Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a3a2f33322d3332203d3e20323733363036.roa
File:                     323830343a383937383a3a2f33322d3332203d3e20323733363036.roa (raw, json)
Hash identifier:          ++LCJiEusJMGIU/dfWh+EfLJ02Zd9T68K6Lw+3Ainyw=
Subject key identifier:   1D:A9:2B:2E:D6:E4:84:35:40:CC:A1:4E:F6:89:53:84:EC:A5:AA:F8
Certificate issuer:       /CN=AF57D8ABF92B4526A323E0F5712CC22330A693BB
Certificate serial:       72222F460B40FD4A23279B2724BC32E1A6556E24
Authority key identifier: AF:57:D8:AB:F9:2B:45:26:A3:23:E0:F5:71:2C:C2:23:30:A6:93:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF57D8ABF92B4526A323E0F5712CC22330A693BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a3a2f33322d3332203d3e20323733363036.roa
Signing time:             Sat 24 Feb 2024 03:41:54 +0000
ROA not before:           Sat 24 Feb 2024 03:36:54 +0000
ROA not after:            Sat 22 Feb 2025 03:41:54 +0000
asID:                     273606
IP address blocks:        2804:8978::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:22:2f:46:0b:40:fd:4a:23:27:9b:27:24:bc:32:e1:a6:55:6e:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF57D8ABF92B4526A323E0F5712CC22330A693BB
        Validity
            Not Before: Feb 24 03:36:54 2024 GMT
            Not After : Feb 22 03:41:54 2025 GMT
        Subject: CN=1DA92B2ED6E4843540CCA14EF6895384ECA5AAF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d1:9a:62:54:5b:d8:12:b5:6f:bd:d7:8b:9b:
                    ec:65:49:0a:7b:22:85:27:26:bb:14:72:63:10:ac:
                    9e:99:da:43:ab:68:ca:ab:d4:69:7f:14:0d:0b:ef:
                    31:f5:4e:6f:9c:fc:a4:a6:15:0b:a9:19:c2:a3:dd:
                    c0:1a:f1:65:6f:30:b7:d8:e7:be:f6:a0:41:1a:69:
                    8f:63:72:41:8e:90:c9:10:ac:31:64:b5:fd:94:b6:
                    77:15:d2:75:86:0b:44:40:aa:ea:5f:c0:82:b1:d9:
                    17:29:3c:39:0a:38:c3:d8:a0:10:5d:a1:f9:a7:39:
                    63:b1:55:d3:c7:38:b2:a6:e5:c2:db:87:d2:ff:a2:
                    8f:be:e6:16:9b:67:4b:a2:d7:58:dc:c1:e3:35:28:
                    d0:fd:26:5e:7a:f4:c4:1f:dc:81:e8:40:31:a0:c0:
                    4d:a5:6d:58:6d:c5:b8:7a:26:14:0f:ed:66:17:55:
                    56:43:c4:d6:bf:df:26:14:76:c3:da:43:98:3f:54:
                    46:d9:a6:57:d4:a1:4f:b3:d2:87:87:8c:9f:38:7d:
                    3f:b7:89:be:7e:3c:e8:63:26:28:68:07:e0:84:26:
                    97:e2:2b:65:63:1d:33:f3:a1:7e:98:35:8d:e6:57:
                    54:50:df:2d:9f:5e:3a:a4:63:17:63:3c:90:0d:9f:
                    12:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A9:2B:2E:D6:E4:84:35:40:CC:A1:4E:F6:89:53:84:EC:A5:AA:F8
            X509v3 Authority Key Identifier:
                keyid:AF:57:D8:AB:F9:2B:45:26:A3:23:E0:F5:71:2C:C2:23:30:A6:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/AF57D8ABF92B4526A323E0F5712CC22330A693BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF57D8ABF92B4526A323E0F5712CC22330A693BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a3a2f33322d3332203d3e20323733363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8978::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:b9:50:50:62:95:ca:e0:bd:d8:90:88:0c:7f:4b:12:32:71:
         e6:e3:5d:af:d2:b3:3a:cb:f7:74:16:b8:9d:40:35:a6:72:43:
         f4:00:3a:8c:1e:85:7c:61:78:f2:f3:ac:77:4b:18:09:98:d5:
         61:69:8a:c8:4e:76:4c:c0:d6:56:72:57:9e:0c:f5:ab:18:83:
         29:07:a4:ee:fe:fe:c8:82:32:1b:a1:e0:e2:72:c5:46:d9:48:
         e9:b0:0a:26:8b:c2:e6:71:6b:67:56:c4:0e:f4:51:2d:bd:55:
         2f:16:dc:5b:28:79:bd:43:bc:ad:cc:f5:28:21:3f:12:33:ba:
         74:62:02:e3:b5:4f:20:96:29:49:ed:c2:7f:d1:83:33:1b:19:
         9b:20:6e:a5:de:e0:3f:6f:d5:20:a5:29:a0:fc:d6:67:95:ce:
         09:e8:eb:2a:11:85:09:15:f3:19:b2:c2:6d:b6:5f:41:47:fc:
         fd:9d:c5:c1:0e:6a:59:3f:82:b0:f5:2a:23:a9:db:3a:c2:5e:
         02:ee:b8:7c:5a:63:da:e5:35:9d:7c:11:e8:a7:4f:db:49:7b:
         d6:f0:be:a3:75:c2:ce:c7:5b:24:26:e7:ba:71:13:d6:60:58:
         7a:83:1c:d5:a0:e5:16:e4:fc:ed:5c:06:a9:ac:01:14:8e:fb:
         47:e0:3a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org