Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/323830343a323930343a3131323a3a2f34382d3438203d3e20323632353838.roa
File:                     323830343a323930343a3131323a3a2f34382d3438203d3e20323632353838.roa (raw, json)
Hash identifier:          FcbCuhKV6ccLo0doWtwvFsvV1Hfa6KIe0QhpM5vNWK4=
Subject key identifier:   B5:2E:A8:5E:98:D9:BC:3A:69:2B:FB:78:8D:88:BE:7E:A8:FE:5C:12
Certificate issuer:       /CN=5CC02E8E2938AFADEA467289D4C793583546A57D
Certificate serial:       576ADDC55AE8737C35E3CFC442CCB9E07875B175
Authority key identifier: 5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/323830343a323930343a3131323a3a2f34382d3438203d3e20323632353838.roa
Signing time:             Tue 12 Sep 2023 20:43:45 +0000
ROA not before:           Tue 12 Sep 2023 20:38:45 +0000
ROA not after:            Tue 10 Sep 2024 20:43:45 +0000
asID:                     262588
IP address blocks:        2804:2904:112::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:6a:dd:c5:5a:e8:73:7c:35:e3:cf:c4:42:cc:b9:e0:78:75:b1:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CC02E8E2938AFADEA467289D4C793583546A57D
        Validity
            Not Before: Sep 12 20:38:45 2023 GMT
            Not After : Sep 10 20:43:45 2024 GMT
        Subject: CN=B52EA85E98D9BC3A692BFB788D88BE7EA8FE5C12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ff:17:d4:a4:34:d2:7a:d1:45:28:d3:a1:e2:
                    2b:37:4f:67:58:3f:0e:a0:f1:e9:15:c5:d3:02:d4:
                    10:9d:47:cf:b6:e8:ab:ad:b9:c9:89:3d:88:d8:5d:
                    a8:17:e2:f7:8d:9f:b6:5a:2e:11:5e:d7:2b:dd:a0:
                    fb:79:e7:ff:da:9e:74:25:1e:7f:68:95:98:f1:3c:
                    5e:73:01:b4:c7:3c:29:ef:2f:18:9b:5b:96:94:77:
                    fd:94:47:1b:e2:b8:59:db:40:46:c6:16:02:04:03:
                    28:3d:f0:d7:91:e3:ed:3d:3e:96:74:4a:a3:a6:1d:
                    e2:32:6a:a1:ac:07:f8:61:e3:d9:30:eb:3c:82:32:
                    db:b8:40:c8:be:0b:8c:97:3b:68:14:55:51:31:13:
                    d2:93:ff:06:19:1f:b6:76:0f:78:55:0c:bf:66:39:
                    8f:20:6e:6c:bd:d0:4d:d3:71:86:1b:b6:1f:4f:93:
                    e6:36:a0:d4:5a:28:21:b0:e0:42:7b:2c:a2:c6:6c:
                    a8:5b:8f:68:57:cb:ce:34:fc:b4:31:61:1d:11:97:
                    ec:62:04:66:63:32:3a:cb:ea:dd:c2:40:4e:6e:8a:
                    d1:6c:a1:af:d4:c7:99:e3:52:b1:33:22:7c:48:30:
                    1f:43:6c:8c:ef:4b:7a:54:58:af:96:a5:c2:18:dc:
                    5c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:2E:A8:5E:98:D9:BC:3A:69:2B:FB:78:8D:88:BE:7E:A8:FE:5C:12
            X509v3 Authority Key Identifier:
                keyid:5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/5CC02E8E2938AFADEA467289D4C793583546A57D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/323830343a323930343a3131323a3a2f34382d3438203d3e20323632353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2904:112::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:2f:d5:7a:24:a1:42:09:7e:8e:fd:e8:78:9d:e5:9c:86:34:
         1d:3a:0f:d8:20:5d:4f:39:a6:52:c2:56:17:6e:89:57:5f:00:
         ab:84:ca:e6:8f:3d:83:4c:4d:56:be:1d:9d:e7:87:1f:0f:ba:
         71:84:ea:0a:54:94:23:25:0e:c1:ed:66:14:28:15:7d:9e:0d:
         ae:0c:6e:53:7c:a5:69:ce:77:5e:c0:d9:85:96:d8:9b:d5:7c:
         23:f1:fa:b4:e9:2e:bb:33:66:a4:be:ed:ae:62:6f:52:cc:2b:
         0f:31:bc:80:9c:38:2d:f1:c1:f3:74:9e:29:1d:27:cd:9a:67:
         8a:3c:e6:d6:c7:70:01:f0:ad:90:4d:de:5b:dc:ea:61:48:f5:
         eb:c2:49:d1:35:bc:e8:9d:4b:30:0d:a8:28:8a:b5:83:7b:30:
         91:1b:e7:14:ab:7a:38:2a:67:8d:e1:91:7e:f4:f4:53:bb:e0:
         8d:fb:d2:86:75:8c:fc:51:6d:b6:6e:6b:b0:b8:ac:bc:fe:e2:
         76:ad:7e:40:ef:f1:fe:27:49:5b:89:45:b5:1e:31:0e:74:3b:
         c3:aa:42:33:fd:da:0a:e3:51:c9:f9:71:67:23:04:09:83:d1:
         48:3b:e4:fd:8b:31:03:3f:c3:78:d2:c4:6a:9a:57:9e:68:01:
         31:6f:b9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org