Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a3a2f33322d3438203d3e20323730363834.roa
File:                     323830343a366663383a3a2f33322d3438203d3e20323730363834.roa (raw, json)
Hash identifier:          91yN+iMU1VWVUsL1YLmrIjg8ePCe5B2IxDG/BMkr2d8=
Subject key identifier:   95:6E:88:D6:83:0E:98:31:2F:0E:C7:39:73:BD:62:3E:DF:25:AE:70
Certificate issuer:       /CN=52AC7BEFBFD4E57267873291AA9A74E79E82B31B
Certificate serial:       2FA3E594C263F47776C38E4344403D5C1F0477FA
Authority key identifier: 52:AC:7B:EF:BF:D4:E5:72:67:87:32:91:AA:9A:74:E7:9E:82:B3:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52AC7BEFBFD4E57267873291AA9A74E79E82B31B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a3a2f33322d3438203d3e20323730363834.roa
Signing time:             Sat 03 Feb 2024 23:33:47 +0000
ROA not before:           Sat 03 Feb 2024 23:28:47 +0000
ROA not after:            Sat 01 Feb 2025 23:33:47 +0000
asID:                     270684
IP address blocks:        2804:6fc8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a3:e5:94:c2:63:f4:77:76:c3:8e:43:44:40:3d:5c:1f:04:77:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52AC7BEFBFD4E57267873291AA9A74E79E82B31B
        Validity
            Not Before: Feb  3 23:28:47 2024 GMT
            Not After : Feb  1 23:33:47 2025 GMT
        Subject: CN=956E88D6830E98312F0EC73973BD623EDF25AE70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:33:a0:3e:ab:82:6e:0e:cf:f3:dc:71:dd:ca:
                    3f:77:be:f6:0e:a8:4c:ef:e0:4d:5e:87:fd:b6:6d:
                    4e:d1:6e:18:40:3d:ac:3a:c7:70:e1:79:48:dc:c6:
                    70:73:e1:61:f0:68:42:83:9b:2f:82:e1:fd:aa:e8:
                    5a:be:2c:b5:b2:6a:69:62:5e:cd:11:b8:86:20:ca:
                    a2:dc:97:9f:d2:9c:2d:ad:fa:bd:67:25:65:68:28:
                    05:e4:1d:c8:d3:11:10:1a:48:71:9c:a6:3d:97:6f:
                    17:cc:09:90:97:75:36:ab:b6:95:e1:5f:3e:0c:39:
                    32:96:11:39:37:ae:a3:88:2d:33:45:ad:8b:0e:62:
                    c0:58:92:4b:dd:20:5e:5d:8a:54:48:6f:35:b9:8e:
                    90:0a:28:e0:fe:8b:15:9c:d7:6c:10:be:75:44:2e:
                    86:c1:a0:0f:d5:e8:78:ac:1c:a3:cc:ad:2e:d0:c6:
                    6e:07:2d:e1:59:f9:ee:ee:9d:84:25:1e:4e:53:77:
                    33:ba:62:21:35:41:21:24:9a:a4:5d:f8:2f:48:dd:
                    a7:b2:b7:92:8d:5c:6b:31:11:54:b6:33:89:32:5c:
                    29:81:ef:8d:a5:a9:93:b8:fa:cc:17:78:ac:9b:f5:
                    98:ec:15:60:3b:fe:b9:86:45:d8:b5:4f:08:93:6a:
                    f4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:6E:88:D6:83:0E:98:31:2F:0E:C7:39:73:BD:62:3E:DF:25:AE:70
            X509v3 Authority Key Identifier:
                keyid:52:AC:7B:EF:BF:D4:E5:72:67:87:32:91:AA:9A:74:E7:9E:82:B3:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/52AC7BEFBFD4E57267873291AA9A74E79E82B31B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52AC7BEFBFD4E57267873291AA9A74E79E82B31B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a3a2f33322d3438203d3e20323730363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6fc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:b7:2b:70:c8:f7:d4:8a:6c:24:58:b0:1e:f6:d2:6d:29:ff:
         41:9c:84:48:74:fa:4a:cc:df:53:ef:46:ee:8f:c6:4f:cb:b6:
         40:a7:69:11:01:fa:cf:ad:04:23:2c:c2:c2:8f:f2:6b:d8:8a:
         0c:81:e0:79:e1:54:22:97:7f:d1:7d:67:e6:66:c0:7e:f7:bf:
         ab:cf:46:fe:9e:51:bf:00:ad:3a:bd:73:4f:43:86:42:c5:54:
         db:bb:d9:47:cb:4e:be:ff:d2:43:4d:7c:a9:94:ad:ea:53:3a:
         ae:de:a1:7e:d2:dc:ba:41:1f:a9:4b:e9:81:cc:64:35:93:d1:
         c5:66:eb:02:ba:f6:59:c8:72:00:ec:71:c8:4d:a5:15:3e:4e:
         7d:00:e5:1d:ae:e6:2c:bd:86:d5:b5:7b:d8:5e:a6:68:ac:41:
         94:84:3d:3f:12:e6:41:52:b4:13:20:b0:d8:66:35:b5:8f:50:
         db:67:ad:9d:ba:de:2b:e4:ef:52:f4:84:56:1c:89:59:6e:b8:
         e0:86:9e:e2:46:72:c7:71:a3:b8:f0:41:1f:4e:ab:13:86:6c:
         3e:c0:d6:e9:01:84:7f:fa:cb:d1:74:09:aa:6b:1c:60:b8:e5:
         28:93:87:69:66:a6:1e:f7:63:99:94:2a:f5:78:10:72:99:a9:
         02:52:b7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org