Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/323830343a323930343a313130303a3a2f34382d3438203d3e20323632353838.roa
File:                     323830343a323930343a313130303a3a2f34382d3438203d3e20323632353838.roa (raw, json)
Hash identifier:          yCqVR8liQPpwbPhrFnTqV15WdCKNNwwEU0O6N828rR8=
Subject key identifier:   0D:FD:13:68:77:D4:D7:C6:0F:69:0B:4D:60:16:E6:6C:F5:F1:CE:42
Certificate issuer:       /CN=5CC02E8E2938AFADEA467289D4C793583546A57D
Certificate serial:       17D33DFDC7B094D8E23CDE53A7712FECA605FC07
Authority key identifier: 5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/323830343a323930343a313130303a3a2f34382d3438203d3e20323632353838.roa
Signing time:             Sat 09 Apr 2022 14:18:09 +0000
ROA not before:           Sat 09 Apr 2022 14:13:09 +0000
ROA not after:            Sat 08 Apr 2023 14:18:09 +0000
asID:                     262588
IP address blocks:        2804:2904:1100::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:d3:3d:fd:c7:b0:94:d8:e2:3c:de:53:a7:71:2f:ec:a6:05:fc:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CC02E8E2938AFADEA467289D4C793583546A57D
        Validity
            Not Before: Apr  9 14:13:09 2022 GMT
            Not After : Apr  8 14:18:09 2023 GMT
        Subject: CN=0DFD136877D4D7C60F690B4D6016E66CF5F1CE42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e0:c6:a8:bd:1c:6b:a0:b5:01:31:4f:be:09:
                    51:b5:83:7c:3b:7d:9d:a8:e8:72:bc:26:9a:0a:81:
                    ec:a9:77:9b:be:8b:d2:48:d4:f3:20:3e:ca:d7:68:
                    5b:df:e6:79:01:b7:26:a9:42:87:91:44:5a:2c:0e:
                    47:3f:50:d4:a4:88:f0:9b:c5:8a:1d:8c:ad:3d:3f:
                    d6:a8:c2:f0:0a:9a:ee:91:fd:42:24:ff:84:6a:ac:
                    0b:9d:52:5b:bc:d9:7f:6a:7a:19:0e:96:03:76:49:
                    2b:92:78:5d:ff:a4:87:4b:5b:27:67:05:5d:df:1c:
                    a0:72:88:b5:7c:b2:9f:3e:03:40:02:6a:ac:ac:96:
                    f5:9f:35:3d:b8:d9:c4:68:09:0f:89:04:6a:e0:f4:
                    46:d5:c4:bb:5b:be:52:f6:3b:58:3d:74:d7:29:b7:
                    f5:58:c0:9b:c2:f0:fd:bc:a8:f0:36:16:ed:4c:12:
                    a0:40:ae:0e:f8:69:35:3c:b6:c7:63:cd:1e:16:0d:
                    3b:06:5f:bf:c0:3f:1e:56:d4:47:72:aa:78:3f:a2:
                    01:5e:8c:15:34:3f:e3:d2:8a:95:2a:59:a9:36:88:
                    c8:60:13:16:c8:2b:67:1b:35:87:71:06:e8:92:e3:
                    9e:61:b5:b6:9f:99:c2:f5:d6:01:c3:0e:62:52:9b:
                    b9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:FD:13:68:77:D4:D7:C6:0F:69:0B:4D:60:16:E6:6C:F5:F1:CE:42
            X509v3 Authority Key Identifier:
                keyid:5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/5CC02E8E2938AFADEA467289D4C793583546A57D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/323830343a323930343a313130303a3a2f34382d3438203d3e20323632353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2904:1100::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:36:99:3b:f2:d8:81:18:5e:c1:32:70:87:a1:f1:36:02:14:
         d4:4a:3b:8d:49:80:3c:55:91:fd:f4:75:d9:66:8a:c2:10:c1:
         5c:ef:ed:44:6d:20:1c:ba:2d:fe:e0:5e:e3:cc:fd:cb:cb:1b:
         70:8c:19:20:91:c7:3a:06:59:ce:89:4d:43:7f:d7:2a:96:3d:
         3a:8e:8e:47:92:8d:32:17:55:65:2e:e4:fc:e5:70:74:db:71:
         82:13:a7:7f:15:c8:ef:43:14:e3:72:f4:2e:76:50:01:da:46:
         3a:4d:77:5e:2d:3d:54:11:64:b5:4d:51:e8:a9:16:d6:ff:25:
         a5:8e:15:92:a0:8e:55:5b:db:cc:cf:a5:a5:72:db:45:b0:1b:
         c5:d2:6a:55:9f:4f:4a:92:fb:96:59:1d:72:cc:01:3f:0a:84:
         0f:ec:1f:36:61:88:e5:3f:26:2c:d0:47:e8:16:3b:05:71:14:
         16:36:53:c1:71:24:b7:22:0d:ec:0e:2c:0a:52:0c:28:6b:ee:
         b2:09:55:68:bb:95:c8:9d:5b:12:ec:a1:c7:93:6a:4a:0f:2e:
         b4:d8:0e:9c:00:03:f5:b5:b9:61:4c:bd:a0:de:c3:11:7a:a1:
         05:c6:75:d6:a5:46:ef:0e:30:d3:2b:3c:8c:42:e0:21:25:27:
         c0:ab:c8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org