Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/1/323830343a353064343a3a2f33322d3438203d3e20323638343133.roa
File:                     323830343a353064343a3a2f33322d3438203d3e20323638343133.roa (raw, json)
Hash identifier:          a+M0LF2aVD5uCZ2tBTVmwssGmE04S/A7k6KqgeYiVXs=
Subject key identifier:   EC:C0:D4:23:23:4C:6F:4B:C1:C1:91:21:6F:D5:3D:61:FB:E3:E8:1A
Certificate issuer:       /CN=99D91B7B6734CFF62B364E11AAB9A956FAA5E1A4
Certificate serial:       0F7DBD065F60C5F22079A1C56ACF754357CEB352
Authority key identifier: 99:D9:1B:7B:67:34:CF:F6:2B:36:4E:11:AA:B9:A9:56:FA:A5:E1:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D91B7B6734CFF62B364E11AAB9A956FAA5E1A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/1/323830343a353064343a3a2f33322d3438203d3e20323638343133.roa
Signing time:             Thu 04 Apr 2024 04:27:28 +0000
ROA not before:           Thu 04 Apr 2024 04:22:28 +0000
ROA not after:            Thu 03 Apr 2025 04:27:28 +0000
asID:                     268413
IP address blocks:        2804:50d4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:7d:bd:06:5f:60:c5:f2:20:79:a1:c5:6a:cf:75:43:57:ce:b3:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D91B7B6734CFF62B364E11AAB9A956FAA5E1A4
        Validity
            Not Before: Apr  4 04:22:28 2024 GMT
            Not After : Apr  3 04:27:28 2025 GMT
        Subject: CN=ECC0D423234C6F4BC1C191216FD53D61FBE3E81A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:76:bc:2a:40:6e:91:d9:1c:a2:83:d2:1a:15:
                    ea:9e:ab:f0:85:ea:22:92:74:e5:3b:59:25:48:cf:
                    89:00:19:96:80:9d:c4:4c:e9:8b:6b:4a:3f:ab:96:
                    ef:05:d1:fc:5b:fc:bc:f1:da:d1:83:7b:7b:1b:7c:
                    38:7f:91:2a:78:9f:2c:af:ee:8c:63:d1:a6:dc:49:
                    0e:d5:6d:95:38:d2:c9:be:54:7d:2e:e6:fe:d3:4c:
                    aa:bd:c9:63:21:b4:63:69:84:36:62:61:9a:3e:b8:
                    2c:12:8f:91:a9:f0:de:78:8a:7b:50:b6:f1:70:d6:
                    41:d4:ea:8b:1b:78:e4:90:08:16:f0:ed:59:51:fd:
                    4b:8e:65:24:e8:6d:20:ff:fe:a5:f8:7b:08:a7:bd:
                    a2:75:d9:c1:bd:b5:2c:57:36:30:1b:e0:3a:8c:ff:
                    3b:d1:23:4f:7c:88:65:ac:37:1a:ef:6b:05:b5:9f:
                    56:93:66:ff:0a:d7:1b:2d:62:e0:95:ce:1c:15:4c:
                    cb:f8:db:22:f5:f4:b6:da:92:da:c8:30:d8:d0:3c:
                    f4:cb:1d:a8:ff:69:ad:33:f5:cb:16:f3:62:59:eb:
                    31:86:80:c0:30:fd:2f:49:6a:ae:0a:eb:11:00:e6:
                    bc:12:39:a2:c4:1d:90:99:ea:a8:73:7b:87:47:56:
                    31:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C0:D4:23:23:4C:6F:4B:C1:C1:91:21:6F:D5:3D:61:FB:E3:E8:1A
            X509v3 Authority Key Identifier:
                keyid:99:D9:1B:7B:67:34:CF:F6:2B:36:4E:11:AA:B9:A9:56:FA:A5:E1:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/1/99D91B7B6734CFF62B364E11AAB9A956FAA5E1A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D91B7B6734CFF62B364E11AAB9A956FAA5E1A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/1/323830343a353064343a3a2f33322d3438203d3e20323638343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:50d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:32:91:e8:2f:01:da:83:d2:c8:88:9b:6a:80:da:b3:42:34:
         b6:cb:88:cf:9b:61:fb:f8:01:c6:d8:28:cc:74:36:57:f5:87:
         69:04:e4:76:26:b0:f1:38:15:fe:72:34:3b:a1:04:3d:f3:0f:
         f7:e1:92:4b:56:dc:f5:45:93:76:d8:ac:b2:5f:64:d8:9f:e2:
         63:e8:3d:00:5d:27:33:94:e9:3c:d7:48:a5:d5:c3:3c:49:05:
         03:2e:a9:19:84:90:60:27:d2:d4:83:ad:d9:96:91:7b:cb:42:
         25:52:f3:9c:57:1d:26:7a:96:9b:95:07:d7:37:87:2b:98:c6:
         11:67:64:aa:32:a2:5d:dd:ba:47:7d:96:b2:2f:b5:2d:16:bb:
         66:bc:d2:c0:5a:71:08:1b:d9:0c:96:80:4f:28:80:38:5c:6f:
         81:ae:7c:a0:4f:bf:b5:3f:a2:6c:63:07:3a:2d:c9:b2:15:fa:
         23:74:ad:ec:1b:4a:d4:ad:55:ed:2f:e8:8c:4f:25:87:f8:1f:
         24:67:2a:50:95:6c:19:4d:81:05:a9:d5:8c:02:ee:f9:5e:27:
         78:7d:90:95:2a:3b:61:38:48:4f:cc:49:8f:9e:9a:2e:63:3b:
         ac:4d:67:07:cd:75:1f:c5:05:b0:30:b2:86:cd:5c:3f:7c:69:
         75:ea:46:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org