Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/323830343a333163633a383030303a3a2f33332d3333203d3e20323635303338.roa
File:                     323830343a333163633a383030303a3a2f33332d3333203d3e20323635303338.roa (raw, json)
Hash identifier:          B3sQk2sZMp3HPBHy0BnLo26P2hJxJWcb1eIZINZ8BUQ=
Subject key identifier:   41:9C:65:D7:31:A2:F9:31:96:46:F1:88:3B:46:BE:22:61:B6:05:9B
Certificate issuer:       /CN=5D2F505068C7CAB71DCCC3F48DB65874FC79E6A8
Certificate serial:       602125561B9D3834380A1554689EC6E03CCC354D
Authority key identifier: 5D:2F:50:50:68:C7:CA:B7:1D:CC:C3:F4:8D:B6:58:74:FC:79:E6:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D2F505068C7CAB71DCCC3F48DB65874FC79E6A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/323830343a333163633a383030303a3a2f33332d3333203d3e20323635303338.roa
Signing time:             Tue 05 Mar 2024 19:26:01 +0000
ROA not before:           Tue 05 Mar 2024 19:21:01 +0000
ROA not after:            Tue 04 Mar 2025 19:26:01 +0000
asID:                     265038
IP address blocks:        2804:31cc:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:21:25:56:1b:9d:38:34:38:0a:15:54:68:9e:c6:e0:3c:cc:35:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D2F505068C7CAB71DCCC3F48DB65874FC79E6A8
        Validity
            Not Before: Mar  5 19:21:01 2024 GMT
            Not After : Mar  4 19:26:01 2025 GMT
        Subject: CN=419C65D731A2F9319646F1883B46BE2261B6059B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:49:76:56:ee:c1:d0:dc:59:f8:6c:8f:40:f7:
                    25:29:6a:63:d0:8e:56:58:33:6b:b0:f6:d2:05:dd:
                    3d:ae:75:ea:10:94:46:40:28:04:2c:29:7d:73:51:
                    1c:3f:6e:90:40:bf:e7:7f:44:25:66:15:bd:e6:8e:
                    bf:93:68:c2:6e:34:f8:a8:3e:50:b4:6b:68:4f:db:
                    b5:b7:2a:9a:93:98:0c:8f:df:08:aa:4f:d6:91:29:
                    1d:c5:a2:76:c6:07:01:b6:39:72:09:26:90:a3:6b:
                    fc:9e:13:55:bd:20:ef:14:7d:c4:a5:98:78:ad:4d:
                    28:64:1d:56:2d:76:5e:4e:92:52:2a:a5:1c:7a:75:
                    94:45:9c:88:42:07:4f:b9:28:1b:66:25:ea:b2:2c:
                    4a:a2:4c:53:35:ec:a0:3e:60:d4:15:90:fc:29:18:
                    89:12:dd:52:a7:d6:71:51:63:64:91:e8:ce:4c:33:
                    10:41:1a:e0:be:c7:1a:0c:60:1a:c8:b9:e1:60:ab:
                    cc:63:f0:9c:82:42:75:74:4e:c9:30:73:53:23:3e:
                    ac:73:e2:af:dd:4f:90:4e:3b:a8:8c:72:18:0f:da:
                    b3:fa:84:ba:82:29:54:43:24:42:57:55:64:59:9d:
                    a0:3a:da:d3:a2:88:4c:4c:1a:7b:e9:10:11:c6:99:
                    76:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:9C:65:D7:31:A2:F9:31:96:46:F1:88:3B:46:BE:22:61:B6:05:9B
            X509v3 Authority Key Identifier:
                keyid:5D:2F:50:50:68:C7:CA:B7:1D:CC:C3:F4:8D:B6:58:74:FC:79:E6:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/5D2F505068C7CAB71DCCC3F48DB65874FC79E6A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D2F505068C7CAB71DCCC3F48DB65874FC79E6A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/323830343a333163633a383030303a3a2f33332d3333203d3e20323635303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:31cc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         31:b3:4d:5d:b3:23:9f:b4:c9:67:52:39:fe:59:73:55:12:26:
         fe:fb:98:4f:cd:9f:96:bf:e7:0a:e7:ac:f5:39:7f:0f:7e:70:
         b2:28:62:d2:28:9d:fe:26:c6:14:76:ca:40:8a:3f:8f:b5:c7:
         64:fd:17:be:68:dc:90:fd:bf:d3:a6:0b:a6:40:85:23:f0:43:
         fd:e0:2b:3e:1d:1b:7c:fd:67:93:e4:de:96:cc:b2:85:af:06:
         ca:79:3a:9f:41:45:d0:8a:b6:7c:13:11:a8:f4:2e:08:d8:9e:
         46:ad:54:1f:ed:b6:4e:be:02:5d:98:0c:a3:f4:68:f3:47:83:
         00:8f:91:ca:0c:86:c8:c1:32:5b:57:ed:d5:1f:ec:c6:df:8d:
         42:f8:f4:74:2b:66:54:c5:d0:c8:41:ae:3f:0f:bd:5d:dd:72:
         03:93:26:5c:24:59:f1:e6:f7:5b:03:9e:6f:bf:21:56:83:93:
         6c:8a:42:b5:1b:6a:71:16:57:8a:ea:6f:00:17:64:e2:05:1e:
         10:1e:3b:ac:c3:3a:bb:f0:06:e2:63:d5:e7:b2:8a:5a:04:d3:
         a9:40:67:e8:b6:7f:85:99:01:f3:eb:dc:d1:e1:b6:4f:40:c0:
         4d:ab:fb:74:2e:60:46:94:1c:f9:37:91:1b:ea:4c:cf:8d:6c:
         dd:5e:a3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org