Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/323830343a313934383a383030303a3a2f33332d3333203d3e203631373834.roa
File:                     323830343a313934383a383030303a3a2f33332d3333203d3e203631373834.roa (raw, json)
Hash identifier:          DIWj6IXr0WXLGUz2EBmsubc+LHadqhbp3BQFKe2CtAk=
Subject key identifier:   56:9E:2B:B5:D7:89:18:8C:6E:5B:D8:A9:72:A5:16:8C:48:B9:F9:AE
Certificate issuer:       /CN=3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354
Certificate serial:       706771DF2D16D1B40B6615B474B2FF905DFA2B9B
Authority key identifier: 32:88:CF:53:D1:AB:3A:AF:60:EE:40:EC:3D:B9:2E:EA:8D:58:E3:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/323830343a313934383a383030303a3a2f33332d3333203d3e203631373834.roa
Signing time:             Wed 03 Apr 2024 23:53:51 +0000
ROA not before:           Wed 03 Apr 2024 23:48:51 +0000
ROA not after:            Wed 02 Apr 2025 23:53:51 +0000
asID:                     61784
IP address blocks:        2804:1948:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:67:71:df:2d:16:d1:b4:0b:66:15:b4:74:b2:ff:90:5d:fa:2b:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354
        Validity
            Not Before: Apr  3 23:48:51 2024 GMT
            Not After : Apr  2 23:53:51 2025 GMT
        Subject: CN=569E2BB5D789188C6E5BD8A972A5168C48B9F9AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:55:96:34:af:ef:50:93:e9:3f:10:d4:fb:c3:
                    a7:77:11:18:4b:43:23:dd:23:b3:2d:20:76:d3:66:
                    b3:df:48:d4:2e:01:86:43:81:89:d1:b3:da:48:1c:
                    cf:3d:fb:e0:72:99:82:81:2f:ab:f9:a5:dc:ae:3d:
                    ab:79:ae:eb:f4:40:04:47:97:50:00:31:7f:3d:ca:
                    81:fd:a6:0c:a9:01:c0:18:e7:77:d6:cd:00:8f:11:
                    6c:f3:1b:30:3a:06:20:13:2a:77:70:4c:e6:61:c6:
                    98:9b:06:41:e1:24:8e:3b:11:f0:16:9e:12:2d:74:
                    68:6d:b5:3e:ca:58:85:65:29:54:f0:d5:ea:73:6e:
                    a7:47:9a:1c:e7:be:32:c3:69:fa:53:cb:de:dc:0a:
                    ed:80:3f:5d:a7:45:80:d8:dc:a9:14:64:5d:2a:c1:
                    a9:ed:1c:63:09:29:e3:6c:0a:ce:ef:05:57:2d:7a:
                    f8:6d:60:a6:a3:2e:89:69:a7:07:fc:d0:66:f9:3e:
                    4d:21:76:43:aa:87:e1:47:4c:0d:1d:9e:c5:47:c4:
                    2b:28:eb:f2:26:80:f4:24:f8:3f:7f:5f:d6:e2:8e:
                    56:18:82:60:8d:1f:52:28:3f:39:54:0d:ed:dc:cd:
                    87:10:80:8d:43:2e:8d:04:87:c7:ea:2d:11:08:d0:
                    80:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:9E:2B:B5:D7:89:18:8C:6E:5B:D8:A9:72:A5:16:8C:48:B9:F9:AE
            X509v3 Authority Key Identifier:
                keyid:32:88:CF:53:D1:AB:3A:AF:60:EE:40:EC:3D:B9:2E:EA:8D:58:E3:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/323830343a313934383a383030303a3a2f33332d3333203d3e203631373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1948:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         30:c7:51:19:7e:af:35:83:a4:9b:d3:4c:64:1e:c8:92:4f:41:
         59:16:88:2a:aa:2c:ec:57:d7:fc:0b:16:ad:98:35:df:b2:e7:
         72:0b:7e:af:38:f2:b7:02:f6:fc:a8:b5:a8:c4:d0:7a:57:6f:
         ac:a9:84:35:a3:81:18:56:c9:34:37:26:42:6b:19:c4:57:a2:
         49:76:26:59:9c:d9:90:f4:25:00:c9:2d:35:51:71:6e:e6:22:
         4d:52:b3:aa:50:56:7a:d5:57:82:0d:2c:e0:8a:09:4c:bd:55:
         35:12:18:55:f8:59:f3:8a:1a:12:90:89:0b:35:6a:6f:fc:03:
         4b:6b:5f:25:e3:af:9f:46:20:9b:db:f8:c5:8b:98:13:69:c8:
         c4:fd:41:b5:54:4c:38:fe:2f:0e:c0:cb:be:72:b5:a5:c9:f0:
         b1:16:5c:31:45:1e:45:0d:13:78:9f:89:95:e0:d0:05:b5:0a:
         52:81:53:28:e2:14:2e:1d:93:84:81:13:fb:dc:5a:89:d6:17:
         99:b4:4c:22:16:ad:31:d8:33:78:e4:b8:ac:bf:45:0c:4c:1d:
         51:83:53:7b:5d:02:7a:81:64:78:08:6a:a2:e9:63:34:8f:a8:
         25:3f:4a:19:10:78:c0:97:33:76:b5:f3:e2:92:ce:85:34:39:
         d3:69:8b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org