Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/323830343a316330343a666630303a3a2f34302d3430203d3e203631363333.roa
File:                     323830343a316330343a666630303a3a2f34302d3430203d3e203631363333.roa (raw, json)
Hash identifier:          S+W9ITFSKupf9eRAtFIR/48knD8zW0AnLTzt9RUi8Zk=
Subject key identifier:   27:90:EA:8B:BA:5B:12:BD:8B:70:49:94:16:B8:8C:F4:AE:BF:1A:D2
Certificate issuer:       /CN=1D16A29FF5A822EA4EF70D6E05227DB9CFC579EF
Certificate serial:       546826BA36A0601D4F03A0CB417866BD24F7B7AC
Authority key identifier: 1D:16:A2:9F:F5:A8:22:EA:4E:F7:0D:6E:05:22:7D:B9:CF:C5:79:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D16A29FF5A822EA4EF70D6E05227DB9CFC579EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/323830343a316330343a666630303a3a2f34302d3430203d3e203631363333.roa
Signing time:             Fri 23 Aug 2024 19:54:48 +0000
ROA not before:           Fri 23 Aug 2024 19:49:48 +0000
ROA not after:            Fri 22 Aug 2025 19:54:48 +0000
asID:                     61633
IP address blocks:        2804:1c04:ff00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:68:26:ba:36:a0:60:1d:4f:03:a0:cb:41:78:66:bd:24:f7:b7:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D16A29FF5A822EA4EF70D6E05227DB9CFC579EF
        Validity
            Not Before: Aug 23 19:49:48 2024 GMT
            Not After : Aug 22 19:54:48 2025 GMT
        Subject: CN=2790EA8BBA5B12BD8B70499416B88CF4AEBF1AD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:32:1a:bb:68:22:fe:ac:aa:c0:fb:74:73:6c:
                    4d:7b:58:fd:96:bf:99:49:19:97:84:67:31:fa:a1:
                    3a:9e:78:94:7a:2b:a2:0f:2d:05:13:4c:30:92:24:
                    7e:f8:25:bd:59:da:60:e6:e0:52:c5:d2:99:92:cf:
                    e6:e6:0f:3b:48:de:8b:01:c6:61:4e:84:29:c3:be:
                    ba:09:dc:1d:33:75:81:fc:97:38:f5:a3:71:e9:53:
                    9f:41:76:f1:c6:55:80:d6:7c:82:54:67:52:1a:68:
                    39:e5:e9:1b:c7:8c:72:d1:af:8f:6c:41:33:00:af:
                    e2:27:4e:e4:fb:d6:b2:58:e1:17:a7:a8:78:60:67:
                    33:8a:da:8a:5a:d8:3f:91:e3:52:a5:3f:0d:42:45:
                    27:8c:68:d8:2a:62:fe:ff:20:cb:31:f7:88:4d:d4:
                    f8:58:55:0e:99:1a:3f:08:de:53:2b:0d:11:31:b7:
                    cd:e2:79:cc:88:4b:65:11:ec:3b:0c:b9:28:a5:bb:
                    73:93:cb:f2:c3:1f:1a:43:b2:36:98:3d:65:38:9a:
                    b2:73:f5:16:a8:17:87:64:5d:32:e6:5c:82:6d:89:
                    76:09:e4:8c:69:d6:fd:31:84:80:4d:89:eb:17:e3:
                    5e:96:1f:ef:cc:d2:6b:57:eb:79:42:0d:ec:9c:9c:
                    a6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:90:EA:8B:BA:5B:12:BD:8B:70:49:94:16:B8:8C:F4:AE:BF:1A:D2
            X509v3 Authority Key Identifier:
                keyid:1D:16:A2:9F:F5:A8:22:EA:4E:F7:0D:6E:05:22:7D:B9:CF:C5:79:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/1D16A29FF5A822EA4EF70D6E05227DB9CFC579EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D16A29FF5A822EA4EF70D6E05227DB9CFC579EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/323830343a316330343a666630303a3a2f34302d3430203d3e203631363333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c04:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         bb:4d:b3:f6:5d:69:d6:23:3b:e0:aa:b8:d9:24:20:77:07:83:
         e7:d9:23:a0:15:63:26:bc:01:ba:a0:4e:9c:c2:ee:ac:3e:2c:
         09:a6:86:e8:72:3d:71:90:0f:1e:da:fc:5d:79:02:bf:2f:f5:
         ea:64:43:fe:2d:95:c3:4c:a1:ac:b3:b2:19:25:74:e6:3a:74:
         4c:e6:26:38:d3:0a:22:10:37:4d:e9:32:e2:0f:5a:53:d3:63:
         c7:6f:92:5a:04:dc:fb:a0:03:d9:7b:45:d1:12:c0:c5:90:71:
         68:9a:b6:83:3a:50:3d:e1:c0:9f:59:d5:ac:8e:4f:55:2e:5a:
         f1:33:78:fa:c8:c5:e0:f6:c1:5a:b0:ad:f7:d3:eb:87:02:ef:
         13:88:d3:c1:73:27:86:69:e2:9c:7f:ff:fd:37:48:ae:5e:d1:
         8d:e1:4c:84:e3:20:16:40:94:e5:e0:f7:41:6a:66:84:de:dc:
         b1:f9:58:b8:bc:fb:c1:09:bf:68:2d:bd:b0:76:a9:1d:99:63:
         9d:4c:b9:31:a0:49:e6:f0:d5:b6:02:93:df:1c:8a:ba:5e:3b:
         58:24:52:30:f3:09:75:72:c0:2b:fe:df:e4:47:04:96:04:5e:
         17:de:ba:de:78:38:ac:10:66:46:47:01:7c:6e:34:b4:dc:76:
         5b:20:3b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 13:32:28 2024 by rpki-client on console-ams.rpki-client.org