Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/0/323830343a366232383a343030303a3a2f33342d3334203d3e20323730333832.roa
File:                     323830343a366232383a343030303a3a2f33342d3334203d3e20323730333832.roa (raw, json)
Hash identifier:          TsnwdPCVPcMYADPeP9yqqJrZTjcuKURbyUUza3duKtc=
Subject key identifier:   5C:17:7A:22:6C:CA:2C:21:B5:96:4A:05:B1:9D:16:AE:A5:BC:25:8D
Certificate issuer:       /CN=85192C5FA856A20D36DBD2155B9F94D2C94DFA3F
Certificate serial:       1D4D44D910CA2481E6FB6F60485FB4AC331130C9
Authority key identifier: 85:19:2C:5F:A8:56:A2:0D:36:DB:D2:15:5B:9F:94:D2:C9:4D:FA:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85192C5FA856A20D36DBD2155B9F94D2C94DFA3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/0/323830343a366232383a343030303a3a2f33342d3334203d3e20323730333832.roa
Signing time:             Mon 18 Dec 2023 19:19:26 +0000
ROA not before:           Mon 18 Dec 2023 19:14:26 +0000
ROA not after:            Mon 16 Dec 2024 19:19:26 +0000
asID:                     270382
IP address blocks:        2804:6b28:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:4d:44:d9:10:ca:24:81:e6:fb:6f:60:48:5f:b4:ac:33:11:30:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85192C5FA856A20D36DBD2155B9F94D2C94DFA3F
        Validity
            Not Before: Dec 18 19:14:26 2023 GMT
            Not After : Dec 16 19:19:26 2024 GMT
        Subject: CN=5C177A226CCA2C21B5964A05B19D16AEA5BC258D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:8f:7f:ad:f7:1e:d0:bd:eb:8b:03:77:4d:b5:
                    22:6f:fd:0c:05:b1:40:56:bd:ae:af:70:f4:b6:88:
                    53:8e:4e:c6:e1:5e:25:2a:cc:c9:7c:3c:69:78:b2:
                    40:98:f0:7f:a4:c6:05:34:8a:75:80:6c:49:71:47:
                    42:cb:59:c1:39:d3:f8:05:a7:39:89:4e:6b:c7:72:
                    29:1b:77:ee:5d:e7:eb:03:92:53:5b:b8:8a:22:69:
                    ef:b2:f1:81:e4:bf:5e:4f:af:90:cd:a3:f6:1c:20:
                    45:40:7b:b7:54:3b:2c:b4:86:f0:9f:f3:cc:5b:39:
                    17:0d:9a:6b:74:0d:d3:1d:e0:df:82:b7:04:49:61:
                    1c:e0:ec:40:46:3d:2f:69:6b:10:6c:4e:b6:02:7d:
                    df:75:f8:7b:c0:bf:2e:51:5a:d5:36:fc:1c:27:58:
                    98:7b:90:91:6e:78:ed:c2:9f:fb:38:81:08:82:ba:
                    4f:2d:71:65:3b:57:8a:71:f5:fc:52:f0:a7:2b:c9:
                    58:00:70:c0:6f:86:05:1e:1d:91:05:36:96:be:69:
                    f9:f9:26:e9:44:8d:d2:eb:e1:62:47:06:82:c2:10:
                    dc:7e:9d:45:72:21:84:d7:5c:ca:fc:ac:5d:fa:47:
                    e8:ac:ca:80:45:9c:21:67:4b:f2:6c:6f:df:03:5c:
                    c8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:17:7A:22:6C:CA:2C:21:B5:96:4A:05:B1:9D:16:AE:A5:BC:25:8D
            X509v3 Authority Key Identifier:
                keyid:85:19:2C:5F:A8:56:A2:0D:36:DB:D2:15:5B:9F:94:D2:C9:4D:FA:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/0/85192C5FA856A20D36DBD2155B9F94D2C94DFA3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85192C5FA856A20D36DBD2155B9F94D2C94DFA3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/0/323830343a366232383a343030303a3a2f33342d3334203d3e20323730333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b28:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         16:07:5a:71:bf:de:de:56:e3:6d:5f:8e:a4:92:28:dc:9a:e8:
         49:69:e1:90:8c:2a:0a:94:e9:94:09:e2:2e:bc:f0:94:b7:26:
         e3:3c:2b:fc:f7:45:aa:a6:e7:1b:8a:91:05:5b:3a:99:ac:0f:
         61:12:b4:0d:d7:0e:89:e1:ff:00:0c:d3:76:ff:68:28:6a:6b:
         f8:d6:d4:e4:7e:3d:1c:30:9c:63:f8:2e:79:6b:cc:14:0f:bb:
         11:51:58:ae:fc:9c:f6:94:b1:6e:c4:12:78:0b:7f:3f:9d:df:
         0f:c3:85:ca:97:26:52:57:e5:46:bc:7d:36:76:5f:30:87:69:
         e6:93:cd:38:b2:58:08:f3:dd:11:8a:f8:06:a9:8f:ee:b9:45:
         ff:9a:da:da:c8:e0:c7:bc:6d:98:26:40:69:61:8d:b3:a0:34:
         08:5c:b3:05:b5:ea:c7:30:67:bf:1c:ea:e3:7b:a6:ef:23:c0:
         62:3a:61:a8:37:f7:84:97:1d:4e:93:b1:e3:ce:1e:da:fc:d9:
         5a:75:af:f8:b0:9e:b2:8f:d7:e1:8a:1f:03:b1:c1:92:5e:11:
         94:58:10:84:33:7e:d4:93:f8:12:51:60:4f:29:7e:cc:46:68:
         7a:bc:0f:5b:98:6a:7b:99:49:21:9c:63:e4:3d:f3:53:df:97:
         bf:96:70:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:21 2024 by rpki-client on console-ams.rpki-client.org