Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/323830343a313934633a3a2f33322d3438203d3e203631373835.roa
File:                     323830343a313934633a3a2f33322d3438203d3e203631373835.roa (raw, json)
Hash identifier:          z9DQG43jWWg2RFK8Z22IgQ1DL8ZQQIMKS/x/Y19KK9g=
Subject key identifier:   52:39:DF:03:EA:07:39:D9:2B:31:45:F5:96:4B:E9:EA:14:A7:FD:3A
Certificate issuer:       /CN=895CE9CC028EB09A717FF63AB3D6805F54210796
Certificate serial:       3AF31FE4B6E72CD1DCA0BC55E2B3B5B62CF2999D
Authority key identifier: 89:5C:E9:CC:02:8E:B0:9A:71:7F:F6:3A:B3:D6:80:5F:54:21:07:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/895CE9CC028EB09A717FF63AB3D6805F54210796.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/323830343a313934633a3a2f33322d3438203d3e203631373835.roa
Signing time:             Wed 14 Feb 2024 15:25:38 +0000
ROA not before:           Wed 14 Feb 2024 15:20:38 +0000
ROA not after:            Wed 12 Feb 2025 15:25:38 +0000
asID:                     61785
IP address blocks:        2804:194c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:f3:1f:e4:b6:e7:2c:d1:dc:a0:bc:55:e2:b3:b5:b6:2c:f2:99:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=895CE9CC028EB09A717FF63AB3D6805F54210796
        Validity
            Not Before: Feb 14 15:20:38 2024 GMT
            Not After : Feb 12 15:25:38 2025 GMT
        Subject: CN=5239DF03EA0739D92B3145F5964BE9EA14A7FD3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d8:a9:3a:9e:d8:54:74:10:b2:ca:a0:84:35:
                    3b:a7:13:47:53:93:96:21:62:30:d0:46:fe:52:07:
                    29:61:3f:38:6f:9c:1b:2f:10:a3:2f:78:24:89:2b:
                    59:62:b3:b3:0d:98:da:42:d9:0f:1c:95:27:fb:71:
                    93:6f:ba:b5:bc:7e:a1:25:53:4b:aa:e7:08:93:bd:
                    6f:e1:47:08:80:8b:7d:ef:5a:31:35:3a:37:80:1c:
                    a8:27:4c:d8:87:4b:9d:7a:a9:fb:25:f1:29:f4:48:
                    53:6b:49:c9:ab:04:8f:a4:cf:3d:3f:8b:b3:86:39:
                    e4:65:a9:8f:50:ac:c2:79:4c:0c:3b:55:a7:f7:5d:
                    fa:cf:d1:19:f5:9a:6c:05:81:d9:ae:3c:2f:60:0b:
                    36:70:36:2e:5e:ed:96:f7:7c:00:f5:45:cf:5e:89:
                    e0:c0:1d:ef:2c:30:bc:32:cc:35:15:b6:aa:23:db:
                    90:79:19:b1:d7:4b:36:29:d7:43:38:09:3e:2c:82:
                    66:f7:50:92:76:94:cd:d8:c8:a9:cb:35:94:f0:28:
                    81:fe:93:66:4b:82:33:fa:83:8a:b8:6f:31:47:f5:
                    21:da:3b:b9:46:16:3f:24:19:fa:f8:8c:da:21:ea:
                    17:2b:21:2b:79:6d:1e:c8:c4:a2:a5:13:f0:06:7c:
                    a6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:39:DF:03:EA:07:39:D9:2B:31:45:F5:96:4B:E9:EA:14:A7:FD:3A
            X509v3 Authority Key Identifier:
                keyid:89:5C:E9:CC:02:8E:B0:9A:71:7F:F6:3A:B3:D6:80:5F:54:21:07:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/895CE9CC028EB09A717FF63AB3D6805F54210796.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/895CE9CC028EB09A717FF63AB3D6805F54210796.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/323830343a313934633a3a2f33322d3438203d3e203631373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:194c::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:29:12:e4:e1:87:ae:73:3b:5b:04:94:58:ae:f3:01:7d:0f:
         1f:4b:50:a5:ba:2a:10:27:d1:1a:7a:e8:84:05:98:0d:41:be:
         85:c7:38:6e:c5:62:72:11:48:4c:86:cf:ad:8b:05:c1:67:b3:
         44:ef:a8:aa:d8:33:cd:a6:35:52:25:cb:94:7f:dc:3a:c2:78:
         3b:b5:10:f2:f6:09:8a:0e:5a:27:4d:4c:4f:64:d3:2b:e0:9b:
         2f:ff:02:4e:91:08:1c:86:2a:26:8e:5c:4c:5b:f1:69:68:68:
         ed:cc:e9:89:5d:1b:10:01:d7:b4:6b:5a:23:55:5a:bb:44:58:
         d4:f3:02:a1:da:f9:27:ee:0b:4f:0a:8e:34:2e:08:a6:af:5b:
         c9:0c:d1:15:4d:5a:9d:db:7b:ac:b4:31:9a:47:33:9a:61:01:
         94:d6:86:26:1b:45:2e:c8:a2:3a:a6:84:18:be:9e:83:32:bf:
         03:6c:4e:8c:31:d0:cd:1e:22:86:ed:a8:31:a3:ce:7d:93:a1:
         13:4a:0d:f9:d0:01:a3:0e:e2:0a:48:e3:81:46:c2:63:e8:14:
         6a:eb:87:0b:04:7a:8c:ef:c2:47:8b:27:42:4a:63:b9:27:0e:
         ac:ca:5b:14:af:22:a0:94:55:d4:33:0c:ed:f8:44:1d:6e:19:
         14:35:b2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org