Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a3a2f33322d3333203d3e20323638383738.roa
File:                     323830343a356266303a3a2f33322d3333203d3e20323638383738.roa (raw, json)
Hash identifier:          ov8BCoTDkSddsD88EF+0v+rAMmlifVK+7kW47rIj+3k=
Subject key identifier:   00:28:4D:03:16:4F:CE:B7:A8:51:B6:FD:4E:72:23:D3:59:FB:87:2F
Certificate issuer:       /CN=55086A695A81138C17CC984B7773F3BC07D84ADA
Certificate serial:       55C8E88550CE07AB72EF894ACA0B30BF4A563C06
Authority key identifier: 55:08:6A:69:5A:81:13:8C:17:CC:98:4B:77:73:F3:BC:07:D8:4A:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/55086A695A81138C17CC984B7773F3BC07D84ADA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a3a2f33322d3333203d3e20323638383738.roa
Signing time:             Mon 23 Oct 2023 09:27:34 +0000
ROA not before:           Mon 23 Oct 2023 09:22:34 +0000
ROA not after:            Mon 21 Oct 2024 09:27:34 +0000
asID:                     268878
IP address blocks:        2804:5bf0::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:c8:e8:85:50:ce:07:ab:72:ef:89:4a:ca:0b:30:bf:4a:56:3c:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55086A695A81138C17CC984B7773F3BC07D84ADA
        Validity
            Not Before: Oct 23 09:22:34 2023 GMT
            Not After : Oct 21 09:27:34 2024 GMT
        Subject: CN=00284D03164FCEB7A851B6FD4E7223D359FB872F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5d:6e:ce:32:de:c4:42:aa:23:4e:0a:8e:ba:
                    bd:51:09:6f:8d:b8:7e:7f:c5:2b:9b:41:3e:ed:11:
                    74:4f:3c:f9:ec:19:91:22:c4:cf:04:5b:65:93:a0:
                    0e:79:23:e1:10:aa:ab:9d:fb:b2:71:18:a5:6f:98:
                    ff:b1:09:df:56:8e:73:55:0d:d1:c4:50:27:e9:4c:
                    5b:72:57:e7:ae:1d:d7:23:62:84:8c:9c:d5:d3:86:
                    3c:26:3e:b0:c9:dc:c8:89:cb:81:a2:45:88:35:e2:
                    7d:23:e0:bc:27:8d:ed:f7:d7:ce:ee:35:5d:19:30:
                    de:63:f6:8c:24:85:72:46:72:e5:10:c8:61:9f:4b:
                    d0:0e:2f:1f:c5:d5:78:15:a9:33:dd:cb:48:71:23:
                    ac:56:48:eb:de:2c:e9:9f:8d:5b:c1:a5:52:4e:e4:
                    14:ee:e6:dc:e8:d3:f5:3d:5a:b3:d9:d0:a2:85:a5:
                    1b:0c:d1:a4:c5:09:c9:f6:2c:7e:79:33:30:dd:c4:
                    d9:14:6b:c5:09:2a:c8:4a:ab:a6:a0:a2:de:2d:11:
                    70:2f:d7:5d:b8:6d:ec:b6:b9:f4:1b:6c:4f:8a:62:
                    a0:5c:d9:24:93:69:f9:8f:95:85:46:e5:10:f7:d2:
                    0a:23:9d:dc:49:b6:aa:3f:9e:26:a9:9d:4f:42:a4:
                    19:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:28:4D:03:16:4F:CE:B7:A8:51:B6:FD:4E:72:23:D3:59:FB:87:2F
            X509v3 Authority Key Identifier:
                keyid:55:08:6A:69:5A:81:13:8C:17:CC:98:4B:77:73:F3:BC:07:D8:4A:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/55086A695A81138C17CC984B7773F3BC07D84ADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/55086A695A81138C17CC984B7773F3BC07D84ADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a3a2f33322d3333203d3e20323638383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5bf0::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:15:a1:12:53:61:a6:6f:3e:cd:ff:21:68:f0:d8:bb:c5:3f:
         21:9b:f5:ac:46:14:93:64:2c:16:ad:8a:6c:75:de:61:d7:94:
         32:fa:6a:44:72:78:d2:15:e7:0d:b1:86:c2:45:59:fa:d8:f9:
         aa:ce:27:3a:b5:e5:e3:02:42:c6:93:d3:22:9c:cf:92:8b:07:
         6b:3b:e2:b2:ee:25:87:9f:2d:91:66:37:e1:62:ef:7c:8a:62:
         00:1b:ce:e0:14:88:37:8e:db:4b:81:dd:31:a4:e2:65:44:46:
         f6:1e:24:f5:ce:ef:14:dc:e3:0c:a8:43:bd:da:5a:fc:6a:a2:
         18:07:8f:cd:29:99:a9:9e:67:e6:b4:0b:0b:39:81:8d:a4:48:
         13:4d:c8:81:86:ca:e2:5d:32:1c:99:62:b9:e2:02:d2:03:8f:
         9d:bb:71:fa:79:ec:35:fa:41:bc:48:a6:dc:7c:a1:36:20:4a:
         ee:a3:7a:f8:f4:d9:f2:e3:9a:b4:55:2f:76:71:65:5b:e6:34:
         16:a6:65:30:b9:0e:62:af:7c:ed:64:38:c1:06:ff:37:17:d0:
         1f:63:37:22:55:8d:d9:96:72:32:99:4d:5e:01:30:5a:16:a7:
         74:1a:cb:f3:ac:d7:3f:0e:fd:5a:9c:75:ac:7c:73:99:9f:84:
         1c:f3:e2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org