Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/323830343a363137303a633030303a3a2f33342d3334203d3e20323639323334.roa
File:                     323830343a363137303a633030303a3a2f33342d3334203d3e20323639323334.roa (raw, json)
Hash identifier:          98DTp+Qh5p7YQswQ/ssx0Mwz/tClfcXn7U3T5rDQ4LU=
Subject key identifier:   BB:4D:51:69:23:1C:53:E9:AC:F9:7F:91:64:88:C0:04:BF:DC:B5:14
Certificate issuer:       /CN=5AD163E3334A2AF515A739140ED43D8500612D54
Certificate serial:       50B1F02C834460840E282999862F1C6CBAE26D69
Authority key identifier: 5A:D1:63:E3:33:4A:2A:F5:15:A7:39:14:0E:D4:3D:85:00:61:2D:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AD163E3334A2AF515A739140ED43D8500612D54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/323830343a363137303a633030303a3a2f33342d3334203d3e20323639323334.roa
Signing time:             Fri 29 Jul 2022 20:50:27 +0000
ROA not before:           Fri 29 Jul 2022 20:45:27 +0000
ROA not after:            Fri 28 Jul 2023 20:50:27 +0000
asID:                     269234
IP address blocks:        2804:6170:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b1:f0:2c:83:44:60:84:0e:28:29:99:86:2f:1c:6c:ba:e2:6d:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AD163E3334A2AF515A739140ED43D8500612D54
        Validity
            Not Before: Jul 29 20:45:27 2022 GMT
            Not After : Jul 28 20:50:27 2023 GMT
        Subject: CN=BB4D5169231C53E9ACF97F916488C004BFDCB514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:02:d3:27:3c:47:f4:c6:7e:e1:98:a4:40:a9:
                    b8:5c:37:20:8a:2a:12:55:7c:87:c5:4b:42:6e:a5:
                    e6:46:af:9c:74:e8:bd:a9:52:67:df:a3:d0:c6:db:
                    70:0a:d8:94:8d:fa:08:ec:a5:ce:4a:22:3a:81:f9:
                    20:5d:d9:9f:3f:d3:fd:97:e0:5e:70:37:0d:10:5c:
                    40:2f:0c:71:d8:ce:4d:fd:3d:fb:97:1d:0d:8a:93:
                    3f:55:41:00:91:7f:01:28:7d:23:ba:7c:f6:08:2b:
                    ff:d4:9e:0b:13:35:40:05:04:18:f1:38:05:ff:3c:
                    b9:5d:a4:24:c7:cf:3f:c0:64:7b:24:61:3f:ad:c0:
                    3a:bb:2d:f6:6b:f1:d3:33:d5:62:05:ee:70:7c:33:
                    63:93:93:94:52:6b:3f:11:2b:6d:f5:2e:18:d5:e2:
                    11:ff:fa:3c:3d:ea:74:28:c4:85:f4:f1:9f:b4:f6:
                    3d:f9:3c:89:6b:b6:7a:94:e2:8e:4a:54:4b:66:cd:
                    e1:72:3b:1b:78:5a:84:dc:ba:b2:82:19:8f:f3:9f:
                    40:2f:ba:99:85:a2:21:dd:14:2d:6e:b8:3a:c2:0d:
                    b7:3f:3c:a9:f1:82:ff:ab:14:fd:0a:46:01:d9:3f:
                    49:ce:52:df:3a:6e:c5:ff:17:1c:d1:53:41:eb:22:
                    2e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:4D:51:69:23:1C:53:E9:AC:F9:7F:91:64:88:C0:04:BF:DC:B5:14
            X509v3 Authority Key Identifier:
                keyid:5A:D1:63:E3:33:4A:2A:F5:15:A7:39:14:0E:D4:3D:85:00:61:2D:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/5AD163E3334A2AF515A739140ED43D8500612D54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AD163E3334A2AF515A739140ED43D8500612D54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/323830343a363137303a633030303a3a2f33342d3334203d3e20323639323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6170:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         74:f0:0f:39:91:c8:7e:f8:b5:02:43:b9:5f:a1:bb:61:d5:53:
         13:13:a1:97:9f:ff:cb:7d:89:34:61:2c:83:a4:06:ab:76:e2:
         81:7d:d1:76:95:61:8a:62:6a:38:45:2d:d8:86:58:91:92:0c:
         6c:f5:e0:f0:b4:07:16:52:82:29:72:d5:2e:92:b0:10:a4:fa:
         b4:bc:fa:35:32:22:ae:d8:8a:c7:e7:40:d7:3d:b2:1f:81:16:
         14:ba:f4:bc:96:e1:07:0a:77:9a:26:fb:ee:1d:a5:84:db:e4:
         c8:65:02:a6:66:86:f8:12:67:8a:b6:60:71:98:c3:bc:0a:6e:
         29:3f:7a:3c:0c:47:e0:20:b0:c7:21:58:7f:95:b4:0b:b1:c8:
         01:e8:5c:06:77:f1:4e:70:97:fb:8f:b0:11:2a:b8:ee:4d:18:
         6c:b8:12:16:ae:1d:84:ad:e4:ab:06:3a:b0:d0:2e:d8:61:b0:
         4e:bf:69:37:dc:8d:d9:b7:4b:9e:dc:e0:f4:39:1b:71:d2:eb:
         86:ca:31:ea:c0:8f:ce:3a:a5:3b:75:90:5f:6b:5a:17:53:38:
         5f:c4:8c:63:9d:f4:f3:8d:b0:40:b9:c2:a8:0c:d2:d0:ac:2a:
         86:17:3f:a4:b3:b3:4d:ff:b4:8a:46:f6:4b:eb:8a:da:08:87:
         8a:03:91:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org