Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/1/323830343a353637343a383030303a3a2f33342d3334203d3e20323637393939.roa
File:                     323830343a353637343a383030303a3a2f33342d3334203d3e20323637393939.roa (raw, json)
Hash identifier:          l1/LhhWh0hDyODaXYsEtBu41hVib+uc8B+mLyCp5q7E=
Subject key identifier:   02:5B:62:92:55:50:96:32:52:31:B7:64:9B:16:20:A7:B6:1B:69:7B
Certificate issuer:       /CN=387AF1348EDD63172DB6EE8E38682949F9D3E956
Certificate serial:       1E2CD4E9EAC020107A5F6023967B8A0474B95F21
Authority key identifier: 38:7A:F1:34:8E:DD:63:17:2D:B6:EE:8E:38:68:29:49:F9:D3:E9:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/387AF1348EDD63172DB6EE8E38682949F9D3E956.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/1/323830343a353637343a383030303a3a2f33342d3334203d3e20323637393939.roa
Signing time:             Tue 26 Dec 2023 16:15:39 +0000
ROA not before:           Tue 26 Dec 2023 16:10:39 +0000
ROA not after:            Tue 24 Dec 2024 16:15:39 +0000
asID:                     267999
IP address blocks:        2804:5674:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:2c:d4:e9:ea:c0:20:10:7a:5f:60:23:96:7b:8a:04:74:b9:5f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=387AF1348EDD63172DB6EE8E38682949F9D3E956
        Validity
            Not Before: Dec 26 16:10:39 2023 GMT
            Not After : Dec 24 16:15:39 2024 GMT
        Subject: CN=025B6292555096325231B7649B1620A7B61B697B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e5:ce:a7:85:d6:cb:84:e5:25:3b:f1:a9:10:
                    7b:f0:c1:15:ce:8a:8b:af:b4:fe:f8:da:d2:28:4a:
                    9e:ff:67:be:9e:5f:ab:a4:db:78:dc:f5:18:12:65:
                    4a:94:3b:a8:aa:67:eb:aa:1a:9e:57:56:c0:da:9b:
                    ed:a7:2f:4a:f0:84:70:3c:c8:ad:b6:7a:57:7f:f5:
                    05:bc:4e:ec:e9:ef:c2:d3:98:67:df:50:84:95:b2:
                    17:29:05:a2:d1:60:08:f5:af:7c:e5:27:85:6c:87:
                    2f:19:66:37:d6:44:e8:b3:c5:db:65:62:bb:ee:f7:
                    05:21:6f:15:7e:42:38:6c:4c:55:f4:ea:78:da:95:
                    bb:8c:93:7f:8e:2d:8e:97:ff:07:8a:42:84:3f:8b:
                    14:e7:a1:b7:3a:4f:3a:c5:cc:96:76:22:79:10:26:
                    7a:99:09:e1:73:8f:c6:9f:5a:13:e6:df:67:73:32:
                    12:e1:f7:2f:fa:99:3c:69:59:ac:62:34:69:28:ff:
                    d9:cd:3f:4c:a5:9d:bd:12:99:ba:d1:8c:fd:ca:70:
                    43:d7:b2:24:8f:41:2f:b6:24:88:7f:dc:73:00:69:
                    1c:7e:eb:a4:54:3a:ea:f1:7f:e3:66:6b:e6:f6:d1:
                    63:df:c5:b6:36:04:78:38:ba:20:dc:ce:3e:79:b6:
                    ae:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:5B:62:92:55:50:96:32:52:31:B7:64:9B:16:20:A7:B6:1B:69:7B
            X509v3 Authority Key Identifier:
                keyid:38:7A:F1:34:8E:DD:63:17:2D:B6:EE:8E:38:68:29:49:F9:D3:E9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/1/387AF1348EDD63172DB6EE8E38682949F9D3E956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/387AF1348EDD63172DB6EE8E38682949F9D3E956.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/1/323830343a353637343a383030303a3a2f33342d3334203d3e20323637393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5674:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         72:af:0d:64:cc:39:78:f9:86:e5:45:f2:65:6c:2d:b4:41:0c:
         af:9c:bb:63:3d:e5:fb:64:57:44:96:2d:84:37:5a:7e:89:41:
         77:1c:3d:9c:77:c9:c5:5a:78:2f:36:91:de:60:fc:2b:ab:31:
         3c:8f:c8:b0:33:e7:45:7b:3d:4f:fb:b4:7f:62:90:58:de:a5:
         6e:11:67:06:eb:77:2c:7c:7c:62:94:c9:49:58:a7:88:9c:34:
         cc:b9:cf:60:af:bc:3e:ea:ba:dd:7d:38:6b:45:75:f7:9c:99:
         c4:79:69:33:b5:40:13:91:1b:9d:a0:bf:dc:aa:54:39:97:8e:
         06:43:26:6c:6a:c5:a4:5a:f3:f7:26:e9:89:65:b2:19:bf:fd:
         82:2e:1f:35:4c:9c:68:0d:e7:56:c2:a6:1f:09:84:23:50:08:
         86:7c:e5:a0:e5:e5:72:b3:22:4c:8d:78:ce:20:0a:17:38:37:
         28:fd:64:0f:04:be:19:ce:31:e2:1b:72:3d:3d:bf:82:7b:59:
         da:bd:21:af:8a:00:c1:8d:ae:fd:c2:c2:09:cb:c9:a8:89:47:
         7a:a1:f9:a8:bc:6f:9c:dd:e8:60:10:1f:9c:1c:28:5d:ae:91:
         fd:07:fa:17:5f:58:e6:a6:27:06:33:d4:82:e5:6b:e9:0a:2e:
         cc:5e:52:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org