Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/2/323830343a353637343a3a2f33322d3332203d3e20323637393939.roa
File:                     323830343a353637343a3a2f33322d3332203d3e20323637393939.roa (raw, json)
Hash identifier:          1NpZHpgZHPzjPY3kLL3hbSHriCD2PJCesAf7FSbkc30=
Subject key identifier:   83:9C:4D:83:3C:95:A4:32:6C:0D:E0:D3:64:57:43:EC:F4:3C:E7:B8
Certificate issuer:       /CN=97DFA5B9AAD5FA9141F4ECCECB06D72AABDB0E32
Certificate serial:       443A1DADF5848C627EF70AA06742CCE905583744
Authority key identifier: 97:DF:A5:B9:AA:D5:FA:91:41:F4:EC:CE:CB:06:D7:2A:AB:DB:0E:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97DFA5B9AAD5FA9141F4ECCECB06D72AABDB0E32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/2/323830343a353637343a3a2f33322d3332203d3e20323637393939.roa
Signing time:             Thu 04 Apr 2024 23:08:49 +0000
ROA not before:           Thu 04 Apr 2024 23:03:49 +0000
ROA not after:            Thu 03 Apr 2025 23:08:49 +0000
asID:                     267999
IP address blocks:        2804:5674::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:3a:1d:ad:f5:84:8c:62:7e:f7:0a:a0:67:42:cc:e9:05:58:37:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97DFA5B9AAD5FA9141F4ECCECB06D72AABDB0E32
        Validity
            Not Before: Apr  4 23:03:49 2024 GMT
            Not After : Apr  3 23:08:49 2025 GMT
        Subject: CN=839C4D833C95A4326C0DE0D3645743ECF43CE7B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e2:91:66:38:ff:34:1c:79:e3:70:fd:f4:56:
                    d5:5b:b6:fc:96:78:a8:b4:a5:0d:4a:0e:22:74:f5:
                    cf:e8:8f:bd:f0:56:12:e2:d5:dd:63:93:3d:41:c3:
                    56:49:8d:86:cc:af:2b:89:9e:f5:41:40:bc:f0:76:
                    81:9c:5f:4f:9f:3b:72:1e:62:0e:02:9f:0a:24:70:
                    61:23:5f:70:5a:01:5f:29:85:a9:c4:22:61:6e:a6:
                    bb:52:00:54:31:02:99:23:32:79:81:b7:43:72:c7:
                    81:c4:be:5e:18:a8:3d:35:e9:d4:b8:e1:e9:0a:e5:
                    cd:4c:cf:64:9a:98:b3:f9:96:ea:6c:f3:07:b5:d4:
                    94:55:11:22:80:3d:3f:43:e5:5f:a8:5b:83:63:20:
                    93:78:6c:dc:6a:5d:75:a2:47:cb:af:8f:d0:97:b3:
                    c3:48:2a:a4:bd:7e:44:fc:5d:12:01:a5:17:eb:90:
                    45:0f:bb:30:fd:f8:30:30:bd:8c:ed:d4:fe:9b:89:
                    25:ff:97:ff:8e:84:74:61:a5:a6:22:16:02:8a:34:
                    6c:05:cf:77:2a:1c:f6:04:97:b9:e6:ca:a9:12:db:
                    f3:21:e4:9d:ad:b0:53:55:3b:00:cd:c0:27:bf:b4:
                    eb:08:bf:83:15:55:2b:b2:59:8a:dd:a0:34:63:5c:
                    a7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:9C:4D:83:3C:95:A4:32:6C:0D:E0:D3:64:57:43:EC:F4:3C:E7:B8
            X509v3 Authority Key Identifier:
                keyid:97:DF:A5:B9:AA:D5:FA:91:41:F4:EC:CE:CB:06:D7:2A:AB:DB:0E:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/2/97DFA5B9AAD5FA9141F4ECCECB06D72AABDB0E32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97DFA5B9AAD5FA9141F4ECCECB06D72AABDB0E32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/2/323830343a353637343a3a2f33322d3332203d3e20323637393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5674::/32

    Signature Algorithm: sha256WithRSAEncryption
         d2:7f:46:12:72:1a:fb:9b:cf:6a:64:7a:ac:77:78:30:3a:16:
         2f:3d:76:56:df:d1:ba:f7:a6:dd:44:12:78:d0:2f:16:cd:8a:
         ef:55:4b:2c:da:1d:82:84:e8:16:20:43:eb:dd:b8:4c:8b:71:
         4b:ee:6a:b0:b7:af:4d:c0:b7:06:74:dd:e5:5f:b8:0a:21:9c:
         f8:5b:93:e4:84:a8:66:06:48:15:41:91:3b:82:27:33:e0:21:
         bd:3b:b5:a2:87:fc:d6:4a:db:91:fb:f9:c8:76:49:60:cb:92:
         09:c5:4b:ae:57:92:7a:75:8e:cb:83:77:15:4a:b4:a5:b0:c1:
         cf:f8:e8:9d:7f:19:43:45:0b:58:b6:72:3f:87:fa:0e:21:d4:
         c0:c8:eb:81:ae:eb:79:e9:fa:35:38:d2:43:f5:fe:55:de:76:
         13:b0:08:f7:5d:68:e6:e9:e4:87:d1:cf:a0:25:33:c4:f7:58:
         bd:22:9e:c7:29:db:37:88:29:45:5d:e5:4d:43:d3:bd:72:12:
         41:e1:5f:57:49:9f:5f:d6:fd:bd:52:59:bc:d7:28:05:90:94:
         48:51:10:07:60:f9:7c:ee:81:bc:a1:55:9c:9d:3e:0c:93:5b:
         d0:87:a5:c1:77:87:68:e1:a4:41:04:46:7f:c4:7c:6e:f5:26:
         8f:33:0b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org