Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/1/323830343a323935633a3a2f33322d3438203d3e203533323039.roa
File:                     323830343a323935633a3a2f33322d3438203d3e203533323039.roa (raw, json)
Hash identifier:          XSi+0ao78MN0QeqRBaNF3xf8hDBX7iT3Hb3g7q4JIyU=
Subject key identifier:   24:40:8E:EB:47:53:F5:45:03:DD:D5:13:52:E4:7E:D9:6E:EC:D9:79
Certificate issuer:       /CN=9E740790E5D90D12C18D50517DA2E557662C31C4
Certificate serial:       778F1B57CC68D21C9E6DCC473F17D0D96200056F
Authority key identifier: 9E:74:07:90:E5:D9:0D:12:C1:8D:50:51:7D:A2:E5:57:66:2C:31:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E740790E5D90D12C18D50517DA2E557662C31C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/1/323830343a323935633a3a2f33322d3438203d3e203533323039.roa
Signing time:             Thu 04 Apr 2024 21:10:44 +0000
ROA not before:           Thu 04 Apr 2024 21:05:44 +0000
ROA not after:            Thu 03 Apr 2025 21:10:44 +0000
asID:                     53209
IP address blocks:        2804:295c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:8f:1b:57:cc:68:d2:1c:9e:6d:cc:47:3f:17:d0:d9:62:00:05:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E740790E5D90D12C18D50517DA2E557662C31C4
        Validity
            Not Before: Apr  4 21:05:44 2024 GMT
            Not After : Apr  3 21:10:44 2025 GMT
        Subject: CN=24408EEB4753F54503DDD51352E47ED96EECD979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ec:e0:a0:f3:bb:93:38:1b:96:8f:85:dc:fd:
                    7e:b9:aa:0e:94:31:17:53:e1:7a:f5:f4:bb:fe:42:
                    6f:eb:e1:75:88:1e:95:d8:53:e0:7b:26:0a:36:d2:
                    2d:a9:51:c7:b4:e5:e1:d0:3b:6c:b8:b0:19:5a:6b:
                    b1:31:76:a3:06:75:8c:12:32:6e:a3:ca:cd:1a:6a:
                    c9:c7:ed:a2:95:5d:d1:a4:ef:71:3a:5d:5c:15:53:
                    21:bf:fa:fa:e0:a3:fa:95:e3:41:62:7e:6d:a6:cd:
                    1c:fe:90:b0:23:b5:c2:85:c5:7a:99:2c:6d:c7:c4:
                    bb:6e:32:ff:04:84:da:33:a4:ec:53:60:2d:59:0e:
                    0d:23:f2:5e:8f:cd:91:eb:32:6d:3a:f0:8f:84:f4:
                    0d:26:80:f4:69:46:48:89:2c:e4:07:12:6e:9d:2c:
                    7c:ad:a6:f6:8f:21:50:2a:62:42:c8:97:0b:9e:11:
                    49:fd:88:7c:33:78:20:1f:6b:30:41:b4:20:56:5e:
                    c2:a2:b1:88:e7:4c:b6:bf:18:57:6b:f3:0d:7a:76:
                    bf:7c:b2:b1:6a:f2:c7:92:e7:15:7c:78:b8:1a:ad:
                    4d:7a:b4:2d:27:60:45:4b:9f:9f:f7:41:4a:96:6a:
                    6b:f6:a1:98:50:0c:05:f9:77:20:cc:87:26:7f:cc:
                    24:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:40:8E:EB:47:53:F5:45:03:DD:D5:13:52:E4:7E:D9:6E:EC:D9:79
            X509v3 Authority Key Identifier:
                keyid:9E:74:07:90:E5:D9:0D:12:C1:8D:50:51:7D:A2:E5:57:66:2C:31:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/1/9E740790E5D90D12C18D50517DA2E557662C31C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E740790E5D90D12C18D50517DA2E557662C31C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/1/323830343a323935633a3a2f33322d3438203d3e203533323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:295c::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:5f:75:66:d2:ac:fa:cb:69:0b:d0:6e:04:2f:d5:34:c9:b1:
         33:20:89:77:93:5e:ea:42:a0:e4:77:a6:d3:76:5c:93:97:b5:
         70:3f:9a:a1:7a:11:2e:53:ed:20:49:b3:c4:81:37:a6:61:80:
         4c:37:1a:bc:8e:3c:8e:97:49:27:11:01:35:7d:94:8e:d7:0b:
         b0:83:dd:cc:24:e4:d3:46:da:6d:47:47:a3:ee:ae:a4:60:4c:
         c3:c8:06:c4:22:08:d7:6d:09:20:ea:c3:0c:79:a9:a2:ae:74:
         8f:30:d4:24:9e:1b:dd:6b:19:ba:89:d6:f9:41:21:84:41:3c:
         c7:29:24:91:39:77:3d:21:86:6d:81:6c:91:f9:63:9f:9d:0d:
         f6:2e:db:42:dd:8e:c5:64:71:bb:2b:a7:79:38:e1:45:f6:de:
         97:74:4a:87:c4:68:e1:34:e3:3c:0e:29:7c:d1:41:47:d3:cd:
         6f:2d:6c:49:b1:bc:41:ad:b2:a6:3e:a5:9e:11:07:08:8a:1e:
         e9:11:fc:fe:8f:c4:1a:ba:9b:6e:3e:8e:c0:07:52:2b:d7:2a:
         ed:ed:f9:da:d0:5c:aa:74:d5:39:e9:fa:8a:91:70:f8:3d:16:
         ce:11:20:47:8f:6e:d8:01:38:56:cf:b7:e0:00:57:96:65:74:
         5e:3b:7b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org