Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/323830343a353637343a3a2f33332d3333203d3e20323637393939.roa
File:                     323830343a353637343a3a2f33332d3333203d3e20323637393939.roa (raw, json)
Hash identifier:          plfHndpOBca6CI5yEFfPp7deLFgeMPNlJ69ce0W+gsY=
Subject key identifier:   92:1D:54:91:B1:30:FB:FA:52:47:7C:F0:97:12:0E:10:0E:6F:A4:AD
Certificate issuer:       /CN=BA0388E1CA5924A916BB11653DD42285A7776A4B
Certificate serial:       2EECCF8009C5A8A57EA552F771BA5ED89374B568
Authority key identifier: BA:03:88:E1:CA:59:24:A9:16:BB:11:65:3D:D4:22:85:A7:77:6A:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA0388E1CA5924A916BB11653DD42285A7776A4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/323830343a353637343a3a2f33332d3333203d3e20323637393939.roa
Signing time:             Thu 30 Nov 2023 20:51:04 +0000
ROA not before:           Thu 30 Nov 2023 20:46:04 +0000
ROA not after:            Thu 28 Nov 2024 20:51:04 +0000
asID:                     267999
IP address blocks:        2804:5674::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ec:cf:80:09:c5:a8:a5:7e:a5:52:f7:71:ba:5e:d8:93:74:b5:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA0388E1CA5924A916BB11653DD42285A7776A4B
        Validity
            Not Before: Nov 30 20:46:04 2023 GMT
            Not After : Nov 28 20:51:04 2024 GMT
        Subject: CN=921D5491B130FBFA52477CF097120E100E6FA4AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7a:f0:36:41:72:7e:93:af:cf:a3:ba:f9:52:
                    68:64:f9:fb:41:f6:88:48:31:26:f3:33:bb:46:60:
                    4e:81:79:01:5a:55:58:a9:52:71:a2:7d:cc:9d:9f:
                    76:54:4b:bd:74:18:03:9f:1d:f0:88:70:c1:80:e7:
                    e2:ed:2c:55:bc:ae:1d:aa:74:af:c3:6d:37:48:6f:
                    31:36:c3:9a:85:6c:f8:ca:e0:ff:14:74:be:db:dc:
                    7d:f4:16:d7:3d:d6:b1:a0:49:dc:7e:a8:f4:58:ca:
                    68:26:c2:95:e3:e8:08:82:28:7b:8c:41:6d:b8:1f:
                    ca:c3:0c:a9:de:6f:71:1f:91:4d:75:b7:ee:21:ae:
                    e2:87:74:2f:37:df:49:e5:fc:86:e3:13:bc:90:50:
                    b6:b6:70:57:17:eb:de:a8:9e:b0:ff:0b:f9:5c:64:
                    aa:e2:bb:03:1c:3d:01:6e:de:c4:3f:72:0e:ac:d3:
                    30:89:3e:61:50:20:d5:56:f0:70:fa:ea:f2:10:b0:
                    25:7c:d0:c1:a7:06:ed:ff:ef:58:ea:69:4d:ac:1b:
                    3f:c3:b3:02:ca:f5:b9:c1:7c:df:cb:17:c6:df:3e:
                    0a:6a:7c:81:3a:76:2c:2e:43:63:09:44:d0:96:52:
                    cf:aa:1a:5b:57:50:61:55:a0:d3:c1:b7:5c:84:02:
                    28:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:1D:54:91:B1:30:FB:FA:52:47:7C:F0:97:12:0E:10:0E:6F:A4:AD
            X509v3 Authority Key Identifier:
                keyid:BA:03:88:E1:CA:59:24:A9:16:BB:11:65:3D:D4:22:85:A7:77:6A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/BA0388E1CA5924A916BB11653DD42285A7776A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA0388E1CA5924A916BB11653DD42285A7776A4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/323830343a353637343a3a2f33332d3333203d3e20323637393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5674::/33

    Signature Algorithm: sha256WithRSAEncryption
         ce:f9:eb:e1:2c:39:88:74:dd:cb:e0:f6:ef:87:5f:09:7e:59:
         a7:0f:32:7c:46:42:cf:13:5b:20:c7:52:8b:ab:09:20:ca:5f:
         21:cd:2e:d8:02:52:2e:36:1d:24:39:4b:94:92:b9:8b:02:0a:
         93:95:8a:c1:25:bd:9c:ab:88:a4:b1:7f:0b:17:4b:b5:64:79:
         ac:0b:d4:65:78:f7:48:58:11:3d:f1:75:0c:0d:3a:60:8e:c1:
         f7:70:f9:d6:9e:2b:e8:16:44:1b:fd:69:c0:a3:5d:a6:74:be:
         b9:3f:1a:b0:46:d1:a1:4d:9f:dd:1e:8d:d8:fa:f8:c5:ff:00:
         e5:72:c0:d8:e0:30:c9:fa:83:eb:7d:19:41:cd:e6:b7:c7:7f:
         1f:f9:fc:f5:ca:e1:77:9e:39:a8:e1:4c:61:04:b4:a9:70:1e:
         32:ea:3d:07:4f:00:08:91:46:75:77:0a:fa:07:ea:fa:31:cb:
         48:ce:53:af:5b:b1:e0:76:d6:19:1d:30:00:ec:94:d0:8b:d6:
         d0:96:9b:25:6f:6d:e8:40:88:a9:28:4c:d6:e7:f7:a0:87:2f:
         a6:2e:65:e1:86:63:81:36:f4:bc:89:0f:68:b4:c0:83:da:de:
         e0:dd:64:77:20:06:e9:d7:83:e6:7f:07:21:c2:2c:9a:00:9b:
         93:96:dd:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:32 2024 by rpki-client on console-ams.rpki-client.org