Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/323830343a353339633a383030303a3a2f33332d3333203d3e20323638353935.roa
File:                     323830343a353339633a383030303a3a2f33332d3333203d3e20323638353935.roa (raw, json)
Hash identifier:          tHAE9M+DvZfcBGmM0pGdVYbNUVSyMM4nmit+ozp/PA0=
Subject key identifier:   D6:18:5D:D7:71:8C:94:42:A6:0D:06:98:8D:27:9D:C9:B2:6E:AA:BB
Certificate issuer:       /CN=D9A03D6076706BEDDD5FF21F685521DF78B0E2AA
Certificate serial:       1EA3F459FE3EE5C63885A10845975D42AD4A08A5
Authority key identifier: D9:A0:3D:60:76:70:6B:ED:DD:5F:F2:1F:68:55:21:DF:78:B0:E2:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9A03D6076706BEDDD5FF21F685521DF78B0E2AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/323830343a353339633a383030303a3a2f33332d3333203d3e20323638353935.roa
Signing time:             Mon 22 Aug 2022 21:36:45 +0000
ROA not before:           Mon 22 Aug 2022 21:31:45 +0000
ROA not after:            Mon 21 Aug 2023 21:36:45 +0000
asID:                     268595
IP address blocks:        2804:539c:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:a3:f4:59:fe:3e:e5:c6:38:85:a1:08:45:97:5d:42:ad:4a:08:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9A03D6076706BEDDD5FF21F685521DF78B0E2AA
        Validity
            Not Before: Aug 22 21:31:45 2022 GMT
            Not After : Aug 21 21:36:45 2023 GMT
        Subject: CN=D6185DD7718C9442A60D06988D279DC9B26EAABB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b0:57:85:12:b0:c8:7f:92:1e:bb:66:05:ca:
                    f7:32:19:c3:38:29:6d:a7:6b:61:2a:14:d3:08:94:
                    96:86:a9:fb:01:f4:31:f1:98:a6:f3:39:9a:99:f6:
                    82:66:81:de:32:cb:b9:e8:ea:cd:d3:47:40:ac:6e:
                    bb:bd:e4:e6:ce:52:d7:b1:d3:09:39:51:99:c8:7a:
                    a0:b0:1c:90:0c:a7:3b:01:ce:c3:e0:2f:07:ab:1b:
                    f2:90:3f:61:12:b3:42:f0:00:d8:5f:84:96:95:59:
                    f6:a9:4d:76:72:79:2b:9a:a4:46:b5:1c:86:c7:42:
                    cf:d0:ff:33:8b:23:d1:67:05:a8:5b:46:06:b5:4e:
                    79:93:a4:62:26:44:c8:b9:88:7a:81:be:8a:7d:1f:
                    b4:a3:a2:88:04:ee:cd:29:50:6b:e8:d2:64:2f:55:
                    1c:49:b3:a9:f0:1a:d3:35:7d:fd:39:59:1e:85:44:
                    1c:5a:df:f1:f4:06:9e:c1:5d:75:ea:61:72:a6:47:
                    a0:a9:84:ec:02:7f:d2:2c:eb:c3:29:8d:06:8e:d9:
                    54:c5:cc:dc:7f:4c:74:d4:83:53:06:0a:43:aa:c5:
                    03:04:a2:f3:8e:73:4e:53:de:5e:dc:e2:70:7e:ec:
                    b1:cd:ce:c6:ff:6e:3d:1e:4a:78:ba:fb:10:5c:56:
                    01:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:18:5D:D7:71:8C:94:42:A6:0D:06:98:8D:27:9D:C9:B2:6E:AA:BB
            X509v3 Authority Key Identifier:
                keyid:D9:A0:3D:60:76:70:6B:ED:DD:5F:F2:1F:68:55:21:DF:78:B0:E2:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/D9A03D6076706BEDDD5FF21F685521DF78B0E2AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9A03D6076706BEDDD5FF21F685521DF78B0E2AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/323830343a353339633a383030303a3a2f33332d3333203d3e20323638353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:539c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         05:2d:99:f7:cd:c2:e4:67:33:4f:c5:9a:d5:04:10:2d:93:f4:
         fb:78:06:b4:ff:80:0f:fc:11:c8:a8:bd:13:9b:0c:e1:36:db:
         4d:6f:ba:13:cf:18:77:b3:ce:89:f7:17:08:4c:d4:a5:48:1d:
         b5:6f:eb:62:84:4e:13:43:c0:00:71:91:67:c8:49:64:93:96:
         77:3b:1c:83:c9:8f:69:5a:49:9b:bc:88:f6:22:73:cc:8e:60:
         de:c1:96:77:85:30:75:d7:8d:1a:41:cf:06:76:29:c3:60:ac:
         27:7d:00:54:58:f4:f1:51:94:9e:68:db:ca:08:e6:a0:55:8d:
         ae:d0:94:fd:15:3b:97:7a:4a:9c:54:cc:2f:6b:75:25:bf:e3:
         ea:fd:cf:a6:22:40:ad:3f:fd:a6:e5:b1:37:da:31:11:10:ba:
         b0:4f:a2:08:97:9b:43:9b:1e:59:8c:8c:af:b2:58:99:22:11:
         e7:3d:61:d3:4e:a1:48:95:f0:6e:d3:23:7d:2a:b4:11:8e:21:
         a3:71:ad:ff:7a:be:f1:04:5d:57:bf:0b:0f:91:4a:61:5d:9f:
         58:14:df:3c:21:d0:53:37:4e:ea:a9:7a:b6:d5:91:9d:d1:02:
         34:57:f0:37:6a:78:db:e3:00:3d:5d:bb:2b:2f:b4:9e:fe:ad:
         1e:24:2e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org