Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/323830343a343239383a3430303a3a2f33382d3438203d3e20323637353131.roa
File:                     323830343a343239383a3430303a3a2f33382d3438203d3e20323637353131.roa (raw, json)
Hash identifier:          9N8khvcBIOPoyV5HzOLYnItk8ziwiPGc7xq9VyVyVeE=
Subject key identifier:   31:D2:92:07:A3:47:44:8D:73:A7:F0:20:C8:A1:F5:C7:1F:F8:3E:8D
Certificate issuer:       /CN=AE0A5A110B6FD898CCCEFC07C260A96ED656830E
Certificate serial:       4BA8F912048D30599CDC821BC5B2D40C4B9EE2F9
Authority key identifier: AE:0A:5A:11:0B:6F:D8:98:CC:CE:FC:07:C2:60:A9:6E:D6:56:83:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE0A5A110B6FD898CCCEFC07C260A96ED656830E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/323830343a343239383a3430303a3a2f33382d3438203d3e20323637353131.roa
Signing time:             Tue 12 Mar 2024 16:32:58 +0000
ROA not before:           Tue 12 Mar 2024 16:27:58 +0000
ROA not after:            Tue 11 Mar 2025 16:32:58 +0000
asID:                     267511
IP address blocks:        2804:4298:400::/38 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:a8:f9:12:04:8d:30:59:9c:dc:82:1b:c5:b2:d4:0c:4b:9e:e2:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE0A5A110B6FD898CCCEFC07C260A96ED656830E
        Validity
            Not Before: Mar 12 16:27:58 2024 GMT
            Not After : Mar 11 16:32:58 2025 GMT
        Subject: CN=31D29207A347448D73A7F020C8A1F5C71FF83E8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d1:8d:8b:4b:a3:ae:a4:e7:b5:93:b0:cd:ba:
                    ef:6e:7b:be:75:dc:a8:3f:d6:e2:10:07:3f:8e:f7:
                    fa:ec:e6:84:00:d5:31:c7:7c:fd:57:7c:c1:9c:8b:
                    92:1d:43:37:dd:e8:a6:46:c2:97:b3:ac:69:21:0d:
                    f0:e6:65:b5:e0:42:df:87:d8:63:59:71:d2:ea:1a:
                    6a:6a:d4:5d:b0:48:15:23:77:81:ff:47:6b:56:22:
                    cb:0b:10:89:d0:72:b1:8b:cb:51:88:2d:3e:8e:1f:
                    dd:90:96:2b:d6:0d:7c:00:eb:ee:bb:51:62:60:93:
                    c9:89:fa:5c:f0:86:bd:8f:de:aa:69:0b:95:f1:a5:
                    f5:d7:9e:d1:d2:a6:8d:c2:00:19:8e:1a:8f:a1:9d:
                    32:b1:be:95:83:43:40:bf:0a:c4:4a:66:9b:d4:45:
                    b5:c3:ee:09:63:60:f8:1e:86:89:3a:a5:19:6e:93:
                    d4:e5:9d:e3:9d:f6:6b:ae:ae:c4:63:50:2e:2a:8f:
                    51:98:b7:26:83:a7:3e:00:c1:0d:ef:58:a7:47:a2:
                    6f:4f:25:32:42:c4:37:62:28:f7:dd:f6:5f:ad:8e:
                    99:9a:aa:0c:e6:7b:98:8b:9c:7c:27:fa:cd:16:d8:
                    0a:1b:25:a1:6b:47:74:fb:bd:c6:eb:d4:de:99:bd:
                    6f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D2:92:07:A3:47:44:8D:73:A7:F0:20:C8:A1:F5:C7:1F:F8:3E:8D
            X509v3 Authority Key Identifier:
                keyid:AE:0A:5A:11:0B:6F:D8:98:CC:CE:FC:07:C2:60:A9:6E:D6:56:83:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/AE0A5A110B6FD898CCCEFC07C260A96ED656830E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE0A5A110B6FD898CCCEFC07C260A96ED656830E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/323830343a343239383a3430303a3a2f33382d3438203d3e20323637353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4298:400::/38

    Signature Algorithm: sha256WithRSAEncryption
         4c:84:f1:f8:22:a8:ff:13:b8:67:94:4a:ae:10:14:1a:2b:13:
         79:ad:4d:ef:41:52:f3:fc:69:af:50:24:02:b2:22:0e:a6:6a:
         c2:a4:e8:1b:7b:d7:9f:ba:90:06:48:10:94:0d:38:a6:10:18:
         89:66:c6:ba:64:58:32:6a:64:83:5c:cf:30:82:6b:d1:c5:3d:
         3a:bc:a6:56:20:e3:e7:4f:8e:2d:57:28:a0:4d:80:95:a6:9f:
         f9:8a:5d:2e:7e:ec:3a:17:ad:a6:1d:17:d3:f7:d2:a6:28:c0:
         e2:0f:43:aa:e2:21:04:e5:63:fc:d3:b0:cd:f5:11:e5:42:99:
         43:47:db:db:c8:46:dd:a3:5c:64:a9:8c:90:fc:42:29:11:47:
         d1:57:25:2d:68:ed:f9:37:bb:05:b4:eb:10:60:9f:3e:00:38:
         92:4e:61:c1:e0:13:64:81:89:8c:bb:e1:f9:88:a0:d9:a8:7a:
         c1:53:df:bd:21:29:d6:48:39:44:6d:d5:d1:82:fe:dc:e3:71:
         5f:bb:0b:63:f7:c7:45:0e:ef:92:29:c5:2a:22:aa:26:e4:de:
         ea:9d:9a:08:cd:c5:3c:cc:cf:fa:fa:8a:09:6e:09:08:9f:ef:
         1c:06:a8:b7:8f:69:2d:70:9b:44:27:44:70:09:5e:8a:6f:34:
         11:fc:d3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:02 2024 by rpki-client on console-ams.rpki-client.org