Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/1/323830343a353637343a3a2f33332d3333203d3e20323637393939.roa
File:                     323830343a353637343a3a2f33332d3333203d3e20323637393939.roa (raw, json)
Hash identifier:          WGYg4Bj0jwKJ+pgrmzIhNoK2crYDnAYh6GwO9dRLpO8=
Subject key identifier:   08:6E:E8:57:4C:F3:54:C9:15:2B:AA:DE:C5:C0:49:AB:53:50:84:2C
Certificate issuer:       /CN=387AF1348EDD63172DB6EE8E38682949F9D3E956
Certificate serial:       64DE7F80A09EDE326A2105E28D0240165374EE50
Authority key identifier: 38:7A:F1:34:8E:DD:63:17:2D:B6:EE:8E:38:68:29:49:F9:D3:E9:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/387AF1348EDD63172DB6EE8E38682949F9D3E956.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/1/323830343a353637343a3a2f33332d3333203d3e20323637393939.roa
Signing time:             Tue 26 Dec 2023 16:15:39 +0000
ROA not before:           Tue 26 Dec 2023 16:10:39 +0000
ROA not after:            Tue 24 Dec 2024 16:15:39 +0000
asID:                     267999
IP address blocks:        2804:5674::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:de:7f:80:a0:9e:de:32:6a:21:05:e2:8d:02:40:16:53:74:ee:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=387AF1348EDD63172DB6EE8E38682949F9D3E956
        Validity
            Not Before: Dec 26 16:10:39 2023 GMT
            Not After : Dec 24 16:15:39 2024 GMT
        Subject: CN=086EE8574CF354C9152BAADEC5C049AB5350842C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:40:0a:02:7a:d2:53:6e:c2:ec:b3:f1:fe:97:
                    a7:f2:d3:33:83:f0:ba:99:bc:a5:6d:b9:fb:55:30:
                    03:e5:04:78:80:af:bb:60:e0:2f:69:6a:17:77:aa:
                    06:7c:95:59:c7:25:99:38:7a:b9:4e:fd:3a:58:51:
                    fc:af:e6:b3:6c:0a:02:9a:15:06:4b:6f:db:a0:9c:
                    02:23:64:15:84:79:25:2f:5c:3b:5e:14:84:95:25:
                    6f:ac:8f:4a:bd:26:fd:7c:82:c9:d6:c7:95:0f:f3:
                    f1:2a:05:32:e2:89:97:10:2c:ab:55:68:97:4e:59:
                    9b:ba:83:15:39:2f:d5:24:7e:6c:9b:13:88:62:3b:
                    ff:db:15:3d:88:24:f5:6a:ef:76:2f:7e:ee:6b:59:
                    7e:7c:14:ce:62:7d:87:0f:7b:1c:be:e4:7c:3f:6a:
                    a9:b5:6f:69:06:5d:b6:2c:9e:f2:d7:3c:f5:b7:1a:
                    df:75:f0:ff:a6:2d:9f:57:21:53:8f:f5:3f:74:00:
                    95:e8:91:8c:36:46:92:12:d4:e1:57:db:66:63:a4:
                    6d:b1:84:c2:67:6b:f0:a2:48:26:7c:f3:a8:a8:d7:
                    b4:c2:04:09:31:b8:45:a1:75:7e:22:ea:20:92:74:
                    bb:60:d7:41:06:1b:9f:5a:85:20:12:3c:f6:88:ed:
                    31:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:6E:E8:57:4C:F3:54:C9:15:2B:AA:DE:C5:C0:49:AB:53:50:84:2C
            X509v3 Authority Key Identifier:
                keyid:38:7A:F1:34:8E:DD:63:17:2D:B6:EE:8E:38:68:29:49:F9:D3:E9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/1/387AF1348EDD63172DB6EE8E38682949F9D3E956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/387AF1348EDD63172DB6EE8E38682949F9D3E956.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/1/323830343a353637343a3a2f33332d3333203d3e20323637393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5674::/33

    Signature Algorithm: sha256WithRSAEncryption
         a9:4d:00:96:ec:08:1e:2e:46:52:29:1e:c5:01:35:4d:08:dd:
         8b:56:db:f4:82:22:c8:48:42:ce:e1:78:8c:66:5e:14:44:18:
         7a:2a:18:91:fc:ec:26:77:b4:9d:3b:4b:a6:b6:82:9e:a0:8a:
         63:e1:a8:57:a1:e1:c2:9e:88:b8:22:fe:c0:40:e9:14:1f:32:
         03:bd:2c:bf:cb:e5:0a:c3:9a:e0:2b:85:ce:31:15:05:c3:c2:
         34:b0:cc:56:91:06:e3:d3:5b:2e:d3:e3:a0:e2:43:22:b5:a9:
         c5:51:e9:52:e5:bf:9e:92:3d:c1:14:57:75:c8:17:61:f0:a9:
         65:08:df:d9:4a:7c:9c:38:ae:20:76:a3:70:d7:8a:f8:70:41:
         63:68:ed:43:6f:06:d9:2f:78:e1:e4:27:00:f3:d1:e1:b2:f4:
         6f:ce:1c:74:ac:82:2a:83:c2:f4:3f:a1:86:20:7f:6a:4b:31:
         47:11:86:9a:e8:d6:17:8d:ae:08:82:67:c0:ec:68:2c:53:5c:
         c0:6d:f1:12:03:6b:17:4f:cf:b3:32:6e:7d:a1:0a:ba:1b:4f:
         0d:20:60:2c:fe:04:77:4d:51:76:4f:25:2f:4b:65:91:34:a9:
         d2:42:9f:55:8f:17:b8:20:52:b7:38:2b:71:2c:9f:53:3e:50:
         41:2b:c7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org