Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/323830343a336436343a3a2f33322d3332203d3e20323636353238.roa
File:                     323830343a336436343a3a2f33322d3332203d3e20323636353238.roa (raw, json)
Hash identifier:          xdHD2yHHHmAYlpRD2OO/U7AYA5r2+CE1cB7UAGLYIvk=
Subject key identifier:   8D:20:E7:D8:CF:AF:AB:17:DF:FF:F4:14:50:29:DE:9C:60:7C:29:38
Certificate issuer:       /CN=C89720E3719923B2D8B06EF8F0B3C59247D69AF1
Certificate serial:       692F6CEB3B3FB8247F6CE822CCDB5623CA815759
Authority key identifier: C8:97:20:E3:71:99:23:B2:D8:B0:6E:F8:F0:B3:C5:92:47:D6:9A:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C89720E3719923B2D8B06EF8F0B3C59247D69AF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/323830343a336436343a3a2f33322d3332203d3e20323636353238.roa
Signing time:             Wed 31 May 2023 00:02:55 +0000
ROA not before:           Tue 30 May 2023 23:57:55 +0000
ROA not after:            Wed 29 May 2024 00:02:55 +0000
asID:                     266528
IP address blocks:        2804:3d64::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:2f:6c:eb:3b:3f:b8:24:7f:6c:e8:22:cc:db:56:23:ca:81:57:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C89720E3719923B2D8B06EF8F0B3C59247D69AF1
        Validity
            Not Before: May 30 23:57:55 2023 GMT
            Not After : May 29 00:02:55 2024 GMT
        Subject: CN=8D20E7D8CFAFAB17DFFFF4145029DE9C607C2938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fc:5e:e0:95:43:26:10:d9:ed:1f:1e:0c:ce:
                    b4:8d:80:0c:a3:c5:86:91:d8:5c:d3:42:8b:9f:a2:
                    e8:89:ba:bc:a6:c6:16:03:63:4f:3e:9f:96:79:c0:
                    20:d4:05:ed:67:0f:a4:7b:7e:85:33:cc:cf:84:8d:
                    b6:a8:a3:b0:fc:42:c1:0d:24:29:0a:8e:1b:a8:54:
                    12:b9:6d:b2:9e:c3:87:50:f1:ea:04:57:36:5e:98:
                    d6:1a:8a:46:91:bb:a7:e8:d3:6a:4a:f3:9d:50:7c:
                    8f:87:7f:3a:4a:1f:90:b6:bc:7f:29:58:56:ad:da:
                    41:12:67:6c:9d:2f:1c:ae:a6:58:98:e0:be:c6:66:
                    10:49:7b:06:5d:29:1a:a8:04:f0:d9:bd:6d:d4:25:
                    1a:e4:1b:6a:0e:a7:8b:35:58:59:31:e0:d6:da:3e:
                    4b:e1:e5:fe:dc:ab:b2:c6:fd:e7:88:9f:cc:e2:97:
                    d3:49:7e:28:cf:ec:f0:ee:54:e0:16:e1:d8:2d:5b:
                    27:86:3a:39:44:18:21:c3:b0:f4:7a:f2:0a:a5:14:
                    5e:86:c7:01:92:3f:ae:92:4f:d3:93:e0:c0:90:91:
                    05:c1:8b:33:e2:34:ef:b0:dc:68:d9:c7:3d:d3:24:
                    bc:3c:8a:39:0f:15:ae:21:f4:5c:f7:9a:b1:2b:1d:
                    05:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:20:E7:D8:CF:AF:AB:17:DF:FF:F4:14:50:29:DE:9C:60:7C:29:38
            X509v3 Authority Key Identifier:
                keyid:C8:97:20:E3:71:99:23:B2:D8:B0:6E:F8:F0:B3:C5:92:47:D6:9A:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/C89720E3719923B2D8B06EF8F0B3C59247D69AF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C89720E3719923B2D8B06EF8F0B3C59247D69AF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/323830343a336436343a3a2f33322d3332203d3e20323636353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d64::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:87:a0:67:72:02:08:48:d6:7a:b3:5f:ae:96:3a:03:48:eb:
         89:b5:4e:a3:06:3c:39:66:de:95:77:00:d4:2b:c9:1c:d3:93:
         44:ab:41:c0:31:d9:a7:55:f1:32:37:18:06:f8:60:75:32:fd:
         55:fe:41:f8:d8:be:6f:5c:e6:bb:ce:a9:d5:1f:6a:16:f3:85:
         8a:ff:45:70:f6:66:32:50:7c:ac:67:dd:5e:6f:43:dc:cf:15:
         61:a1:3e:b3:5c:74:14:4c:98:56:5e:f8:b0:2d:93:69:1c:28:
         4d:b9:12:39:ef:20:95:16:35:1e:8b:5e:bd:24:b0:f0:47:c7:
         f3:a1:c3:ce:cd:10:1f:c0:1f:d6:bc:18:e4:95:86:dd:d9:b4:
         7c:c1:cc:9c:21:64:1a:cf:90:ec:3f:d0:e4:90:a7:20:47:cb:
         3f:be:50:b0:52:b2:63:c1:9b:8e:61:d5:68:72:b5:9d:7d:b7:
         57:76:28:35:6e:7b:26:e8:a7:38:a8:28:2f:d5:5d:59:c2:d5:
         3b:c2:0d:a3:a8:d2:44:3a:a5:b1:d2:22:a4:f7:28:85:80:c0:
         7b:30:1a:3e:89:fc:08:d0:6d:f9:3a:6e:0f:19:a4:e8:5a:08:
         61:d7:e4:f4:f3:57:e1:3f:b8:5d:c5:b8:ea:96:fc:17:a3:ec:
         28:60:d3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:58 2024 by rpki-client on console-ams.rpki-client.org