Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/1/323830343a386466343a3a2f33322d3438203d3e20323733333932.roa
File:                     323830343a386466343a3a2f33322d3438203d3e20323733333932.roa (raw, json)
Hash identifier:          T+TwKO6hYNonMFB6f79p4hl2A1cITRJJHsux9wWHr5M=
Subject key identifier:   E9:5F:A0:C6:A9:FF:83:34:DB:D5:1E:F4:4A:39:BA:EC:F0:85:58:26
Certificate issuer:       /CN=B920BF0EDCE3A3B03FEC47745AFE6218226CB774
Certificate serial:       587382454696B8C6131566DBF40958CC823F10E8
Authority key identifier: B9:20:BF:0E:DC:E3:A3:B0:3F:EC:47:74:5A:FE:62:18:22:6C:B7:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B920BF0EDCE3A3B03FEC47745AFE6218226CB774.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/1/323830343a386466343a3a2f33322d3438203d3e20323733333932.roa
Signing time:             Wed 03 Apr 2024 22:36:48 +0000
ROA not before:           Wed 03 Apr 2024 22:31:48 +0000
ROA not after:            Wed 02 Apr 2025 22:36:48 +0000
asID:                     273392
IP address blocks:        2804:8df4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:73:82:45:46:96:b8:c6:13:15:66:db:f4:09:58:cc:82:3f:10:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B920BF0EDCE3A3B03FEC47745AFE6218226CB774
        Validity
            Not Before: Apr  3 22:31:48 2024 GMT
            Not After : Apr  2 22:36:48 2025 GMT
        Subject: CN=E95FA0C6A9FF8334DBD51EF44A39BAECF0855826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1e:08:99:52:a2:27:8e:8e:6c:e8:3a:02:6b:
                    87:23:7d:51:28:58:7b:80:82:b4:9c:67:c4:64:ce:
                    8b:32:f7:21:63:b1:f2:9f:68:e1:85:9d:c4:a9:a1:
                    af:02:d5:d0:90:36:62:05:34:8d:0d:7d:e3:06:9f:
                    13:48:a1:d1:e6:e6:50:a9:21:bc:3c:d4:7c:88:97:
                    89:fd:17:b9:06:6b:47:21:bf:32:4f:3a:50:dd:25:
                    35:b6:a3:f5:ca:23:fa:4b:d3:90:fb:44:6f:c0:94:
                    33:c0:01:c9:a0:a5:83:78:d9:78:ad:b5:0a:df:44:
                    34:71:4d:9b:1f:ab:47:fd:78:da:ac:18:97:50:1b:
                    e0:ef:9a:62:21:bb:a1:56:e8:c5:99:b8:d0:ad:56:
                    67:bb:0e:8d:0d:14:d0:10:c4:3f:cc:2b:fe:35:f2:
                    ad:de:fb:b8:ad:bf:7d:58:89:0b:47:a0:6d:a0:3b:
                    38:a4:ca:30:53:87:30:4f:6f:d6:cc:2d:3b:84:b2:
                    4e:eb:a8:ef:0a:a2:eb:d2:6e:1e:d0:ac:c0:cf:7d:
                    be:74:b5:a7:c7:4a:7a:0b:36:c4:98:c9:c5:d1:fd:
                    0e:25:7d:88:ac:d2:81:54:b6:09:d3:03:93:89:5b:
                    b7:f2:f8:d8:0c:17:25:df:09:58:16:4c:98:c7:94:
                    14:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:5F:A0:C6:A9:FF:83:34:DB:D5:1E:F4:4A:39:BA:EC:F0:85:58:26
            X509v3 Authority Key Identifier:
                keyid:B9:20:BF:0E:DC:E3:A3:B0:3F:EC:47:74:5A:FE:62:18:22:6C:B7:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/1/B920BF0EDCE3A3B03FEC47745AFE6218226CB774.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B920BF0EDCE3A3B03FEC47745AFE6218226CB774.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/1/323830343a386466343a3a2f33322d3438203d3e20323733333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8df4::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:fa:41:72:8e:87:bb:39:5e:70:4d:7b:11:dc:4e:ce:77:e4:
         aa:ec:7c:73:59:be:a3:55:ee:c6:2e:c7:f1:26:34:96:1b:d7:
         9f:bf:01:e3:eb:d2:3a:50:8b:81:1a:a2:b3:ce:29:3b:ae:74:
         fa:48:73:56:27:f2:3f:67:a0:0b:16:b2:0a:b7:ad:96:33:4e:
         3e:3f:32:09:75:f0:4e:95:71:48:8d:44:f2:14:aa:0f:95:ff:
         8f:4b:a3:d0:7b:d7:a7:f8:9f:97:02:7a:ee:9e:0d:39:6a:e6:
         ee:9d:21:df:0d:65:8d:50:40:08:c3:15:46:ce:f1:4a:22:bb:
         03:dd:c0:df:d8:8f:a7:98:52:93:36:38:9c:47:64:b5:de:9d:
         14:93:49:fe:fd:a4:be:29:ad:ca:f1:d6:a4:d8:a6:99:8e:8e:
         b4:bb:cd:46:9f:88:d3:1d:48:f4:48:83:43:ff:45:f6:bc:32:
         cc:54:64:68:47:b8:9f:78:ff:f0:05:59:30:24:a4:b8:7f:26:
         24:cf:a8:23:01:a1:5a:11:05:6e:85:20:92:84:ab:bd:b6:47:
         3c:57:28:8d:88:29:6d:61:84:3e:a8:35:26:96:96:f0:59:e4:
         2c:bb:a1:57:5f:0f:4f:8a:8e:75:97:47:4b:22:0d:76:da:e6:
         d5:9a:30:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:34 2024 by rpki-client on console-ams.rpki-client.org