Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a313538303a3a2f34312d3431203d3e20323632343539.roa
File:                     323830343a3462303a313538303a3a2f34312d3431203d3e20323632343539.roa (raw, json)
Hash identifier:          3P6tJYDn7n6Fakn7ku3kQxGtGmRuBxfqSXrz9MVsDVs=
Subject key identifier:   CA:BE:55:10:3D:9E:A6:D8:8C:AE:B7:CE:18:D4:BD:01:1F:53:95:4D
Certificate issuer:       /CN=1C5863392E99A282843AC6397A9E024E91731642
Certificate serial:       2716C33F5C429F2E7F08E35D7D8B694969794D5E
Authority key identifier: 1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a313538303a3a2f34312d3431203d3e20323632343539.roa
Signing time:             Wed 02 Aug 2023 11:42:13 +0000
ROA not before:           Wed 02 Aug 2023 11:37:13 +0000
ROA not after:            Wed 31 Jul 2024 11:42:13 +0000
asID:                     262459
IP address blocks:        2804:4b0:1580::/41 maxlen: 41

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:16:c3:3f:5c:42:9f:2e:7f:08:e3:5d:7d:8b:69:49:69:79:4d:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5863392E99A282843AC6397A9E024E91731642
        Validity
            Not Before: Aug  2 11:37:13 2023 GMT
            Not After : Jul 31 11:42:13 2024 GMT
        Subject: CN=CABE55103D9EA6D88CAEB7CE18D4BD011F53954D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:14:83:43:fe:0c:44:0b:42:74:d4:bc:21:34:
                    9b:cf:d2:81:b9:4c:f8:3c:47:5a:53:ea:87:df:6e:
                    c8:d7:58:37:c4:f2:d6:b6:d6:7f:96:27:d9:eb:bf:
                    bf:1d:7b:46:99:02:d8:18:52:ef:2f:c9:0e:ce:6f:
                    0b:c2:79:df:91:b9:47:6a:4e:10:14:30:75:89:9c:
                    f3:4e:6b:7c:d5:3b:af:ef:2d:71:89:24:8e:fc:bd:
                    97:56:78:82:2b:b0:a4:e4:74:f0:d8:6b:ef:77:20:
                    6a:96:e8:d8:5c:07:4b:21:92:14:96:dd:45:8c:96:
                    dc:c9:56:74:aa:64:1a:7d:a5:e1:1a:69:33:c3:b0:
                    4c:ee:52:70:9e:e0:32:02:b6:0f:15:26:f4:40:86:
                    b4:9f:4e:b0:9e:d6:62:93:e0:2e:a0:56:ed:e9:ba:
                    61:de:68:f9:be:65:54:53:ca:82:2b:4a:34:b2:fc:
                    ee:fe:d6:c4:d1:53:e0:d3:e4:8b:14:25:af:82:0a:
                    12:91:40:47:e7:f7:79:90:39:cf:23:2f:45:23:87:
                    c4:c2:45:af:9f:79:fe:9a:f2:c4:91:5c:7a:0f:0a:
                    cf:27:8f:a7:e4:1c:41:45:a5:c7:ed:84:6b:85:ea:
                    1b:96:ef:e6:f7:ce:8e:d6:61:6d:f8:38:3c:a8:eb:
                    a6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:BE:55:10:3D:9E:A6:D8:8C:AE:B7:CE:18:D4:BD:01:1F:53:95:4D
            X509v3 Authority Key Identifier:
                keyid:1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/1C5863392E99A282843AC6397A9E024E91731642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a313538303a3a2f34312d3431203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b0:1580::/41

    Signature Algorithm: sha256WithRSAEncryption
         67:57:1e:2d:dc:d0:67:e2:46:e2:c7:7b:64:cb:46:05:af:33:
         3c:ec:27:21:08:9e:dd:46:bb:80:03:bd:8d:f5:9b:e0:d5:63:
         97:1a:43:46:b7:ba:f9:50:06:98:d3:41:e5:64:9e:f1:f2:88:
         9d:21:f7:e9:eb:b9:ac:39:5f:5d:32:98:dc:83:28:3c:f2:60:
         db:37:23:03:ef:ab:a4:8f:90:ef:3d:60:d9:05:1a:ae:fc:d0:
         32:4e:5d:b7:dd:b9:12:2c:30:e3:ef:09:64:44:4f:b1:72:01:
         c1:95:1c:d6:a9:a9:13:73:66:6b:1b:e0:c8:cc:a5:08:69:dc:
         aa:7c:b2:2b:d1:9f:59:5c:c3:67:dc:f9:a4:f7:c1:ca:1a:00:
         e3:d8:c9:65:cd:b3:aa:59:aa:3f:00:62:ec:9c:06:a1:f1:05:
         c3:b3:ad:28:a4:a1:0c:e7:2d:c4:78:5a:8d:d3:c3:f7:75:32:
         46:fe:6e:e3:55:9f:e8:f4:79:08:79:cc:43:35:5f:53:8a:7d:
         62:61:aa:ba:9d:4d:00:28:ef:de:42:ea:23:6e:4f:7d:7b:01:
         27:26:6c:e6:f3:9d:44:42:4d:47:fa:aa:6c:6f:8d:72:f0:04:
         a0:f1:30:20:25:e4:14:50:c4:4f:e6:92:81:db:af:60:e3:04:
         1d:dc:b0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:37 2024 by rpki-client on console-fra.rpki-client.org