Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/2/323830343a353637343a343030303a3a2f33342d3334203d3e20323637393939.roa
File:                     323830343a353637343a343030303a3a2f33342d3334203d3e20323637393939.roa (raw, json)
Hash identifier:          9ztbD5m0ntZHpDUIkrw/HPZIbKUHRCTUC8mdA9RMPGo=
Subject key identifier:   24:D1:82:67:D0:D9:3A:7A:BA:BA:B4:7E:E4:52:85:F5:C6:7F:00:1F
Certificate issuer:       /CN=97DFA5B9AAD5FA9141F4ECCECB06D72AABDB0E32
Certificate serial:       549EE5EC55A45508F693AF3CBC1E6040B7F2DA18
Authority key identifier: 97:DF:A5:B9:AA:D5:FA:91:41:F4:EC:CE:CB:06:D7:2A:AB:DB:0E:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97DFA5B9AAD5FA9141F4ECCECB06D72AABDB0E32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/2/323830343a353637343a343030303a3a2f33342d3334203d3e20323637393939.roa
Signing time:             Thu 04 Apr 2024 23:08:49 +0000
ROA not before:           Thu 04 Apr 2024 23:03:49 +0000
ROA not after:            Thu 03 Apr 2025 23:08:49 +0000
asID:                     267999
IP address blocks:        2804:5674:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:9e:e5:ec:55:a4:55:08:f6:93:af:3c:bc:1e:60:40:b7:f2:da:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97DFA5B9AAD5FA9141F4ECCECB06D72AABDB0E32
        Validity
            Not Before: Apr  4 23:03:49 2024 GMT
            Not After : Apr  3 23:08:49 2025 GMT
        Subject: CN=24D18267D0D93A7ABABAB47EE45285F5C67F001F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:7b:bc:6c:f8:4f:a4:de:38:9a:5e:74:71:b1:
                    5c:b7:37:99:3a:96:fd:17:d2:fc:0b:9a:41:1f:60:
                    ed:03:b5:25:fc:21:68:c1:e1:55:09:87:df:30:e8:
                    29:64:94:2a:3f:36:30:8b:8e:44:38:e8:12:3f:ec:
                    19:12:34:88:3e:a1:68:8c:4a:67:25:8c:83:25:f3:
                    f4:a1:cb:4f:d7:aa:5f:57:ff:cd:64:01:70:8e:25:
                    05:1b:51:0d:2d:69:13:7b:e9:04:4e:39:da:65:cb:
                    67:17:ce:7e:5b:d5:f5:32:a1:ee:36:63:06:a9:03:
                    2a:c0:6f:36:e7:3e:85:06:b3:cc:10:48:e1:79:da:
                    31:c5:30:5e:14:20:99:30:72:3f:12:8a:87:c0:1a:
                    5f:38:af:99:47:33:a3:35:e9:7f:16:cb:9c:81:b7:
                    58:16:de:45:56:49:ad:10:01:f4:42:74:b3:69:2e:
                    9a:31:f7:0a:4f:17:c7:7d:20:35:ec:af:c9:fa:2a:
                    22:0f:06:8a:d1:59:9c:ec:d1:b9:fb:63:e1:80:9d:
                    ed:29:87:57:9a:e9:c4:b7:39:c1:2d:a8:d0:a1:12:
                    eb:16:28:e3:dd:11:5e:b8:ea:ec:c6:ce:49:cc:67:
                    43:90:08:cd:69:83:f8:b2:c5:c0:8a:5e:35:dd:db:
                    7f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D1:82:67:D0:D9:3A:7A:BA:BA:B4:7E:E4:52:85:F5:C6:7F:00:1F
            X509v3 Authority Key Identifier:
                keyid:97:DF:A5:B9:AA:D5:FA:91:41:F4:EC:CE:CB:06:D7:2A:AB:DB:0E:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/2/97DFA5B9AAD5FA9141F4ECCECB06D72AABDB0E32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97DFA5B9AAD5FA9141F4ECCECB06D72AABDB0E32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/2/323830343a353637343a343030303a3a2f33342d3334203d3e20323637393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5674:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5b:89:85:1d:c3:d0:b0:3c:cd:25:57:ba:cd:ff:df:18:a2:e9:
         ce:e1:fd:e8:3d:f1:41:1a:cc:6b:e4:97:13:72:ae:ac:7e:b0:
         e8:6f:91:0f:40:2b:f1:9b:8c:7f:dc:54:d5:3d:a2:e2:c8:00:
         69:2f:b1:30:fd:4e:57:d6:7f:99:ab:96:1f:cc:b1:5e:c2:23:
         1d:b5:f9:5c:d9:f4:b0:d2:6c:71:f5:df:61:64:61:42:90:28:
         5d:7e:19:c6:cf:46:5b:68:88:70:a2:44:b2:56:01:2e:b5:3e:
         01:dd:37:af:66:bd:76:bd:71:5a:db:82:53:60:51:50:ed:e0:
         4b:7d:4f:5c:45:64:41:72:83:11:9c:2e:1a:40:fc:aa:0e:50:
         e3:31:e7:fa:b9:33:57:d1:ca:5f:1d:1b:85:3a:0f:d6:d8:d7:
         8d:52:3c:90:bb:e7:d2:fb:29:3b:d0:8c:75:9d:13:12:f3:5c:
         92:9b:3a:1d:c2:48:d3:76:4b:6b:6e:79:9c:c1:35:30:3e:fb:
         47:0e:99:54:be:24:41:0e:15:46:ab:54:78:e8:53:ee:7d:c1:
         85:a5:13:25:15:f3:47:5f:d9:e8:cc:66:39:c0:3c:9d:57:e6:
         9c:5e:19:8c:26:04:9e:9d:b0:01:6e:17:52:cc:cd:5f:1b:29:
         95:0a:f4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org