Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/1/323830343a323932343a3a2f33322d3438203d3e20323634303030.roa
File:                     323830343a323932343a3a2f33322d3438203d3e20323634303030.roa (raw, json)
Hash identifier:          BhgaXMF/tZOyvyR5pQA04o2y8fyVhYYhK8J8fJltvng=
Subject key identifier:   17:49:D6:1E:96:78:0B:9F:D2:6A:92:20:0B:4A:21:6C:4F:A6:39:79
Certificate issuer:       /CN=E6FF495D0A4F0F74E959F3832234CB61EF9A5B41
Certificate serial:       39E590033D12CF405AC4DE320617BA1D6086BD8B
Authority key identifier: E6:FF:49:5D:0A:4F:0F:74:E9:59:F3:83:22:34:CB:61:EF:9A:5B:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FF495D0A4F0F74E959F3832234CB61EF9A5B41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/1/323830343a323932343a3a2f33322d3438203d3e20323634303030.roa
Signing time:             Thu 04 Apr 2024 11:04:17 +0000
ROA not before:           Thu 04 Apr 2024 10:59:17 +0000
ROA not after:            Thu 03 Apr 2025 11:04:17 +0000
asID:                     264000
IP address blocks:        2804:2924::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:e5:90:03:3d:12:cf:40:5a:c4:de:32:06:17:ba:1d:60:86:bd:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6FF495D0A4F0F74E959F3832234CB61EF9A5B41
        Validity
            Not Before: Apr  4 10:59:17 2024 GMT
            Not After : Apr  3 11:04:17 2025 GMT
        Subject: CN=1749D61E96780B9FD26A92200B4A216C4FA63979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a1:92:52:38:6a:2a:1e:3f:fa:7e:11:0d:8d:
                    b6:c4:d8:23:dd:76:05:23:5e:58:a9:ea:0f:0e:f9:
                    88:df:ce:89:31:61:ce:9c:e9:54:af:d8:7b:88:1e:
                    b2:3e:e6:a8:5f:89:51:14:52:12:bb:0a:d5:d8:c1:
                    a5:c0:4a:bb:86:18:c5:d4:a0:42:c3:2b:90:95:86:
                    33:83:95:e1:92:f8:1b:d6:9b:9e:38:5f:d7:f3:4c:
                    ea:40:d9:fd:01:a3:69:7f:c2:b6:61:86:9a:75:e0:
                    da:e8:0a:95:fa:e0:aa:3a:27:fd:06:9e:18:fa:31:
                    4d:5f:2b:a3:89:91:4f:48:c4:cd:af:4c:fa:dc:26:
                    23:d3:28:0d:9f:96:63:41:c8:4b:09:09:a7:3c:8d:
                    d5:1f:d3:17:44:78:bd:c7:3f:cc:70:fa:79:4d:b1:
                    bb:b1:9a:16:31:a1:0b:4f:6b:a2:f4:20:77:79:ae:
                    18:f8:f6:8f:be:cf:31:a7:e3:44:bd:9e:17:c5:0b:
                    e4:1b:90:2d:07:a2:a9:7d:45:ef:a4:80:05:fe:14:
                    72:8e:b6:91:ca:2d:2a:3b:eb:80:db:8d:65:6c:61:
                    b9:33:cd:9d:27:ff:ca:ed:f5:32:27:93:3c:4b:4a:
                    b5:28:b4:9a:0f:d0:b1:3d:bf:e9:38:28:cb:3e:01:
                    b4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:49:D6:1E:96:78:0B:9F:D2:6A:92:20:0B:4A:21:6C:4F:A6:39:79
            X509v3 Authority Key Identifier:
                keyid:E6:FF:49:5D:0A:4F:0F:74:E9:59:F3:83:22:34:CB:61:EF:9A:5B:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/1/E6FF495D0A4F0F74E959F3832234CB61EF9A5B41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FF495D0A4F0F74E959F3832234CB61EF9A5B41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/1/323830343a323932343a3a2f33322d3438203d3e20323634303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2924::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:ad:ca:d5:b7:6d:b1:4a:92:f5:12:22:44:8b:62:a7:7b:d5:
         c7:cc:33:71:62:e4:20:8f:01:54:e6:39:98:c4:09:ce:39:6c:
         a0:2f:29:23:5b:62:8a:f2:dd:72:f9:c2:e1:25:af:5c:c4:ad:
         8d:3b:52:63:b2:30:11:df:7d:99:fb:54:42:77:7e:40:fb:6b:
         05:a6:da:1a:3a:ef:ca:88:b5:9b:e9:4c:70:54:94:0f:e9:fe:
         a1:8d:cd:62:be:b0:a2:dd:a1:cb:3c:f4:c3:7b:ae:d4:05:0f:
         ce:11:a6:38:c6:87:5d:4a:51:97:78:b3:60:d5:af:a8:45:33:
         df:63:76:cf:b2:c8:c7:b1:bc:6f:8e:06:28:0c:27:f5:ac:ca:
         16:c0:22:dd:fa:3c:da:66:3e:9b:01:f9:a3:4c:00:7d:0c:04:
         e6:63:44:d1:d4:b0:c8:46:fb:d4:31:3b:df:62:01:aa:68:9a:
         f9:30:3a:0f:53:4c:14:26:c3:1f:14:94:96:38:c3:d5:cd:85:
         63:71:a3:ef:37:2e:eb:c5:fb:d8:d5:9f:19:36:d3:cd:e3:8c:
         11:6d:44:1f:dd:8a:fb:08:7f:37:7b:19:0f:f4:32:d3:e9:bc:
         a2:a4:03:cb:1a:a4:f3:a9:40:f2:95:d3:69:50:1c:fb:94:82:
         5e:16:4b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org