Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/1/323830343a366238383a383030303a3a2f33342d3334203d3e20323730343036.roa
File:                     323830343a366238383a383030303a3a2f33342d3334203d3e20323730343036.roa (raw, json)
Hash identifier:          hUDB+a3fgptMxeUZLnyH1AUMsKoMC+9RalF8iNE+SA8=
Subject key identifier:   15:B2:CA:BB:25:CD:76:BE:F5:BB:9E:CE:8A:83:27:AC:91:04:1F:FD
Certificate issuer:       /CN=558F5EA6605670CFCCE5E212457DC4ABF929F3DB
Certificate serial:       2C2C6F7284813A9D569A134340B35B37D9852D5C
Authority key identifier: 55:8F:5E:A6:60:56:70:CF:CC:E5:E2:12:45:7D:C4:AB:F9:29:F3:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/558F5EA6605670CFCCE5E212457DC4ABF929F3DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/1/323830343a366238383a383030303a3a2f33342d3334203d3e20323730343036.roa
Signing time:             Wed 03 Apr 2024 20:33:49 +0000
ROA not before:           Wed 03 Apr 2024 20:28:49 +0000
ROA not after:            Wed 02 Apr 2025 20:33:49 +0000
asID:                     270406
IP address blocks:        2804:6b88:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:2c:6f:72:84:81:3a:9d:56:9a:13:43:40:b3:5b:37:d9:85:2d:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558F5EA6605670CFCCE5E212457DC4ABF929F3DB
        Validity
            Not Before: Apr  3 20:28:49 2024 GMT
            Not After : Apr  2 20:33:49 2025 GMT
        Subject: CN=15B2CABB25CD76BEF5BB9ECE8A8327AC91041FFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:28:85:d5:b9:81:54:e3:3d:f1:dc:29:cd:04:
                    eb:06:28:b9:3b:f3:56:d6:e7:8a:aa:69:73:56:0f:
                    1a:42:30:de:c1:e2:22:13:13:4e:08:bd:38:80:ca:
                    53:1c:a3:83:12:c7:5e:6d:a2:10:94:73:a7:fd:67:
                    2a:45:bc:d6:87:7e:d7:43:f6:ab:23:c7:01:37:f3:
                    1f:a0:e1:8c:af:23:c8:44:2f:4c:43:9b:30:22:7c:
                    39:3b:6b:07:2c:4c:b1:bf:0c:a7:2b:70:27:0d:33:
                    65:3e:2e:46:08:c7:35:e9:6f:55:b6:22:e3:6a:f0:
                    c6:a1:2c:97:b3:04:76:3c:f4:eb:68:06:54:d1:a4:
                    9e:8e:b7:a7:66:e8:5e:f2:d3:0a:ba:80:4f:a9:e5:
                    73:7d:01:d0:d7:14:b8:01:18:52:ab:d0:dd:80:2b:
                    ea:53:fd:87:f5:9c:7d:a8:07:b9:e2:f1:ea:31:49:
                    5a:c2:51:1c:ba:e9:ee:6c:59:8d:25:1a:9d:9c:ca:
                    45:ed:b7:a5:85:5a:ae:83:99:7a:35:5e:56:7f:53:
                    4d:1d:7a:b8:78:a9:b4:25:61:bf:26:86:04:b7:45:
                    de:97:95:87:15:ad:6e:e1:7f:f3:cc:c0:c9:d1:c7:
                    62:1d:8c:5e:b4:72:f8:25:8b:7a:9e:c9:c7:b9:69:
                    aa:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B2:CA:BB:25:CD:76:BE:F5:BB:9E:CE:8A:83:27:AC:91:04:1F:FD
            X509v3 Authority Key Identifier:
                keyid:55:8F:5E:A6:60:56:70:CF:CC:E5:E2:12:45:7D:C4:AB:F9:29:F3:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/1/558F5EA6605670CFCCE5E212457DC4ABF929F3DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/558F5EA6605670CFCCE5E212457DC4ABF929F3DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/1/323830343a366238383a383030303a3a2f33342d3334203d3e20323730343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b88:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6b:9a:f2:b7:4c:2e:89:ab:3a:52:1f:5e:3b:5a:b0:fb:74:5a:
         68:66:b6:be:0a:4e:b0:ca:a9:31:a3:d1:22:61:eb:1f:e5:62:
         d6:61:8e:bd:65:e3:11:90:cf:b1:60:c5:7b:c7:5c:96:69:85:
         05:33:80:97:25:2a:a1:9a:d7:20:57:cb:7d:8f:8f:9a:aa:b3:
         52:8b:0b:83:e0:fe:cb:74:05:72:5f:90:39:b1:8d:30:ca:e5:
         60:7e:1f:87:ac:e3:4c:e2:f1:09:7d:74:c7:85:b5:9b:81:76:
         35:58:98:98:6b:db:b9:e5:08:ef:59:e8:94:83:9b:b7:eb:ff:
         2d:39:5c:4f:2e:a4:cc:f4:1f:13:13:07:19:5c:f6:f7:db:7f:
         5d:43:d4:df:7f:de:93:ed:47:7a:ba:6d:81:f6:6a:3e:46:d6:
         0c:0a:b6:22:20:6c:63:51:f7:4d:96:38:b4:71:2f:09:ff:9f:
         c4:be:1c:94:f1:da:5d:1e:1a:17:b2:18:5f:6e:5f:61:a9:bf:
         44:1d:28:39:9c:2b:d9:d6:aa:e5:0d:c2:20:b0:19:a3:b6:f2:
         d8:91:92:48:cc:44:3e:f7:7d:ad:03:82:81:1c:ad:69:38:cb:
         4d:af:44:75:6b:46:f9:85:b8:48:59:f4:8b:1e:5a:13:43:b5:
         24:6b:b9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:17 2024 by rpki-client on console-ams.rpki-client.org