Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1/323830343a353938343a386430303a3a2f34302d3430203d3e20323638373037.roa
File:                     323830343a353938343a386430303a3a2f34302d3430203d3e20323638373037.roa (raw, json)
Hash identifier:          /WsQhIjKmL1D2y/2swmTgDMW+4PP4txd1Mr/9UV+LR4=
Subject key identifier:   8E:A3:8F:AD:24:06:E7:34:3A:C0:B2:08:FD:C6:9E:EB:D3:AC:7A:70
Certificate issuer:       /CN=CC95D6B1D2D0DBC38C7E7AAAA395D22249D491DB
Certificate serial:       58C2D2181700F8FFD3A33B1FF50F537B16A88EEF
Authority key identifier: CC:95:D6:B1:D2:D0:DB:C3:8C:7E:7A:AA:A3:95:D2:22:49:D4:91:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC95D6B1D2D0DBC38C7E7AAAA395D22249D491DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1/323830343a353938343a386430303a3a2f34302d3430203d3e20323638373037.roa
Signing time:             Thu 04 Apr 2024 00:32:44 +0000
ROA not before:           Thu 04 Apr 2024 00:27:44 +0000
ROA not after:            Thu 03 Apr 2025 00:32:44 +0000
asID:                     268707
IP address blocks:        2804:5984:8d00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c2:d2:18:17:00:f8:ff:d3:a3:3b:1f:f5:0f:53:7b:16:a8:8e:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC95D6B1D2D0DBC38C7E7AAAA395D22249D491DB
        Validity
            Not Before: Apr  4 00:27:44 2024 GMT
            Not After : Apr  3 00:32:44 2025 GMT
        Subject: CN=8EA38FAD2406E7343AC0B208FDC69EEBD3AC7A70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:09:34:99:9e:38:71:5f:6e:45:7b:32:9f:07:
                    46:34:cc:da:b7:a4:21:1e:58:4c:1a:19:2e:8a:a7:
                    61:db:c4:d1:cb:f6:8c:7a:eb:b2:1d:de:e1:a1:9c:
                    d4:1f:f9:a6:89:89:2b:1f:35:74:46:16:74:0b:c7:
                    b7:d2:18:da:99:e2:d8:6e:5d:81:76:07:49:d1:fe:
                    9d:25:2a:4b:ef:98:56:af:42:e8:04:ad:64:f0:b1:
                    6c:a2:e5:7e:89:ed:35:8c:b3:8b:a8:02:c2:48:e8:
                    54:ee:e0:00:99:84:9a:8e:5a:4f:5d:9e:21:5c:59:
                    4f:e4:4c:e1:8f:2c:39:d5:1f:bf:d8:6f:b1:ea:b9:
                    79:bd:48:52:6a:71:f8:59:7d:d4:e1:cd:87:24:97:
                    12:c1:21:17:c8:a8:32:a8:b1:89:ff:9f:81:6b:27:
                    fc:94:b2:ff:34:5e:18:17:e4:65:46:04:7c:c4:cb:
                    85:c8:23:3a:b8:8f:32:35:60:85:12:9f:38:ad:3c:
                    a3:34:6e:ae:df:32:3e:e6:a2:8e:23:9e:d1:56:96:
                    eb:4f:55:ba:5d:d7:6e:5c:e1:62:e9:60:66:d2:f8:
                    e9:8d:ef:71:e8:1e:11:28:7a:a8:4c:31:f0:47:30:
                    21:e0:b1:6a:9f:85:1e:50:5d:33:44:99:79:20:5f:
                    07:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A3:8F:AD:24:06:E7:34:3A:C0:B2:08:FD:C6:9E:EB:D3:AC:7A:70
            X509v3 Authority Key Identifier:
                keyid:CC:95:D6:B1:D2:D0:DB:C3:8C:7E:7A:AA:A3:95:D2:22:49:D4:91:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1/CC95D6B1D2D0DBC38C7E7AAAA395D22249D491DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC95D6B1D2D0DBC38C7E7AAAA395D22249D491DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1/323830343a353938343a386430303a3a2f34302d3430203d3e20323638373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5984:8d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         8f:0d:e5:0e:89:68:73:66:54:a1:7a:d5:2a:a9:34:b9:9d:74:
         b7:53:81:15:90:69:63:3e:13:7a:29:19:60:db:80:27:d8:6e:
         22:0c:a2:47:78:55:5c:25:14:cc:b3:7d:5b:e0:85:58:dd:03:
         42:08:b5:55:1f:ca:77:a8:e3:38:30:2f:ee:9a:52:a7:dd:f8:
         13:52:74:64:b0:fa:dd:a1:e8:79:0e:9a:7d:54:9d:7b:f6:7a:
         dd:a0:f2:c5:79:f3:82:15:85:b3:49:86:33:6f:58:31:1d:bc:
         9a:aa:de:68:26:9a:aa:3e:43:0f:44:bd:68:aa:cc:37:14:c3:
         5b:ea:cf:dd:c7:ca:c7:05:2e:15:47:ad:ac:11:5e:38:b4:55:
         71:8b:db:51:14:2a:32:c7:d5:1d:df:87:5e:8b:eb:26:f2:65:
         8e:04:5e:85:22:de:7a:f7:0b:c8:ec:dc:22:1f:be:f1:73:3e:
         d6:6b:9c:14:a8:61:a6:01:52:22:31:cb:ad:19:4b:ba:47:a8:
         5b:d1:c8:a3:8c:d5:fb:3f:67:f3:30:ba:75:ca:3c:1a:b0:df:
         24:cb:15:93:e7:5e:92:77:9d:43:e3:d4:d9:02:b0:91:6b:6c:
         d0:94:86:25:2d:8f:92:ee:62:14:96:1c:9f:25:38:a0:b4:45:
         a9:0c:14:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:32 2024 by rpki-client on console-ams.rpki-client.org