Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/0/323830343a383134343a3a2f33322d3332203d3e20323732343433.roa
File:                     323830343a383134343a3a2f33322d3332203d3e20323732343433.roa (raw, json)
Hash identifier:          VR/t4EeToSfqg7kZjs5sAXruZzGbuQIm2ZFBMjg6qyg=
Subject key identifier:   FF:10:5C:97:6F:95:8C:73:3B:46:F7:34:8E:A0:63:62:8F:29:F5:9C
Certificate issuer:       /CN=39585009EDAA4FFC8B2D3209D163C36E2DF83941
Certificate serial:       322210230B23E07B6EAB181ABB70031694353EF6
Authority key identifier: 39:58:50:09:ED:AA:4F:FC:8B:2D:32:09:D1:63:C3:6E:2D:F8:39:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/39585009EDAA4FFC8B2D3209D163C36E2DF83941.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/0/323830343a383134343a3a2f33322d3332203d3e20323732343433.roa
Signing time:             Mon 05 Jun 2023 20:25:08 +0000
ROA not before:           Mon 05 Jun 2023 20:20:08 +0000
ROA not after:            Mon 03 Jun 2024 20:25:08 +0000
asID:                     272443
IP address blocks:        2804:8144::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:22:10:23:0b:23:e0:7b:6e:ab:18:1a:bb:70:03:16:94:35:3e:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39585009EDAA4FFC8B2D3209D163C36E2DF83941
        Validity
            Not Before: Jun  5 20:20:08 2023 GMT
            Not After : Jun  3 20:25:08 2024 GMT
        Subject: CN=FF105C976F958C733B46F7348EA063628F29F59C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:64:81:f1:83:90:3f:07:f3:12:04:d1:fb:e2:
                    f1:4b:0e:c2:6c:9a:07:f2:12:b3:61:43:d2:b9:89:
                    e0:82:e9:98:75:2f:70:52:b3:b4:4c:a6:3b:da:d1:
                    09:cf:a8:44:4e:e3:8a:76:db:e6:1e:c1:85:d4:f1:
                    0b:8f:08:c1:1e:79:35:7b:80:dc:4a:93:bd:88:b5:
                    2b:ac:03:a9:94:3f:48:a6:4f:06:26:17:af:ff:b3:
                    a7:7d:d6:94:a7:8e:7a:c3:c0:f1:cb:23:bf:c7:41:
                    e2:8b:39:2a:20:3d:4d:5d:de:df:74:03:0e:2f:1e:
                    03:65:d5:18:83:e7:7e:d0:c6:9f:d4:06:76:ca:ce:
                    fe:90:f1:b1:62:72:85:9a:d4:97:52:cc:98:d5:c0:
                    56:de:ef:6b:e8:74:05:27:e8:9a:96:ea:2a:d2:a3:
                    01:73:39:38:45:42:50:4b:0a:8b:6a:88:21:42:71:
                    21:91:cf:4c:da:c2:25:ff:50:50:b9:e4:46:e4:18:
                    17:e0:d8:fa:99:7f:94:b7:c3:29:83:bb:50:cc:0d:
                    6f:f7:68:96:e7:10:55:e7:35:8f:fa:18:62:f0:e0:
                    d0:bc:ba:f5:09:02:86:b5:fd:e8:e7:11:63:e1:cb:
                    29:c4:aa:a8:29:9a:e3:e5:e0:4f:73:fa:6a:56:aa:
                    42:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:10:5C:97:6F:95:8C:73:3B:46:F7:34:8E:A0:63:62:8F:29:F5:9C
            X509v3 Authority Key Identifier:
                keyid:39:58:50:09:ED:AA:4F:FC:8B:2D:32:09:D1:63:C3:6E:2D:F8:39:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/0/39585009EDAA4FFC8B2D3209D163C36E2DF83941.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/39585009EDAA4FFC8B2D3209D163C36E2DF83941.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/0/323830343a383134343a3a2f33322d3332203d3e20323732343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8144::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:a3:9b:bd:5e:01:7c:a3:57:5e:73:39:2f:bb:13:58:71:ca:
         60:df:9c:a4:25:d2:b9:d0:49:f1:ef:0d:55:05:bd:43:ea:30:
         ee:1a:25:af:be:a2:27:a6:bc:b7:cb:c1:6e:d3:01:9f:4b:f9:
         5b:33:cf:63:69:f0:1f:73:b4:76:1f:31:6a:0b:5e:bd:24:f2:
         41:11:d9:8a:37:dc:5d:e5:ae:75:db:a4:59:25:5f:a2:39:71:
         b5:db:75:b8:b6:f0:59:0e:a4:5f:14:71:83:34:ca:11:ae:a2:
         4e:a1:7b:fb:4f:5a:6b:f1:df:e5:da:e5:77:d0:b6:79:4d:22:
         c7:65:6d:34:2b:37:5b:89:f6:30:a2:6a:99:63:b9:0d:98:87:
         cf:fa:0e:79:7a:cd:84:10:53:d3:02:d3:56:6b:70:2e:76:e9:
         8c:04:f0:7f:f6:95:dd:c1:18:f6:d2:89:09:ae:99:18:ff:33:
         6c:7e:f4:99:37:56:03:50:c1:0b:4b:46:b5:90:68:c8:7c:ba:
         aa:1d:93:24:32:ff:47:77:8f:9e:34:b3:0f:47:dd:63:43:e4:
         ae:01:be:e2:51:d6:65:65:15:ea:dc:45:2b:d1:90:7e:3c:e4:
         0f:2a:46:fd:2c:30:38:53:23:31:81:aa:a4:8b:f9:94:7d:46:
         2f:09:1c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org