Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/323830343a323930343a6230303a3a2f34382d3438203d3e20323632353838.roa
File:                     323830343a323930343a6230303a3a2f34382d3438203d3e20323632353838.roa (raw, json)
Hash identifier:          TqGsgIAd0n4sUZBCtmqSAf4SeDDC0C7n4aJCBj2imxY=
Subject key identifier:   C6:29:EB:A1:B5:E5:7D:5C:01:9A:5B:9B:4B:02:59:EA:66:F0:D3:F1
Certificate issuer:       /CN=5CC02E8E2938AFADEA467289D4C793583546A57D
Certificate serial:       18828C0F6A69552879E685B6FF4CD0222EC73914
Authority key identifier: 5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/323830343a323930343a6230303a3a2f34382d3438203d3e20323632353838.roa
Signing time:             Tue 12 Sep 2023 20:43:42 +0000
ROA not before:           Tue 12 Sep 2023 20:38:42 +0000
ROA not after:            Tue 10 Sep 2024 20:43:42 +0000
asID:                     262588
IP address blocks:        2804:2904:b00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:82:8c:0f:6a:69:55:28:79:e6:85:b6:ff:4c:d0:22:2e:c7:39:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CC02E8E2938AFADEA467289D4C793583546A57D
        Validity
            Not Before: Sep 12 20:38:42 2023 GMT
            Not After : Sep 10 20:43:42 2024 GMT
        Subject: CN=C629EBA1B5E57D5C019A5B9B4B0259EA66F0D3F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ac:b0:6e:a6:aa:ad:3f:28:90:07:05:21:89:
                    59:9e:72:b1:fd:a4:cd:00:b1:91:aa:0e:11:db:dd:
                    11:f4:a3:c3:19:be:89:bf:e1:55:78:e0:33:80:c8:
                    ff:4f:6a:44:33:d5:52:82:aa:8b:42:61:57:65:bf:
                    76:31:3e:b5:36:09:dc:2f:81:93:91:07:29:25:0e:
                    6d:7e:1d:0e:4b:f3:ca:09:8e:b4:7d:8d:f4:06:b9:
                    b6:30:9b:78:17:e4:25:87:82:22:25:ae:d7:b9:2e:
                    ea:a1:cc:76:e8:b6:b8:80:e5:7e:13:6b:3d:b0:90:
                    c5:0b:dc:83:20:c5:46:fe:db:2c:b4:e3:61:8e:cc:
                    7d:82:1f:4f:23:ec:3f:1d:4e:f1:d4:69:de:e3:cf:
                    32:7f:2d:89:87:b3:c4:10:03:f1:72:38:cb:d0:eb:
                    0b:ce:46:13:f6:8d:fb:3f:ec:2c:9d:11:52:26:1a:
                    3e:1f:b6:db:1d:5e:06:df:0c:4d:43:9c:b4:9d:bc:
                    17:bc:3a:18:59:db:7d:60:3e:1f:c8:c7:c7:b2:4a:
                    b5:03:0f:76:63:fd:e0:63:c6:77:2e:73:49:2f:06:
                    bc:2e:b6:ab:28:f2:45:8c:8a:c9:d3:38:73:bb:7a:
                    98:65:b6:94:51:f9:68:72:04:6b:70:49:75:14:25:
                    3c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:29:EB:A1:B5:E5:7D:5C:01:9A:5B:9B:4B:02:59:EA:66:F0:D3:F1
            X509v3 Authority Key Identifier:
                keyid:5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/5CC02E8E2938AFADEA467289D4C793583546A57D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/323830343a323930343a6230303a3a2f34382d3438203d3e20323632353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2904:b00::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:52:09:c2:2c:f5:7f:c6:63:d3:ef:72:8a:06:80:4d:b1:b1:
         63:76:55:c6:a3:1c:4f:9b:01:80:c6:a4:9a:ec:a5:db:99:88:
         36:e1:a6:63:7f:08:03:8d:47:29:22:a8:45:96:5d:22:da:90:
         db:d6:5f:f6:68:15:d7:3b:6c:ed:4c:bb:69:a2:f6:7c:07:7a:
         6b:e6:28:c0:ae:56:3a:c5:d7:0b:7b:6a:5d:5b:58:62:17:7a:
         74:a9:bf:1b:73:f5:a3:9d:9f:af:23:d1:33:b0:c1:b8:25:7d:
         98:59:d7:5b:b2:fa:aa:b9:71:50:7a:12:bb:89:40:39:f1:de:
         36:71:cc:6e:50:e7:56:c8:1a:a6:52:cf:42:c9:79:6c:f2:a8:
         f1:32:83:8d:c6:5e:d4:43:11:f0:73:32:7b:49:a7:cb:3c:bf:
         f7:a8:fe:bc:87:9a:66:ba:ca:de:77:3c:2c:ed:8a:e6:e1:56:
         f0:11:a4:e2:f6:c2:01:d3:d7:23:96:b1:28:c2:ef:21:fc:7e:
         9a:71:40:b0:ce:ae:a8:48:7f:93:1f:f8:ce:93:53:25:97:b1:
         a0:8b:fd:4a:4a:48:97:ba:85:9c:26:84:4d:77:7b:ab:01:4d:
         49:79:ab:0d:32:e8:2a:2e:84:03:c6:00:e5:31:9e:48:99:fd:
         7f:2e:bf:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org