Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/323830343a3266343a3a2f33322d3332203d3e203533313138.roa
File:                     323830343a3266343a3a2f33322d3332203d3e203533313138.roa (raw, json)
Hash identifier:          eXY0OubRz1ypiYoI/Qw5miPN97e4bxdJMM4uDMMFNJo=
Subject key identifier:   F5:58:71:B7:D1:3D:06:AC:29:74:A8:7E:4D:44:F3:7C:69:59:C2:78
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       1A2354FF951638EA0C597D8E7CE77D39C9CFCBBE
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/323830343a3266343a3a2f33322d3332203d3e203533313138.roa
Signing time:             Tue 08 Aug 2023 20:00:00 +0000
ROA not before:           Tue 08 Aug 2023 19:55:00 +0000
ROA not after:            Tue 06 Aug 2024 20:00:00 +0000
asID:                     53118
IP address blocks:        2804:2f4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:23:54:ff:95:16:38:ea:0c:59:7d:8e:7c:e7:7d:39:c9:cf:cb:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Aug  8 19:55:00 2023 GMT
            Not After : Aug  6 20:00:00 2024 GMT
        Subject: CN=F55871B7D13D06AC2974A87E4D44F37C6959C278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:dc:4e:db:c5:1a:5f:86:e2:1e:b4:a3:e3:77:
                    95:07:7e:2e:eb:bd:dd:3d:c5:58:2b:16:bd:80:08:
                    b5:ca:3d:ac:31:4e:c4:58:5d:5e:f4:7f:e1:7e:78:
                    21:fc:67:8b:c3:21:84:9d:14:04:fd:a3:f6:a6:09:
                    b5:b9:ff:47:35:07:a7:84:d0:13:43:1d:47:ed:b5:
                    24:dc:28:85:b0:0d:e0:cd:6e:ca:21:e4:fb:50:21:
                    5e:68:32:be:54:f3:f3:42:40:02:69:42:2c:c2:43:
                    95:ca:af:dd:83:f9:64:52:a4:23:4a:e1:7f:ae:d8:
                    4a:7a:6e:64:7e:46:0a:a6:2d:70:47:c6:51:89:7e:
                    95:e7:f3:22:e4:ab:b6:cc:3e:39:5e:b3:7f:5d:9c:
                    bd:0e:40:46:29:df:c4:b9:c2:4c:4b:b7:f2:f4:89:
                    94:bf:21:24:8c:be:01:79:b3:03:57:69:55:de:c1:
                    7f:90:b3:75:2b:05:ad:d3:17:c0:70:2f:60:7b:1f:
                    81:9d:c8:c5:59:3f:b7:a4:be:59:49:40:f5:8b:6f:
                    d3:f4:73:e5:7b:12:16:4a:9a:6c:79:96:1c:19:d9:
                    0a:99:75:69:ae:70:b4:75:f3:3f:bb:31:f3:38:2d:
                    da:3b:0f:16:3f:de:1f:18:c7:52:e5:58:58:ee:5e:
                    cf:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:58:71:B7:D1:3D:06:AC:29:74:A8:7E:4D:44:F3:7C:69:59:C2:78
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/323830343a3266343a3a2f33322d3332203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:ef:c4:c5:51:b6:2b:90:48:c9:d6:7c:1f:28:27:7c:49:9a:
         9b:ec:cb:4f:aa:74:81:f0:5d:c6:31:51:e5:12:f8:9f:55:d0:
         ff:16:6d:ec:20:56:61:45:d1:16:4a:1a:4d:5e:f0:90:c5:ef:
         19:29:58:f6:0d:1c:b0:29:66:e3:41:a4:c4:5f:c3:e0:0f:4b:
         c5:4c:1f:99:87:3d:d3:48:26:a2:36:8e:c7:b8:9d:3d:a2:f8:
         50:64:af:f3:30:c2:79:ac:30:b8:65:b2:ce:73:d1:6f:0e:9d:
         f7:0a:e5:81:bb:54:0e:d9:e6:15:1a:41:1c:b1:97:9c:83:11:
         40:c4:5e:27:41:c4:08:8f:7c:16:6c:1f:22:67:78:75:46:ad:
         fd:f6:e3:63:5f:ea:f4:e5:b7:51:f0:e4:ec:f9:65:8b:80:38:
         ef:5c:33:30:c3:c3:53:cb:c0:aa:98:ec:29:b7:59:52:4f:8c:
         09:22:6a:bc:18:75:8b:39:c4:65:e6:cf:81:56:65:98:a4:89:
         08:c7:68:2f:77:c3:97:da:48:ff:f5:8c:16:10:a9:f1:25:65:
         15:ce:0e:3b:16:d3:bc:95:be:bc:22:73:05:5f:f9:0e:6a:24:
         98:1b:10:8d:8c:4c:b5:4f:57:a1:90:c8:da:51:aa:6c:28:a4:
         92:d9:36:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org