Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/1/323830343a353637343a383030303a3a2f33332d3333203d3e20323637393939.roa
File:                     323830343a353637343a383030303a3a2f33332d3333203d3e20323637393939.roa (raw, json)
Hash identifier:          XHXRLGk08DuVSh3vv1kShlI4sAjJLULN1asRg+ZBTUo=
Subject key identifier:   CA:94:89:E1:16:33:93:27:B2:A3:D3:7B:12:A9:12:E7:57:9B:3E:89
Certificate issuer:       /CN=387AF1348EDD63172DB6EE8E38682949F9D3E956
Certificate serial:       29BB93A872EAA27E817954D01A847BBD25032C79
Authority key identifier: 38:7A:F1:34:8E:DD:63:17:2D:B6:EE:8E:38:68:29:49:F9:D3:E9:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/387AF1348EDD63172DB6EE8E38682949F9D3E956.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/1/323830343a353637343a383030303a3a2f33332d3333203d3e20323637393939.roa
Signing time:             Tue 26 Dec 2023 16:15:39 +0000
ROA not before:           Tue 26 Dec 2023 16:10:39 +0000
ROA not after:            Tue 24 Dec 2024 16:15:39 +0000
asID:                     267999
IP address blocks:        2804:5674:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:bb:93:a8:72:ea:a2:7e:81:79:54:d0:1a:84:7b:bd:25:03:2c:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=387AF1348EDD63172DB6EE8E38682949F9D3E956
        Validity
            Not Before: Dec 26 16:10:39 2023 GMT
            Not After : Dec 24 16:15:39 2024 GMT
        Subject: CN=CA9489E116339327B2A3D37B12A912E7579B3E89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d9:2f:57:f0:10:3b:f2:a6:60:2b:dc:af:00:
                    62:15:4e:30:b2:bc:a9:ff:64:39:b9:29:4d:7d:23:
                    f2:4d:fe:86:95:a2:19:59:55:cc:f4:26:9f:9a:70:
                    88:e3:75:71:cd:07:23:c6:59:15:cd:9c:f6:07:c5:
                    eb:46:e9:24:49:22:3b:9f:41:aa:a1:28:0a:72:45:
                    ef:88:23:7d:34:99:a1:ad:c5:4b:7d:13:8f:b5:88:
                    17:f4:d1:b0:1a:7d:98:d9:c8:d9:d5:f1:53:67:46:
                    e7:2d:60:50:ef:ba:05:0a:a8:c7:06:2e:50:c2:21:
                    35:11:fb:88:d0:8c:48:48:75:82:c1:82:99:4f:94:
                    fc:89:c0:38:0b:19:87:a4:83:70:23:58:2b:3d:08:
                    2e:c4:fc:75:fd:6e:d6:1e:94:4d:74:6e:7e:93:2c:
                    1b:6e:8e:99:70:b1:82:60:2f:c1:96:88:b0:86:01:
                    f8:58:6f:b7:78:dc:b7:f8:5f:e6:18:0b:28:95:3c:
                    d3:ac:ad:96:d9:d8:50:72:49:21:df:a5:c2:a5:99:
                    74:4e:11:2c:7a:8a:8c:01:78:25:2c:99:b7:1a:72:
                    10:e9:0c:63:78:86:6a:1f:75:d5:74:8c:4d:a4:8c:
                    4b:4e:93:91:5a:69:eb:bb:20:6a:9f:ba:f1:71:b1:
                    90:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:94:89:E1:16:33:93:27:B2:A3:D3:7B:12:A9:12:E7:57:9B:3E:89
            X509v3 Authority Key Identifier:
                keyid:38:7A:F1:34:8E:DD:63:17:2D:B6:EE:8E:38:68:29:49:F9:D3:E9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/1/387AF1348EDD63172DB6EE8E38682949F9D3E956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/387AF1348EDD63172DB6EE8E38682949F9D3E956.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/1/323830343a353637343a383030303a3a2f33332d3333203d3e20323637393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5674:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         00:ab:f2:d6:92:ef:44:0a:8d:20:61:e9:2b:a4:bf:1a:93:b9:
         05:3f:0b:70:fd:95:dc:c9:3d:fa:0d:21:02:3a:f5:ee:c1:a1:
         1b:ed:94:f3:ed:00:59:c4:b1:58:08:08:54:46:4f:6c:35:b5:
         16:24:ce:e9:b7:1d:3a:bc:4e:a8:86:41:9b:cf:a5:84:80:aa:
         b4:03:45:c6:5d:3c:2f:27:68:62:be:50:fb:00:04:42:81:d3:
         a5:6d:69:3a:29:da:26:91:62:7d:e1:ab:f4:ed:dc:c3:6b:bc:
         ac:6f:97:43:58:c6:a9:1c:47:f6:c1:41:5c:ad:bc:69:cc:ea:
         d7:59:54:e1:7d:34:2a:d1:56:ce:dc:86:a3:7f:8c:a4:77:fe:
         b2:2d:e1:39:79:dd:9c:88:18:5b:7a:9b:d1:af:13:d2:6a:47:
         c3:0d:bc:30:d7:ef:c5:22:1f:7c:2a:46:71:3e:74:33:2d:2a:
         bc:7f:dd:f3:80:dc:e7:9d:b2:8a:2b:74:07:ce:53:d7:3e:20:
         0b:02:ce:2a:02:ba:a7:05:a2:08:7e:25:27:38:ce:3b:51:ce:
         e8:da:2e:aa:4f:f2:56:00:fb:91:0c:ac:7b:f3:1e:5d:dc:cb:
         96:60:0a:6e:86:93:5e:70:8a:df:1b:ac:69:e5:20:14:e8:60:
         40:68:69:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org