Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1/323830343a353938343a3a2f33332d3333203d3e20323638373037.roa
File:                     323830343a353938343a3a2f33332d3333203d3e20323638373037.roa (raw, json)
Hash identifier:          CPwDtA8QQ9VNbB7j57HtpWHHprUo866RFoGOn8OjvYQ=
Subject key identifier:   7F:E5:4A:DF:41:48:4B:4C:B1:87:18:8F:02:C0:54:43:A3:B9:5F:59
Certificate issuer:       /CN=CC95D6B1D2D0DBC38C7E7AAAA395D22249D491DB
Certificate serial:       51D70E65A8123104D77DCBBDCD48714EDF27AB75
Authority key identifier: CC:95:D6:B1:D2:D0:DB:C3:8C:7E:7A:AA:A3:95:D2:22:49:D4:91:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC95D6B1D2D0DBC38C7E7AAAA395D22249D491DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1/323830343a353938343a3a2f33332d3333203d3e20323638373037.roa
Signing time:             Thu 04 Apr 2024 00:32:44 +0000
ROA not before:           Thu 04 Apr 2024 00:27:44 +0000
ROA not after:            Thu 03 Apr 2025 00:32:44 +0000
asID:                     268707
IP address blocks:        2804:5984::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:d7:0e:65:a8:12:31:04:d7:7d:cb:bd:cd:48:71:4e:df:27:ab:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC95D6B1D2D0DBC38C7E7AAAA395D22249D491DB
        Validity
            Not Before: Apr  4 00:27:44 2024 GMT
            Not After : Apr  3 00:32:44 2025 GMT
        Subject: CN=7FE54ADF41484B4CB187188F02C05443A3B95F59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:89:8f:ea:65:88:76:51:e3:fc:35:3f:34:a4:
                    28:cb:c7:4d:b7:a5:66:92:80:9d:41:3b:4d:90:77:
                    fa:16:64:76:3c:c5:2e:ed:12:98:bf:c9:57:83:06:
                    51:12:aa:89:01:40:bb:02:11:2d:b0:34:17:a4:49:
                    7a:de:ab:5a:f3:c6:9a:5d:37:5f:05:79:8e:b1:22:
                    fe:78:e6:af:d2:49:da:e2:78:8b:03:06:c2:13:e1:
                    fc:30:8a:92:b0:4d:df:b1:36:d3:11:ec:bc:10:c0:
                    99:1b:b2:e0:dc:65:31:7f:98:e5:9e:8b:c8:c4:c1:
                    b9:e0:33:73:dd:5a:ea:39:57:44:2a:05:f2:d8:48:
                    35:9e:27:26:13:97:53:eb:d5:ae:f0:e1:b5:57:dd:
                    ad:08:e6:09:d2:2a:ca:6b:a5:66:b1:70:38:60:2c:
                    a7:32:de:cd:af:21:6f:f3:9c:5d:ec:b8:48:00:fd:
                    c3:5b:73:3c:e3:46:03:56:2d:fd:08:73:0d:19:b3:
                    23:48:d2:25:7c:35:a5:bc:e4:7d:a9:89:4a:51:13:
                    7e:59:67:d0:f0:14:48:10:3e:76:19:8c:13:81:ea:
                    fb:45:08:00:5a:b4:b9:9c:92:a2:e8:05:88:8d:32:
                    61:f3:37:3c:87:52:45:e1:bc:42:e4:15:af:f0:5c:
                    43:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E5:4A:DF:41:48:4B:4C:B1:87:18:8F:02:C0:54:43:A3:B9:5F:59
            X509v3 Authority Key Identifier:
                keyid:CC:95:D6:B1:D2:D0:DB:C3:8C:7E:7A:AA:A3:95:D2:22:49:D4:91:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1/CC95D6B1D2D0DBC38C7E7AAAA395D22249D491DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC95D6B1D2D0DBC38C7E7AAAA395D22249D491DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1/323830343a353938343a3a2f33332d3333203d3e20323638373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5984::/33

    Signature Algorithm: sha256WithRSAEncryption
         78:59:65:7f:c5:bd:05:7a:0f:86:eb:78:ea:df:da:5b:82:43:
         c1:78:a6:ec:e7:a7:8d:f5:85:14:84:10:8b:88:a4:c2:da:a3:
         41:8c:7e:4d:bb:9b:f6:66:ae:88:ac:4d:6e:5c:fc:d0:b5:24:
         57:ed:1e:50:cb:21:3b:af:4e:ea:f3:3f:91:14:46:b5:00:16:
         2d:88:90:b7:c4:44:d7:7a:62:15:f7:e3:77:52:aa:78:55:a0:
         4e:82:ea:c7:74:9d:ea:81:f2:0a:b6:f9:ae:e6:6d:de:56:50:
         67:b6:84:35:c5:a2:17:07:ca:56:58:8c:64:11:7b:a0:70:2f:
         61:d9:bc:04:d4:3f:f2:11:a0:80:dc:41:8b:75:d6:21:bd:b3:
         34:cc:df:b5:40:6f:70:47:96:8a:ac:6a:3c:0b:63:8c:d5:40:
         cf:20:6d:7e:42:70:1d:b3:a4:ed:3b:6d:95:e7:48:bc:43:28:
         4c:df:00:43:6e:8e:b8:71:0a:17:68:a7:12:85:f1:f5:99:e6:
         c6:60:17:64:8d:be:ea:1f:58:84:6a:ab:70:14:48:31:95:5c:
         bd:dc:2f:55:e3:f7:c1:41:7e:a4:05:75:42:c1:fc:5a:a4:14:
         46:f9:62:86:4c:ae:94:9f:f7:3a:5d:48:17:ee:71:2f:16:4a:
         07:e5:77:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org