Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/0/323830343a356335303a3a2f33322d313238203d3e20323638393031.roa
File:                     323830343a356335303a3a2f33322d313238203d3e20323638393031.roa (raw, json)
Hash identifier:          shq3g4uH+pUTbCoe7ttkwvcU6Z1/zwgg32S/R9bU9Jw=
Subject key identifier:   9B:52:AE:AD:9C:D2:26:D0:BE:18:E9:B5:E9:0E:94:BC:0D:56:85:F7
Certificate issuer:       /CN=090143127CBEDB52EA1848A31952B3D95EA9647C
Certificate serial:       0541716117FA6724F0E4B010C0B0648ACE6C1112
Authority key identifier: 09:01:43:12:7C:BE:DB:52:EA:18:48:A3:19:52:B3:D9:5E:A9:64:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/090143127CBEDB52EA1848A31952B3D95EA9647C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/0/323830343a356335303a3a2f33322d313238203d3e20323638393031.roa
Signing time:             Mon 12 Feb 2024 15:54:59 +0000
ROA not before:           Mon 12 Feb 2024 15:49:59 +0000
ROA not after:            Mon 10 Feb 2025 15:54:59 +0000
asID:                     268901
IP address blocks:        2804:5c50::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:41:71:61:17:fa:67:24:f0:e4:b0:10:c0:b0:64:8a:ce:6c:11:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=090143127CBEDB52EA1848A31952B3D95EA9647C
        Validity
            Not Before: Feb 12 15:49:59 2024 GMT
            Not After : Feb 10 15:54:59 2025 GMT
        Subject: CN=9B52AEAD9CD226D0BE18E9B5E90E94BC0D5685F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:49:80:1b:cd:77:b3:89:11:9e:ff:df:3b:5d:
                    20:7a:10:48:df:09:a6:e5:b0:06:a5:10:60:0b:e8:
                    20:b1:e0:8d:38:f8:34:47:79:d4:0f:2b:8a:e7:ff:
                    ad:e0:cf:79:a9:e6:58:51:71:45:5c:31:7b:05:48:
                    5a:a9:ce:0c:c8:2d:9c:6a:5e:3d:68:31:4b:d5:1b:
                    b3:37:5e:f3:07:a3:85:0a:81:f3:0e:aa:ed:e4:5a:
                    f2:ca:cb:08:14:59:a0:4f:b7:3a:b1:8d:45:dc:33:
                    18:86:eb:d8:8a:4c:cc:ec:f7:8c:37:19:28:fa:66:
                    0f:0a:b8:2a:d2:0d:66:39:b4:19:9b:0b:42:b5:6b:
                    27:9a:ab:69:b5:87:50:f4:df:33:a5:e1:a3:b2:c2:
                    f0:68:36:68:50:98:08:7e:5d:27:3d:25:5a:ad:e0:
                    8e:eb:fc:55:b0:9b:ba:cf:fd:1d:77:09:5a:77:64:
                    8d:28:79:99:13:5f:55:e8:38:74:16:52:17:f7:a2:
                    47:cc:d7:89:d2:31:38:81:6e:e2:c3:e5:cb:6b:e1:
                    51:47:f0:67:12:d8:53:07:2a:f9:a9:a5:de:16:52:
                    2d:98:49:c3:b6:d2:17:1a:0f:9c:68:5d:f5:21:bd:
                    fb:ac:f5:7d:36:07:4b:72:9e:ef:0a:57:2d:e4:13:
                    96:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:52:AE:AD:9C:D2:26:D0:BE:18:E9:B5:E9:0E:94:BC:0D:56:85:F7
            X509v3 Authority Key Identifier:
                keyid:09:01:43:12:7C:BE:DB:52:EA:18:48:A3:19:52:B3:D9:5E:A9:64:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/0/090143127CBEDB52EA1848A31952B3D95EA9647C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/090143127CBEDB52EA1848A31952B3D95EA9647C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/0/323830343a356335303a3a2f33322d313238203d3e20323638393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c50::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:cf:c4:e8:53:4a:48:97:67:3d:c0:a4:16:c5:46:3d:cf:8c:
         c9:74:b5:a5:b4:10:47:15:b7:c0:51:f8:4c:fa:4d:8d:ad:9b:
         bd:20:e0:c0:75:59:e7:06:20:db:f1:6f:08:57:42:fc:e6:bb:
         1b:cb:c5:ee:4c:78:07:fe:64:cd:77:46:0b:07:c6:8b:8c:98:
         68:72:24:6d:30:6b:83:91:4b:62:df:b6:e4:f8:1f:5d:11:79:
         c7:be:61:e5:3e:8e:7b:24:b7:50:3a:6f:fe:00:67:d1:e6:dc:
         08:12:c0:b4:cd:31:32:c6:b2:4f:b0:3f:9f:18:fb:69:7f:6c:
         08:c8:de:a4:80:c3:bf:04:8e:40:30:b3:f2:16:7d:65:55:75:
         4c:74:00:fe:18:05:d7:3d:5d:8f:84:7c:3d:da:5f:9a:e3:40:
         a1:94:84:87:6c:88:fb:24:77:ff:76:3d:3d:74:4e:05:9d:bc:
         0d:58:fa:b7:11:30:39:1b:14:5e:7f:95:c4:b1:88:67:fa:ac:
         1d:c3:3b:0d:c8:35:9a:d1:ce:07:27:50:d4:c0:92:e7:bf:9f:
         c4:97:23:8f:9d:84:c7:78:52:f9:9b:91:7e:4a:8e:1a:99:c6:
         e1:55:9c:7f:43:d8:21:6c:34:fe:e6:04:2e:74:2d:22:e2:b4:
         ea:cf:cf:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org