Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CU9wAiVouiMVuWoaDp5fEvdLPTrKtVbNwAg2rKpwaQAA/0/323830343a313632383a3a2f33322d3332203d3e20323633323731.roa
File:                     323830343a313632383a3a2f33322d3332203d3e20323633323731.roa (raw, json)
Hash identifier:          jG6gUj04rK+TVt34mpwq/DKL+vNNyh6UN712TNZb3Nc=
Subject key identifier:   AE:3C:4B:B8:0C:CC:1B:EF:60:90:B6:F4:DA:7B:87:2B:59:83:69:63
Certificate issuer:       /CN=0CDD5188965FFFE43C008A41D0033C4E7DB447F1
Certificate serial:       24CFD98D1AFDDC096DF435A81EF2FC6A018A42B2
Authority key identifier: 0C:DD:51:88:96:5F:FF:E4:3C:00:8A:41:D0:03:3C:4E:7D:B4:47:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CDD5188965FFFE43C008A41D0033C4E7DB447F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CU9wAiVouiMVuWoaDp5fEvdLPTrKtVbNwAg2rKpwaQAA/0/323830343a313632383a3a2f33322d3332203d3e20323633323731.roa
Signing time:             Fri 24 Mar 2023 01:37:44 +0000
ROA not before:           Fri 24 Mar 2023 01:32:44 +0000
ROA not after:            Fri 22 Mar 2024 01:37:44 +0000
asID:                     263271
IP address blocks:        2804:1628::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:cf:d9:8d:1a:fd:dc:09:6d:f4:35:a8:1e:f2:fc:6a:01:8a:42:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CDD5188965FFFE43C008A41D0033C4E7DB447F1
        Validity
            Not Before: Mar 24 01:32:44 2023 GMT
            Not After : Mar 22 01:37:44 2024 GMT
        Subject: CN=AE3C4BB80CCC1BEF6090B6F4DA7B872B59836963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b2:71:8c:37:fe:39:e8:ab:94:a6:60:e1:ab:
                    1a:af:c1:2c:63:03:fd:56:34:d1:ce:7b:10:96:3c:
                    1a:f5:43:f4:33:ac:1e:48:21:5c:26:1f:92:9a:0e:
                    91:d3:06:0a:41:76:a5:04:e6:2d:5f:76:f9:b4:be:
                    49:44:63:40:36:85:f7:8e:c4:47:36:12:53:91:61:
                    09:06:47:01:19:95:2e:2f:bd:44:15:ab:34:4c:f1:
                    c0:0a:fc:d6:99:e9:8c:02:5b:27:8e:67:4d:85:41:
                    f4:ca:22:9a:1b:c9:3d:cb:e4:50:c8:38:86:d2:6b:
                    4b:be:73:3c:d0:0d:c7:06:ef:96:5b:55:26:82:0e:
                    e4:e0:b6:6e:9b:d7:39:9c:ca:3a:d2:5a:67:5d:fa:
                    87:a9:7b:66:1e:32:d2:0d:77:80:ca:0e:81:3c:ff:
                    fc:68:15:33:28:f5:cc:af:98:82:38:6c:75:fe:67:
                    e4:35:39:c6:0d:ee:74:88:85:c0:f5:16:e4:50:ba:
                    a9:b1:2f:7f:98:61:03:5c:3a:62:1d:ee:f4:a1:96:
                    f3:ef:6e:65:6e:c1:46:0e:36:7d:33:d7:1e:90:15:
                    34:99:18:37:78:43:6e:68:e2:e4:e8:6f:2c:81:04:
                    6c:ee:8a:d4:85:1c:76:f5:0c:da:47:cb:8a:34:bb:
                    a1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:3C:4B:B8:0C:CC:1B:EF:60:90:B6:F4:DA:7B:87:2B:59:83:69:63
            X509v3 Authority Key Identifier:
                keyid:0C:DD:51:88:96:5F:FF:E4:3C:00:8A:41:D0:03:3C:4E:7D:B4:47:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CU9wAiVouiMVuWoaDp5fEvdLPTrKtVbNwAg2rKpwaQAA/0/0CDD5188965FFFE43C008A41D0033C4E7DB447F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CDD5188965FFFE43C008A41D0033C4E7DB447F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CU9wAiVouiMVuWoaDp5fEvdLPTrKtVbNwAg2rKpwaQAA/0/323830343a313632383a3a2f33322d3332203d3e20323633323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1628::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:0e:1b:fd:9c:d6:af:b4:d5:43:ce:0a:35:b4:db:e0:12:d0:
         7e:d1:6e:9e:f4:40:0f:3f:09:f9:04:b3:92:0b:e8:0f:e2:97:
         0e:c3:f0:a0:5c:c6:b4:af:5c:6b:f2:f0:ad:35:db:b8:fd:77:
         75:99:b0:17:b9:5d:95:a6:20:53:57:63:79:02:a8:9e:34:75:
         a3:33:99:23:37:75:c3:46:5d:89:ee:da:c3:09:d4:2e:38:cf:
         08:25:f6:0f:c9:33:ae:ea:f0:5f:d5:e3:f6:a5:fe:2e:73:b5:
         77:4e:13:83:cd:b0:1f:e1:c7:27:10:45:38:a7:53:13:17:ab:
         a5:99:2e:a3:a9:be:34:06:d1:79:54:6e:eb:05:29:a8:ec:a2:
         de:59:b6:30:df:93:f4:76:1e:c5:85:d3:2b:27:fa:45:7a:40:
         58:82:5e:b7:04:74:b1:8c:ac:3e:2b:72:33:2c:99:01:f7:21:
         aa:23:fb:40:eb:36:dd:31:38:9b:f5:35:53:98:ff:9c:1e:08:
         e2:f6:da:37:5b:e0:64:80:33:75:d4:1a:d2:e0:b6:fa:75:26:
         e2:b8:bb:2e:30:87:9c:36:8f:ee:89:46:91:d5:c6:d2:c8:74:
         50:5c:04:9a:41:f7:37:c3:e1:19:80:ff:c8:08:27:5d:72:e6:
         6c:5f:ff:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:05 2024 by rpki-client on console-ams.rpki-client.org