Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/323830343a6363633a3530303a3a2f34302d3430203d3e20323632383237.roa
File:                     323830343a6363633a3530303a3a2f34302d3430203d3e20323632383237.roa (raw, json)
Hash identifier:          bfrCUbtlZ/7Krc3iRC+latgq2cE5noPlt/o07OWaUdc=
Subject key identifier:   22:6C:7C:A5:53:AC:0B:B2:63:89:A6:29:10:A4:46:50:B4:7F:B5:71
Certificate issuer:       /CN=DADE0C80639BA985F0F9357586063522E5D2116B
Certificate serial:       66134A5271E5DB651E6CACF558E078E9B98F4BAA
Authority key identifier: DA:DE:0C:80:63:9B:A9:85:F0:F9:35:75:86:06:35:22:E5:D2:11:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DADE0C80639BA985F0F9357586063522E5D2116B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/323830343a6363633a3530303a3a2f34302d3430203d3e20323632383237.roa
Signing time:             Thu 15 Feb 2024 13:52:50 +0000
ROA not before:           Thu 15 Feb 2024 13:47:50 +0000
ROA not after:            Thu 13 Feb 2025 13:52:50 +0000
asID:                     262827
IP address blocks:        2804:ccc:500::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:13:4a:52:71:e5:db:65:1e:6c:ac:f5:58:e0:78:e9:b9:8f:4b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DADE0C80639BA985F0F9357586063522E5D2116B
        Validity
            Not Before: Feb 15 13:47:50 2024 GMT
            Not After : Feb 13 13:52:50 2025 GMT
        Subject: CN=226C7CA553AC0BB26389A62910A44650B47FB571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e3:bc:b9:14:6f:7b:3e:14:75:60:c8:db:cc:
                    3c:3a:51:ec:01:02:03:b5:a3:a7:06:27:04:3a:2d:
                    ae:f7:c9:c6:93:f5:f3:49:fc:c4:d5:9e:cf:87:f1:
                    86:e7:e1:1a:c5:02:2c:21:3e:ef:e0:53:f0:7b:d7:
                    2e:ab:ec:6c:6a:9c:da:bb:1a:13:a4:d1:c0:3c:fc:
                    b0:ec:43:a0:63:78:c1:07:be:14:d0:bc:0f:70:0d:
                    f1:4d:5d:54:c2:74:b6:f4:6f:9d:37:f1:28:bb:de:
                    ec:5e:76:79:fe:66:ad:e4:fe:e2:32:bf:65:82:54:
                    15:9c:b3:2d:25:00:96:17:a7:b8:eb:cc:69:87:7b:
                    ef:d0:1a:22:80:4c:52:72:a8:8b:6b:e5:cc:22:08:
                    bc:3c:5d:f1:60:17:37:c6:8e:cd:37:f5:4d:99:2e:
                    d4:ec:43:b8:af:55:1a:ab:6a:8a:94:64:5d:55:ce:
                    1b:13:24:5e:50:6a:89:20:10:01:88:ae:8f:06:28:
                    3c:66:bc:75:15:6c:bd:16:10:ce:c4:f1:56:6d:56:
                    60:e5:9d:9b:40:72:50:30:22:30:1a:4e:56:e6:90:
                    a2:ae:51:e9:d3:b9:e7:74:50:9c:6c:ab:46:8c:3b:
                    15:fd:6b:e7:c7:f7:cb:97:1c:e6:1d:30:60:69:b5:
                    14:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:6C:7C:A5:53:AC:0B:B2:63:89:A6:29:10:A4:46:50:B4:7F:B5:71
            X509v3 Authority Key Identifier:
                keyid:DA:DE:0C:80:63:9B:A9:85:F0:F9:35:75:86:06:35:22:E5:D2:11:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/DADE0C80639BA985F0F9357586063522E5D2116B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DADE0C80639BA985F0F9357586063522E5D2116B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/323830343a6363633a3530303a3a2f34302d3430203d3e20323632383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ccc:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         8f:49:4a:1c:3d:f3:0b:aa:50:07:cd:f9:42:93:d3:d8:79:a2:
         91:3f:78:bb:22:8e:e4:88:52:7f:f3:21:4b:63:df:74:53:4c:
         54:af:1e:e9:9d:fd:26:d5:fb:2e:25:e1:1d:1e:1c:1e:e5:0b:
         ba:5e:05:e1:4c:e8:e0:f6:dc:38:aa:01:de:27:54:9b:38:fc:
         29:d7:3b:0f:e1:70:3f:7f:13:78:0c:63:20:c1:8e:52:1b:e6:
         8e:fc:fe:83:08:9d:90:80:25:de:4c:73:31:b5:bc:bb:8d:40:
         e5:21:3c:85:a1:96:9a:c5:f4:16:43:2d:64:1e:09:8a:ad:3e:
         3b:f6:c3:99:fc:f8:34:ed:08:ae:f5:1a:fc:61:63:5c:d9:d5:
         fa:31:9c:e1:7a:31:a6:36:f7:79:cd:fe:1f:29:d2:a3:ca:b8:
         57:33:08:4f:3e:17:b0:31:90:04:33:4f:75:93:62:17:4e:de:
         17:96:6b:f3:71:94:a5:f0:17:1b:58:8a:e2:eb:cb:67:8b:bd:
         b1:19:ce:be:67:75:76:3f:38:83:b1:4c:cc:7b:80:06:97:3d:
         23:a0:00:db:ad:b5:8b:55:4d:73:cb:eb:5d:40:07:be:e0:6a:
         91:97:27:51:53:83:e5:81:2c:6f:03:8c:5f:38:61:56:42:ad:
         37:6a:9d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org