Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a3a2f33332d3333203d3e20323638383738.roa
File:                     323830343a356266303a3a2f33332d3333203d3e20323638383738.roa (raw, json)
Hash identifier:          /YbHU1aKKDmpyvkUF0CgRy7WDD5gqSzJ24Yu9ptbESg=
Subject key identifier:   54:60:69:42:99:A4:C4:BA:1C:72:6F:4C:86:32:61:DE:26:F4:5C:9F
Certificate issuer:       /CN=B41C5D20FCE773495931567B28D958303BB191D0
Certificate serial:       2A7D58874EA54CCE7608F59F5698E776ED4D2FC9
Authority key identifier: B4:1C:5D:20:FC:E7:73:49:59:31:56:7B:28:D9:58:30:3B:B1:91:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B41C5D20FCE773495931567B28D958303BB191D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a3a2f33332d3333203d3e20323638383738.roa
Signing time:             Fri 09 Feb 2024 12:32:33 +0000
ROA not before:           Fri 09 Feb 2024 12:27:33 +0000
ROA not after:            Fri 07 Feb 2025 12:32:33 +0000
asID:                     268878
IP address blocks:        2804:5bf0::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:7d:58:87:4e:a5:4c:ce:76:08:f5:9f:56:98:e7:76:ed:4d:2f:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B41C5D20FCE773495931567B28D958303BB191D0
        Validity
            Not Before: Feb  9 12:27:33 2024 GMT
            Not After : Feb  7 12:32:33 2025 GMT
        Subject: CN=5460694299A4C4BA1C726F4C863261DE26F45C9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:96:32:05:21:3e:a4:2e:fb:08:7c:d8:ea:77:
                    4d:1a:68:be:09:e3:60:09:78:d3:f3:b1:72:64:7d:
                    ac:f9:50:cc:0d:a7:88:8b:95:6d:12:46:d5:65:e4:
                    ae:0d:6b:d4:d1:ac:ee:a5:db:55:53:05:f8:32:40:
                    59:e4:62:f4:3e:d7:f2:2e:07:62:44:44:58:27:f0:
                    a9:84:7a:6a:e9:ea:9f:63:5d:35:3a:19:8f:37:c4:
                    97:c6:44:e1:31:4c:2c:d3:c7:cc:20:ae:b3:d2:85:
                    20:05:d3:30:17:9d:0d:96:11:4b:25:2e:97:19:fd:
                    18:03:a1:6e:b9:2f:8c:56:5c:65:a3:1c:3f:d5:1b:
                    4f:ea:54:ac:42:31:50:32:ea:1e:05:be:e7:82:94:
                    f8:dd:de:75:13:1b:34:81:77:35:03:07:af:a6:f7:
                    20:b6:96:ae:0c:a0:89:99:06:68:02:ef:9f:5b:a8:
                    b2:59:32:96:2a:38:8b:ed:3f:5e:6e:2a:a2:80:74:
                    9b:ca:68:18:ed:b5:4b:0b:63:0a:03:ee:19:15:9a:
                    91:3c:8f:05:3e:2a:fd:a1:38:ea:24:43:c4:93:1f:
                    14:29:74:a3:f0:5a:e0:13:f9:58:b2:44:c9:e6:1f:
                    31:ae:53:05:49:8a:e0:c4:bf:78:fc:26:72:12:df:
                    13:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:60:69:42:99:A4:C4:BA:1C:72:6F:4C:86:32:61:DE:26:F4:5C:9F
            X509v3 Authority Key Identifier:
                keyid:B4:1C:5D:20:FC:E7:73:49:59:31:56:7B:28:D9:58:30:3B:B1:91:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/B41C5D20FCE773495931567B28D958303BB191D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B41C5D20FCE773495931567B28D958303BB191D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a3a2f33332d3333203d3e20323638383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5bf0::/33

    Signature Algorithm: sha256WithRSAEncryption
         a9:a2:bc:b7:25:56:78:59:3a:ec:3b:e0:5b:26:e8:74:35:6a:
         fb:cb:44:31:6c:b9:c6:c1:6f:9a:89:0b:42:7d:ba:2c:ee:f9:
         12:60:f7:4c:d0:eb:5b:6c:74:0b:8e:87:54:6b:40:cb:df:8e:
         96:b8:39:b8:24:48:d2:9e:a0:68:c6:ef:d3:67:a8:56:ed:68:
         76:5c:09:a9:3d:49:aa:6d:88:32:c8:a8:48:25:c6:61:b5:5f:
         38:a1:cc:68:92:53:db:0b:6e:e0:24:b6:bb:7c:49:cf:a8:96:
         eb:23:50:3b:d9:d5:a6:e5:68:5e:5d:a7:36:0f:c7:35:91:c3:
         44:e4:47:f9:7e:34:98:59:cb:8e:f8:34:2d:cf:1a:c3:2f:f8:
         a0:f5:75:b7:44:d5:4d:98:20:a7:11:b9:49:a4:9a:bc:9d:3d:
         c2:e1:3b:60:64:47:71:d5:65:78:97:81:24:4b:fe:8e:7f:67:
         36:21:f4:ec:1b:10:0b:90:d6:e7:3e:4e:af:bd:6d:25:de:07:
         49:f4:49:c9:9d:ce:df:15:4b:09:17:f4:0c:e6:8d:6e:3e:79:
         c4:12:c1:5e:a8:4a:bf:ea:94:e9:e5:fa:57:ca:e8:94:ab:18:
         37:db:b2:07:79:3b:ee:2f:77:c8:94:e4:0f:bf:4d:b6:a9:0a:
         28:e4:57:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org