Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/323830343a323930343a3a2f34382d3438203d3e20323632353838.roa
File:                     323830343a323930343a3a2f34382d3438203d3e20323632353838.roa (raw, json)
Hash identifier:          8gOf5rwHvpXtaBPhdTydckr+8uXqQiITjZBjvmQeO2g=
Subject key identifier:   32:FB:CE:CD:8E:E4:51:92:4C:B4:FE:D1:28:7A:DC:F1:B5:44:24:C8
Certificate issuer:       /CN=5CC02E8E2938AFADEA467289D4C793583546A57D
Certificate serial:       43BB6967F3C7C128AF09E07FCDBBEFC2EE293487
Authority key identifier: 5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/323830343a323930343a3a2f34382d3438203d3e20323632353838.roa
Signing time:             Tue 12 Sep 2023 20:43:02 +0000
ROA not before:           Tue 12 Sep 2023 20:38:02 +0000
ROA not after:            Tue 10 Sep 2024 20:43:02 +0000
asID:                     262588
IP address blocks:        2804:2904::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:bb:69:67:f3:c7:c1:28:af:09:e0:7f:cd:bb:ef:c2:ee:29:34:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CC02E8E2938AFADEA467289D4C793583546A57D
        Validity
            Not Before: Sep 12 20:38:02 2023 GMT
            Not After : Sep 10 20:43:02 2024 GMT
        Subject: CN=32FBCECD8EE451924CB4FED1287ADCF1B54424C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9f:12:ed:8f:cc:8b:97:2f:46:80:3d:25:35:
                    05:21:1a:b8:df:bf:82:79:57:7f:a8:23:f8:fb:7d:
                    af:02:28:7c:37:9c:c0:c2:d8:ce:c4:c1:c0:27:a0:
                    d9:7d:95:a9:91:6c:a6:f6:02:7e:c9:0d:57:49:f3:
                    48:26:b8:92:f1:09:a0:60:75:92:c0:1f:f6:b2:fc:
                    f7:19:69:a8:39:77:ba:e7:7c:3d:5a:91:a4:df:c7:
                    56:37:94:a0:82:27:0b:78:e0:00:ca:3c:cb:be:12:
                    36:8a:cc:29:0d:47:2d:d3:f8:54:2e:dc:f7:d8:6f:
                    65:b7:ba:95:50:5f:cf:88:30:cd:e5:3b:31:02:50:
                    d8:ff:c8:bb:5e:01:11:71:d7:cc:84:eb:ab:82:76:
                    7b:70:64:c7:ee:74:5b:78:12:cd:4c:70:08:b8:ba:
                    9f:13:44:32:65:92:09:6f:d4:b3:9b:eb:9b:1e:b3:
                    10:30:2d:ec:d0:a9:11:c2:80:49:52:f4:25:ad:98:
                    78:b3:72:4c:fc:8f:00:cd:4e:b6:e6:36:33:8d:3f:
                    6f:24:77:35:ce:a2:ce:48:b6:9c:30:4a:97:2d:c4:
                    0f:3b:5e:8f:07:94:30:a0:f2:e1:91:52:0b:f8:ea:
                    73:d7:8f:9c:66:04:fb:fa:d1:d8:7e:8a:91:9c:9c:
                    b4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:FB:CE:CD:8E:E4:51:92:4C:B4:FE:D1:28:7A:DC:F1:B5:44:24:C8
            X509v3 Authority Key Identifier:
                keyid:5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/5CC02E8E2938AFADEA467289D4C793583546A57D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/323830343a323930343a3a2f34382d3438203d3e20323632353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2904::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:d3:25:46:c6:42:9a:dc:87:9b:2e:43:4b:fd:ad:67:e4:ce:
         7e:2b:e2:8a:50:4a:69:ac:2f:09:f2:da:09:1b:8f:86:98:a2:
         00:97:19:2e:4e:36:ac:80:08:e1:2d:23:c8:ef:42:ae:60:db:
         3b:a8:af:db:10:d7:71:18:b6:c2:d9:f1:89:4c:9e:e2:a3:17:
         f5:c7:22:71:d8:bf:af:02:d3:49:cd:c8:34:4b:d8:2c:85:34:
         71:b2:83:3f:82:da:49:d5:c6:72:53:3f:22:2b:b8:1d:58:23:
         a7:1d:9f:af:db:04:59:6b:fb:53:cf:da:38:aa:96:be:8a:7b:
         fc:c3:54:3f:aa:80:88:48:bd:bf:db:0e:46:92:57:1c:77:32:
         3a:ad:e3:32:e3:52:8a:72:e0:e3:29:13:c5:5a:ff:7a:3f:88:
         27:6e:a1:52:13:ef:2a:81:71:cd:0b:02:5f:a4:70:79:d9:e8:
         e9:2a:39:17:99:c7:c8:02:f6:78:39:39:cf:ca:b5:4c:16:3a:
         44:76:c3:3b:84:78:79:78:e4:e2:54:6d:cc:7a:1b:4a:30:db:
         7e:25:44:d2:8b:63:d2:f4:4a:20:7d:e9:fd:63:30:85:d2:cb:
         00:a9:b7:1a:71:25:93:b3:11:58:61:88:dd:bd:1e:d3:a3:e3:
         14:93:26:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org