Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a343030303a3a2f33342d3334203d3e20323731343738.roa
File:                     323830343a376332343a343030303a3a2f33342d3334203d3e20323731343738.roa (raw, json)
Hash identifier:          S1mJeRzcTTFOPjXYH9vrE9k4ICbKP7jq5IMFpqmmHtU=
Subject key identifier:   25:E0:31:8E:DA:A6:7E:1B:45:C7:CD:F3:FE:6A:DA:10:60:98:DF:4E
Certificate issuer:       /CN=5AC857044932470260E44A2750076A9293F37835
Certificate serial:       09CA014E7F4F37AEAD985660D3818682C155AE1E
Authority key identifier: 5A:C8:57:04:49:32:47:02:60:E4:4A:27:50:07:6A:92:93:F3:78:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AC857044932470260E44A2750076A9293F37835.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a343030303a3a2f33342d3334203d3e20323731343738.roa
Signing time:             Wed 31 Jan 2024 00:49:00 +0000
ROA not before:           Wed 31 Jan 2024 00:44:00 +0000
ROA not after:            Wed 29 Jan 2025 00:49:00 +0000
asID:                     271478
IP address blocks:        2804:7c24:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ca:01:4e:7f:4f:37:ae:ad:98:56:60:d3:81:86:82:c1:55:ae:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC857044932470260E44A2750076A9293F37835
        Validity
            Not Before: Jan 31 00:44:00 2024 GMT
            Not After : Jan 29 00:49:00 2025 GMT
        Subject: CN=25E0318EDAA67E1B45C7CDF3FE6ADA106098DF4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:aa:2b:af:80:5f:ca:ef:a7:ec:bf:79:ca:94:
                    d2:48:05:c1:cc:cd:0d:de:7c:28:fa:46:6d:34:40:
                    92:8c:ad:7b:49:f5:bf:ff:74:d2:2c:b0:0a:5c:fa:
                    47:54:86:8c:c1:42:d7:e3:43:a0:ea:03:fe:21:a1:
                    84:36:7b:fd:03:b4:14:9a:ee:74:b1:5d:0c:d8:36:
                    33:98:b9:3e:25:7d:57:b8:f6:80:bc:a3:0d:d8:69:
                    bc:4d:06:24:ee:0f:a6:31:a6:37:19:cc:3d:f7:b5:
                    8f:f1:c1:d4:65:42:d0:3d:a6:74:8f:5e:f3:65:92:
                    28:bf:90:ed:48:98:64:a4:f9:97:f8:bb:78:e4:30:
                    48:25:2a:0b:b9:e3:42:8d:89:79:1e:c8:3e:e6:73:
                    5c:44:60:84:8a:e9:16:f5:99:4e:e7:d0:b8:56:be:
                    59:e7:c3:c2:35:0f:81:20:ac:12:93:2c:94:bf:68:
                    54:8a:cc:7e:39:e3:ed:fc:4e:1b:dc:de:4f:0a:43:
                    94:bd:f6:76:86:8b:f2:c2:a8:13:d5:e5:91:8c:9f:
                    29:6c:fc:7e:eb:73:a2:bd:3c:d7:f8:62:da:a1:ec:
                    42:5a:0a:e5:ad:51:fd:55:6a:e7:e5:28:9f:51:5a:
                    0e:90:d0:c9:cc:4e:0b:fe:8e:f6:5b:55:7f:98:fc:
                    f6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E0:31:8E:DA:A6:7E:1B:45:C7:CD:F3:FE:6A:DA:10:60:98:DF:4E
            X509v3 Authority Key Identifier:
                keyid:5A:C8:57:04:49:32:47:02:60:E4:4A:27:50:07:6A:92:93:F3:78:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/5AC857044932470260E44A2750076A9293F37835.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AC857044932470260E44A2750076A9293F37835.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a343030303a3a2f33342d3334203d3e20323731343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c24:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         bb:38:12:80:66:60:4a:a1:43:23:53:f6:20:37:b2:10:12:10:
         ed:f6:4f:ee:6d:ce:cd:a2:c2:9a:e0:bb:dd:d2:6f:c0:5c:86:
         5a:a5:47:4d:ae:63:93:19:79:3c:f7:c9:0b:4a:ce:e1:99:2e:
         1b:29:b8:1b:65:ad:f2:68:fd:ad:f8:70:2d:07:ca:88:04:ef:
         6c:70:2b:98:2e:b5:61:e7:c6:7a:f6:90:27:06:dc:e6:54:7f:
         05:24:8b:ca:37:66:55:fb:60:35:15:56:f7:39:01:c9:e0:a8:
         79:d5:e4:35:08:db:bb:69:bf:a6:c1:53:83:16:17:fa:fb:79:
         d1:6a:ef:ba:a3:5a:90:74:b2:f9:ea:4b:a4:91:ce:85:bb:77:
         a4:36:b6:7e:a2:e6:12:45:55:24:56:70:63:30:7c:e9:f7:1e:
         92:a8:1e:fb:fb:85:0c:9c:79:da:a2:a0:9a:a2:49:f7:54:6b:
         2a:9d:8a:de:72:24:39:3e:30:8e:0b:c1:4d:cb:71:78:5b:ab:
         50:26:8a:61:f4:d4:9a:52:d8:4d:3b:22:d9:de:51:eb:3d:fc:
         ef:6a:c9:7a:00:10:c5:66:a3:2d:bc:dc:8f:f3:8d:b4:ba:23:
         bb:d3:52:77:94:ed:48:df:84:b8:1c:7e:2c:26:3e:9a:6f:53:
         29:d5:ed:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:39 2024 by rpki-client on console-ams.rpki-client.org