6:89:61:cb:6f:47:e5:63:91:ef:71:a9:f7:
         89:2e:45:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org