Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/323830343a313038303a3a2f33322d3438203d3e203238323837.roa
File:                     323830343a313038303a3a2f33322d3438203d3e203238323837.roa (raw, json)
Hash identifier:          OafDa6bQzPo6mpSqm0N9gpLugnXm0/mcYoO5t/iAMyM=
Subject key identifier:   58:2B:78:62:87:9E:6F:4E:61:43:51:3A:5F:05:A2:50:67:BA:2C:CB
Certificate issuer:       /CN=1E0959701E057D7CCAB39A76C2B6AF6E5134811E
Certificate serial:       2443896EF1772B393C898F21641C554AC999EDAE
Authority key identifier: 1E:09:59:70:1E:05:7D:7C:CA:B3:9A:76:C2:B6:AF:6E:51:34:81:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E0959701E057D7CCAB39A76C2B6AF6E5134811E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/323830343a313038303a3a2f33322d3438203d3e203238323837.roa
Signing time:             Mon 20 May 2024 13:16:50 +0000
ROA not before:           Mon 20 May 2024 13:11:50 +0000
ROA not after:            Mon 19 May 2025 13:16:50 +0000
asID:                     28287
IP address blocks:        2804:1080::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:43:89:6e:f1:77:2b:39:3c:89:8f:21:64:1c:55:4a:c9:99:ed:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E0959701E057D7CCAB39A76C2B6AF6E5134811E
        Validity
            Not Before: May 20 13:11:50 2024 GMT
            Not After : May 19 13:16:50 2025 GMT
        Subject: CN=582B7862879E6F4E6143513A5F05A25067BA2CCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c6:b1:99:50:f1:b6:a8:4d:10:42:54:2b:f6:
                    3c:59:17:a7:6d:ab:1b:14:67:7e:33:e6:af:d0:2e:
                    f0:77:57:d0:f6:6c:f4:13:0b:b2:bd:bb:3d:3f:9c:
                    a1:b8:7e:87:ac:07:a6:a1:46:9f:2c:03:43:6c:50:
                    2d:a3:ec:51:8e:71:f0:50:8a:6c:48:75:b7:45:f1:
                    13:19:45:47:b2:02:25:f3:a5:a2:8e:f8:de:88:27:
                    0e:b4:70:4f:01:df:d7:e1:e6:ac:55:88:19:61:a0:
                    c7:67:57:df:c2:a4:2d:80:8d:45:57:fd:8e:cd:56:
                    d5:19:ea:23:c1:a1:3e:d5:6d:45:0a:f3:89:ba:77:
                    6c:74:85:d5:8d:e9:12:30:f9:54:18:09:24:54:30:
                    66:07:bd:e8:c1:b3:1e:ca:9d:31:5a:32:34:d8:37:
                    34:bf:81:e5:63:c0:48:b7:be:ff:d7:fd:e5:47:b6:
                    31:18:45:a1:1d:6a:16:cf:aa:6d:6e:30:7f:10:cf:
                    97:1b:5b:ac:bd:97:07:ea:50:66:84:70:32:e7:ff:
                    e1:34:86:d9:cc:a0:65:82:a9:3c:03:ab:48:5e:2e:
                    e0:3d:68:14:62:b1:99:e2:ef:e9:36:df:e2:6b:1d:
                    cc:ae:78:da:d9:bf:a2:5a:3c:cb:36:ca:dc:12:44:
                    07:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:2B:78:62:87:9E:6F:4E:61:43:51:3A:5F:05:A2:50:67:BA:2C:CB
            X509v3 Authority Key Identifier:
                keyid:1E:09:59:70:1E:05:7D:7C:CA:B3:9A:76:C2:B6:AF:6E:51:34:81:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/1E0959701E057D7CCAB39A76C2B6AF6E5134811E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E0959701E057D7CCAB39A76C2B6AF6E5134811E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/323830343a313038303a3a2f33322d3438203d3e203238323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1080::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:53:0b:c3:aa:31:94:89:24:0a:46:50:b1:5a:eb:bd:24:b1:
         39:17:dd:1d:2f:cc:af:38:c6:92:88:f0:56:be:46:65:67:c6:
         9e:eb:3e:e8:22:b0:1d:a8:2e:a3:19:aa:6c:6e:97:d9:83:83:
         c9:9f:42:7d:92:70:d1:d1:35:32:0f:58:0e:6f:08:b9:03:ff:
         b7:0a:26:13:16:f3:81:a0:99:34:ed:c6:f9:01:ce:c7:3a:94:
         6d:30:41:3e:61:01:c4:46:0c:40:db:cc:92:78:90:d1:7f:26:
         c4:22:d5:5b:26:f2:ea:66:c2:4a:f2:b6:be:05:29:96:f3:74:
         d4:dd:3a:ca:9b:86:6a:00:6f:56:55:0e:10:b5:9d:22:3d:c1:
         7f:c7:fa:b6:4a:bf:d8:01:d4:8b:e5:1f:b0:76:5e:f2:7b:4e:
         bc:ff:62:89:63:56:6d:d9:2c:73:91:f0:c4:68:65:49:a5:3e:
         43:d2:25:d0:8a:89:49:0f:5f:8b:4d:2d:32:ae:9f:f7:bc:3b:
         54:39:32:2d:21:46:18:f2:37:99:cf:47:6b:19:4b:a6:f6:c8:
         42:6c:3b:d4:3a:81:62:23:a0:83:45:30:60:70:d8:9c:2f:8a:
         9d:25:19:71:79:7c:f1:4d:15:3c:b6:94:0f:c3:5b:9a:1e:8f:
         4a:88:00:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:34 2024 by rpki-client on console-ams.rpki-client.org