Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a643030373a3a2f34382d3438203d3e20323731303134.roa
File:                     323830343a373466343a643030373a3a2f34382d3438203d3e20323731303134.roa (raw, json)
Hash identifier:          4m1KnX1rBnuPwEiqRoJKDSDjx/McdTVN46+Q9607FCU=
Subject key identifier:   75:15:45:70:41:95:07:12:BA:DA:5C:4B:18:F7:29:92:DB:6A:B9:98
Certificate issuer:       /CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
Certificate serial:       6561AEBA774AB2A71D16869FCA23AE571230D595
Authority key identifier: 24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a643030373a3a2f34382d3438203d3e20323731303134.roa
Signing time:             Thu 08 Feb 2024 14:06:03 +0000
ROA not before:           Thu 08 Feb 2024 14:01:03 +0000
ROA not after:            Thu 06 Feb 2025 14:06:03 +0000
asID:                     271014
IP address blocks:        2804:74f4:d007::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:61:ae:ba:77:4a:b2:a7:1d:16:86:9f:ca:23:ae:57:12:30:d5:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
        Validity
            Not Before: Feb  8 14:01:03 2024 GMT
            Not After : Feb  6 14:06:03 2025 GMT
        Subject: CN=7515457041950712BADA5C4B18F72992DB6AB998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:07:77:9f:77:ae:37:59:5d:d3:06:09:4f:92:
                    f7:3a:49:4f:db:b3:1e:bd:53:c1:69:26:7b:ba:d5:
                    48:5f:b1:59:7d:fa:35:87:51:1c:90:c0:5d:cf:73:
                    c6:6a:76:60:0a:1e:2e:df:51:39:a3:c7:0e:2f:b1:
                    5e:33:25:d7:6e:bf:b7:24:42:20:ad:34:ee:54:56:
                    db:57:b7:9b:2c:f0:91:16:26:c5:d8:ec:3f:58:c6:
                    63:30:d3:2f:c6:46:ba:db:4d:01:a2:0f:a1:8a:dd:
                    a7:14:45:3c:f7:cb:93:8b:67:43:7f:0b:88:f1:fc:
                    28:c8:ac:da:e4:06:30:d6:8e:09:2f:87:d4:5b:c9:
                    b6:28:32:27:19:82:ef:5e:f7:4b:a0:2a:f5:bd:45:
                    6b:c5:2a:5d:cd:37:3c:cb:5a:73:64:fa:47:28:63:
                    3c:b5:f5:e4:b5:11:f5:78:02:66:a8:03:c8:39:d4:
                    83:f1:1e:61:47:0c:cd:7b:33:6a:f1:b2:cd:93:52:
                    a1:40:84:31:9a:f3:1e:b4:36:aa:fd:63:0a:53:c0:
                    34:a1:ec:65:1e:01:d9:28:d9:05:df:48:a0:c6:3d:
                    42:cc:48:f8:3e:b5:1f:c6:aa:ac:06:99:be:d5:18:
                    21:64:45:42:c5:a1:23:95:31:25:07:d8:25:11:a7:
                    30:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:15:45:70:41:95:07:12:BA:DA:5C:4B:18:F7:29:92:DB:6A:B9:98
            X509v3 Authority Key Identifier:
                keyid:24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a643030373a3a2f34382d3438203d3e20323731303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74f4:d007::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:0b:4e:62:04:04:9d:4f:cc:3c:88:e9:de:71:ba:5d:cd:e5:
         45:98:c2:a6:9b:89:63:de:e8:18:00:f3:33:01:e1:e2:45:bf:
         03:f4:08:91:0a:e6:66:35:e1:ed:5c:1e:18:93:4c:50:91:78:
         f7:10:2c:90:f5:c2:5d:65:32:5e:2e:cd:64:07:62:b9:e1:e2:
         99:f3:4f:02:66:8a:3f:fc:e8:4e:f5:73:01:e3:eb:a2:07:c4:
         1c:bc:f8:88:a2:c2:b5:7a:25:40:df:3f:2a:7a:9e:f3:08:47:
         53:34:7f:53:1f:a7:13:38:6f:4d:b7:28:3d:3c:e5:49:6a:52:
         87:f9:62:58:9b:4c:1a:67:c3:88:dd:64:d6:1e:01:65:02:33:
         96:b2:cb:34:73:c8:fe:09:37:25:ce:d1:12:10:28:9c:b2:0d:
         f0:b1:d5:fb:91:b5:87:cb:07:d8:27:0c:a8:ef:e2:8d:ee:83:
         01:fc:4e:70:2a:a8:3a:25:fb:1a:57:65:e8:cb:aa:b1:7d:d6:
         67:bb:4f:52:3a:1e:61:36:3d:fe:4b:b7:da:39:86:48:c8:96:
         e0:65:cb:c1:33:f7:25:80:39:76:98:3e:58:d7:fe:9f:d5:7e:
         8a:19:80:b9:ed:46:30:f4:4e:cb:80:2d:2f:27:2a:5e:4c:8a:
         22:9e:73:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:42 2024 by rpki-client on console-ams.rpki-client.org