Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/323830343a323232383a3a2f33322d3333203d3e20323634353935.roa
File:                     323830343a323232383a3a2f33322d3333203d3e20323634353935.roa (raw, json)
Hash identifier:          NRcwbhr+RCB/uVufSnHxNriEhc/MappPUGTVPhmGfyQ=
Subject key identifier:   6A:2C:6F:E2:81:2A:7A:A5:4C:C4:DB:AC:4E:61:12:FD:B1:A3:4F:FD
Certificate issuer:       /CN=574748D8BF31C17F406ADCFABD98395668029B7F
Certificate serial:       1FB7DE74E0A696C046EE5CF64D5024208A95B7A0
Authority key identifier: 57:47:48:D8:BF:31:C1:7F:40:6A:DC:FA:BD:98:39:56:68:02:9B:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/574748D8BF31C17F406ADCFABD98395668029B7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/323830343a323232383a3a2f33322d3333203d3e20323634353935.roa
Signing time:             Mon 01 Apr 2024 14:40:10 +0000
ROA not before:           Mon 01 Apr 2024 14:35:10 +0000
ROA not after:            Mon 31 Mar 2025 14:40:10 +0000
asID:                     264595
IP address blocks:        2804:2228::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:b7:de:74:e0:a6:96:c0:46:ee:5c:f6:4d:50:24:20:8a:95:b7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=574748D8BF31C17F406ADCFABD98395668029B7F
        Validity
            Not Before: Apr  1 14:35:10 2024 GMT
            Not After : Mar 31 14:40:10 2025 GMT
        Subject: CN=6A2C6FE2812A7AA54CC4DBAC4E6112FDB1A34FFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8e:d1:6a:a4:87:f2:ac:27:d1:53:b4:b3:81:
                    c4:eb:d9:a3:8c:48:d0:56:62:dc:cc:5c:33:ad:f2:
                    ca:e3:69:6f:50:dc:1b:c5:53:0d:e1:9b:a8:fc:2b:
                    94:0f:9d:87:a5:9c:07:b7:e1:d1:a6:f0:fb:03:5f:
                    0e:bc:04:b6:f8:85:59:17:52:96:74:30:6a:00:a1:
                    d3:89:60:1f:7d:f8:0e:37:ba:90:bf:e9:4e:c2:05:
                    00:ed:f9:da:12:26:d3:b5:33:ed:65:96:dd:fa:de:
                    37:86:b3:4e:60:dd:3d:3f:85:88:7e:70:cf:cc:19:
                    ca:6a:bd:b7:26:89:51:f0:c0:dd:2e:a8:f6:2a:5a:
                    3f:eb:bf:b2:4b:b1:05:8e:89:82:42:3a:8b:d5:c6:
                    9a:da:91:1b:9d:c9:60:72:2a:97:57:d8:cd:87:ca:
                    9a:87:18:9f:25:59:6a:7b:30:4a:8b:db:c3:14:5b:
                    d5:e6:ff:19:d6:49:09:24:18:a0:ac:65:ab:26:91:
                    02:da:cf:3d:5c:0e:cf:34:44:47:3e:ca:c5:ee:83:
                    ac:f1:6c:97:d5:ea:bd:5b:d1:85:f0:2f:68:4c:09:
                    aa:ac:e9:b2:f7:a0:31:d6:9a:d8:9d:7e:5d:eb:8a:
                    5f:10:24:c3:7f:49:9d:af:7a:89:59:e1:e1:70:9b:
                    4a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2C:6F:E2:81:2A:7A:A5:4C:C4:DB:AC:4E:61:12:FD:B1:A3:4F:FD
            X509v3 Authority Key Identifier:
                keyid:57:47:48:D8:BF:31:C1:7F:40:6A:DC:FA:BD:98:39:56:68:02:9B:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/574748D8BF31C17F406ADCFABD98395668029B7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/574748D8BF31C17F406ADCFABD98395668029B7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/323830343a323232383a3a2f33322d3333203d3e20323634353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2228::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:2d:7c:28:8f:1c:4e:69:7d:f9:ee:4d:b0:73:9a:cc:e6:cc:
         61:6e:e0:36:1d:31:d7:b8:d2:04:3b:eb:8d:b6:64:a1:0d:f7:
         da:73:df:64:c8:ef:2b:71:0a:5a:21:c1:80:dc:12:b0:48:c7:
         5f:f4:05:01:2c:9e:50:fa:41:4f:81:9e:65:e4:df:0c:62:2a:
         81:67:dd:24:5a:b4:e2:05:74:42:f7:4c:fa:e1:47:df:fd:e8:
         4e:ef:5c:7b:e3:f0:c4:c7:2e:45:0f:a4:6e:e8:e1:5f:91:12:
         89:6b:f8:60:54:43:94:f7:8f:8b:93:8c:bc:df:e8:db:b5:42:
         1b:92:9d:bb:3c:f4:7c:3c:ac:dd:6a:1c:da:8d:72:4d:2a:5b:
         81:d8:35:ba:ed:73:2b:de:9d:34:92:2f:f8:98:1f:22:b1:60:
         2b:ea:10:29:47:74:77:be:22:72:3b:69:20:c1:ca:54:bd:67:
         a1:34:34:99:00:70:15:d3:d3:a8:c5:af:cb:d1:46:6f:36:48:
         99:7a:9f:71:60:c7:fe:73:61:07:c1:32:9f:31:50:11:c0:c8:
         9a:00:ca:e4:13:c0:5b:88:b3:4f:17:bf:4c:2b:b3:09:6b:c4:
         1b:28:8d:8a:ef:83:8b:71:b5:c7:bd:a0:b4:e1:2f:36:b8:59:
         b3:22:eb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org