Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a373030323a3a2f34382d3438203d3e20323731303134.roa
File:                     323830343a373466343a373030323a3a2f34382d3438203d3e20323731303134.roa (raw, json)
Hash identifier:          FuErlFsrCF67srwVuIpZfVG3FdpHYiQ7FhGGX/mfESs=
Subject key identifier:   DE:B3:64:77:64:32:8B:FD:0C:7E:19:77:77:74:3F:04:00:74:20:B1
Certificate issuer:       /CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
Certificate serial:       237599759EF8E81F729AE73BB4ABF9C23FF6F4A4
Authority key identifier: 24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a373030323a3a2f34382d3438203d3e20323731303134.roa
Signing time:             Thu 08 Feb 2024 14:06:00 +0000
ROA not before:           Thu 08 Feb 2024 14:01:00 +0000
ROA not after:            Thu 06 Feb 2025 14:06:00 +0000
asID:                     271014
IP address blocks:        2804:74f4:7002::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:75:99:75:9e:f8:e8:1f:72:9a:e7:3b:b4:ab:f9:c2:3f:f6:f4:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
        Validity
            Not Before: Feb  8 14:01:00 2024 GMT
            Not After : Feb  6 14:06:00 2025 GMT
        Subject: CN=DEB3647764328BFD0C7E197777743F04007420B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:03:93:60:48:98:a8:c3:29:40:96:09:74:1c:
                    04:53:38:aa:32:30:dd:40:c3:0f:29:4b:a9:55:58:
                    51:93:02:1d:b5:bb:07:0e:0e:9a:0a:2d:46:35:02:
                    02:06:79:e5:cc:59:a6:ea:df:48:e6:da:3e:d4:28:
                    86:36:6b:c5:1e:21:42:00:03:9b:2c:e3:81:12:a9:
                    7e:33:04:89:4a:2c:52:50:04:da:45:94:a1:94:c9:
                    6d:0b:17:05:6b:59:08:6d:1b:92:ae:62:45:04:33:
                    7a:47:0b:3c:5a:2a:df:c3:70:44:da:89:cc:2e:a4:
                    6b:92:4d:25:a4:ae:2b:8d:23:02:64:a9:da:14:a4:
                    ff:96:2f:a2:a4:0d:0d:85:ca:21:e9:03:b3:f1:46:
                    a9:2e:59:d9:4d:39:31:91:f1:bf:77:01:1f:58:88:
                    00:e9:f9:71:45:69:ab:4a:e6:47:3b:ff:8e:2f:94:
                    a0:03:a0:95:a9:af:7e:97:78:dc:25:64:47:f8:08:
                    4f:2c:a8:2b:d4:67:f4:44:e4:c8:0d:7b:fe:a9:f5:
                    d4:e5:f6:6d:eb:40:10:c2:45:a1:2c:a8:2a:5d:b6:
                    1f:d9:d7:d2:bb:5a:24:4f:d8:04:7b:97:d6:d2:8f:
                    7c:b8:a1:2a:e2:8f:ee:51:53:fe:1d:2f:a2:38:2c:
                    2a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B3:64:77:64:32:8B:FD:0C:7E:19:77:77:74:3F:04:00:74:20:B1
            X509v3 Authority Key Identifier:
                keyid:24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a373030323a3a2f34382d3438203d3e20323731303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74f4:7002::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:19:e3:61:bf:53:d2:9a:81:e0:5e:67:09:55:47:ac:87:12:
         b4:34:ab:d7:cf:4d:37:59:87:0a:af:74:66:ac:fd:0d:42:b7:
         38:48:bd:3c:77:23:88:ec:7d:5d:4d:d7:b0:fb:4f:9d:5e:ef:
         71:fe:7c:1c:e5:3e:69:49:cc:a5:4a:f7:81:0c:20:71:b6:a2:
         f4:b2:ce:b6:d9:a5:61:23:d5:6a:4b:79:54:cc:92:ca:27:cb:
         6d:74:88:10:4a:dc:03:fd:f1:c9:fb:8c:bc:e0:55:9f:dc:ab:
         15:16:b5:c2:7d:eb:a6:3e:06:9a:e0:4f:5d:c3:c3:b6:a8:73:
         cb:8c:6c:9b:da:90:8a:04:51:ae:5b:ca:6a:06:6d:25:1b:05:
         cd:ea:2b:fe:f0:ab:ea:8b:fa:1e:e5:ed:d1:e1:f9:45:a8:c9:
         d4:59:27:f9:d8:ae:e2:33:30:da:27:ed:75:08:46:27:61:44:
         36:e3:71:9b:ad:02:7c:71:b6:54:a1:50:35:0b:49:6a:a9:66:
         38:96:6a:0a:eb:d4:22:cb:7a:92:7a:82:9f:8f:3a:be:86:2e:
         1a:32:92:f2:f0:3c:e2:0a:3f:48:8c:58:a7:73:98:f4:12:5d:
         85:fb:f7:e5:fd:95:87:03:0b:3b:1e:05:e4:62:a6:f2:22:fb:
         4c:df:12:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:42 2024 by rpki-client on console-ams.rpki-client.org