Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1KXBKEi9BohNVkNHX9a1CoX5DXjPD6M3jsSBYN8ps9/0/323830343a313333633a3a2f33322d3438203d3e20323633353233.roa
File:                     323830343a313333633a3a2f33322d3438203d3e20323633353233.roa (raw, json)
Hash identifier:          LS1mAidGZYs4tCadEa7qaRLePjIYkfkKAuzGRW887ss=
Subject key identifier:   B1:B5:A8:37:72:CE:F0:77:A2:B2:08:47:70:A7:06:29:4E:75:52:70
Certificate issuer:       /CN=5AF95CE8A4BD4C2BB361F4A7ADA108EFEEB6C90D
Certificate serial:       61E19CD10EEE5EBA44B1F135EF69CA3BA17F0D60
Authority key identifier: 5A:F9:5C:E8:A4:BD:4C:2B:B3:61:F4:A7:AD:A1:08:EF:EE:B6:C9:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AF95CE8A4BD4C2BB361F4A7ADA108EFEEB6C90D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1KXBKEi9BohNVkNHX9a1CoX5DXjPD6M3jsSBYN8ps9/0/323830343a313333633a3a2f33322d3438203d3e20323633353233.roa
Signing time:             Thu 29 Jul 2021 21:37:00 +0000
ROA not before:           Thu 29 Jul 2021 21:32:00 +0000
ROA not after:            Thu 28 Jul 2022 21:37:00 +0000
asID:                     263523
IP address blocks:        2804:133c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:e1:9c:d1:0e:ee:5e:ba:44:b1:f1:35:ef:69:ca:3b:a1:7f:0d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AF95CE8A4BD4C2BB361F4A7ADA108EFEEB6C90D
        Validity
            Not Before: Jul 29 21:32:00 2021 GMT
            Not After : Jul 28 21:37:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3f:d6:4d:78:02:0f:b8:5e:ef:31:f6:aa:d1:
                    93:ce:7e:52:5e:4d:97:b0:fe:62:91:87:8e:df:dd:
                    62:50:bb:fb:a5:6b:ba:68:ef:9d:48:67:0d:83:5f:
                    70:3b:47:15:be:bf:bd:fa:32:fa:55:ee:ca:f1:6f:
                    37:b1:2b:2d:7f:94:38:78:c7:3d:48:ed:d9:56:43:
                    a8:b0:de:1b:e9:f6:48:33:e3:c3:70:d2:51:67:b3:
                    50:0c:07:80:48:29:c0:e3:32:be:40:6c:07:44:50:
                    1d:a1:d9:ac:93:9a:ea:b7:a4:32:30:a2:11:61:66:
                    c0:92:1b:56:dd:c2:5c:0d:21:d6:30:e1:0f:e4:8b:
                    61:e1:0e:d1:36:8e:39:85:5f:01:33:9e:28:ea:ab:
                    5b:ba:78:69:a1:c1:96:f3:e0:eb:fb:c3:26:69:22:
                    34:8a:b7:4c:c8:48:da:5e:ea:9b:f5:b4:e2:86:eb:
                    c3:32:21:fe:4e:aa:b3:7b:77:dc:bc:67:b0:57:39:
                    01:98:1b:3d:96:fd:07:7a:57:b2:ae:13:94:bf:31:
                    04:6b:c5:9b:0f:d1:0c:ed:a0:3f:0b:d6:d5:2e:5c:
                    88:9b:44:8f:1c:b9:35:db:ba:18:c5:7d:e5:88:06:
                    4a:ba:93:1c:ea:e2:91:3e:0e:33:75:55:39:d0:d5:
                    10:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B5:A8:37:72:CE:F0:77:A2:B2:08:47:70:A7:06:29:4E:75:52:70
            X509v3 Authority Key Identifier:
                keyid:5A:F9:5C:E8:A4:BD:4C:2B:B3:61:F4:A7:AD:A1:08:EF:EE:B6:C9:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1KXBKEi9BohNVkNHX9a1CoX5DXjPD6M3jsSBYN8ps9/0/5AF95CE8A4BD4C2BB361F4A7ADA108EFEEB6C90D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AF95CE8A4BD4C2BB361F4A7ADA108EFEEB6C90D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1KXBKEi9BohNVkNHX9a1CoX5DXjPD6M3jsSBYN8ps9/0/323830343a313333633a3a2f33322d3438203d3e20323633353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:133c::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:68:b2:2b:ce:e4:ac:8f:5c:27:9d:f8:77:f7:6b:67:f2:86:
         30:01:f2:87:c0:98:10:3b:44:c5:27:a9:7a:a3:d1:88:f5:82:
         92:15:97:c5:20:67:b1:b6:3d:f5:75:2e:2f:ed:ae:1d:ce:ee:
         93:22:15:f9:a0:c0:30:20:b7:72:3f:3e:5e:c8:68:bf:45:b7:
         cf:7d:e8:ec:e4:b5:f4:ea:92:36:b0:b7:3d:6c:b2:ca:2b:f3:
         41:f4:4f:12:a1:ca:a7:9e:15:ca:35:a6:c4:2f:d6:94:25:0b:
         25:85:4a:b0:e8:62:0c:63:de:a1:74:38:7c:58:43:75:3a:6e:
         71:02:29:3a:07:3b:07:a2:3e:b2:3d:e7:4e:f2:7b:57:86:a3:
         c9:63:c0:8b:e0:3b:5b:67:05:5b:94:04:f8:93:cc:c1:a6:bd:
         9d:f7:10:29:b4:6e:8a:43:32:cb:66:a9:23:3f:05:07:2c:32:
         03:8a:d7:bf:a0:93:b4:5c:d2:49:3a:96:5a:46:e7:d3:e1:ae:
         96:e4:90:9c:60:e8:27:fa:a0:08:3b:8e:08:92:3a:3e:21:99:
         1d:f0:b2:a2:9b:2e:2b:41:02:a1:b3:3a:93:b4:2d:84:1e:d8:
         6d:59:5c:40:f1:ce:d7:0c:ad:1b:02:8c:3d:69:fe:d5:71:ba:
         82:bb:ca:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:36 2024 by rpki-client on console-ams.rpki-client.org