Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/323830343a323134303a313830313a3a2f34382d3438203d3e203533303539.roa
File:                     323830343a323134303a313830313a3a2f34382d3438203d3e203533303539.roa (raw, json)
Hash identifier:          6zCwQrmUxHomqGQXo2xYMK9+mUVGn4Owki/fbIG03xM=
Subject key identifier:   74:9F:82:68:44:59:C2:DD:D0:FF:AD:77:6A:ED:70:F7:66:45:50:36
Certificate issuer:       /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial:       06305F65D88BA8006A291C5E799D89A54615B989
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/323830343a323134303a313830313a3a2f34382d3438203d3e203533303539.roa
Signing time:             Fri 03 Mar 2023 12:17:45 +0000
ROA not before:           Fri 03 Mar 2023 12:12:45 +0000
ROA not after:            Fri 01 Mar 2024 12:17:45 +0000
asID:                     53059
IP address blocks:        2804:2140:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:30:5f:65:d8:8b:a8:00:6a:29:1c:5e:79:9d:89:a5:46:15:b9:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
        Validity
            Not Before: Mar  3 12:12:45 2023 GMT
            Not After : Mar  1 12:17:45 2024 GMT
        Subject: CN=749F82684459C2DDD0FFAD776AED70F766455036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f4:a0:ff:de:50:bb:42:d4:14:4f:82:52:47:
                    b7:23:89:7d:1d:72:3e:92:4d:29:4b:5e:d2:4b:b1:
                    6f:29:7b:b3:d4:50:24:e2:5f:bc:6a:f5:47:62:7c:
                    b9:3c:ec:f1:6c:4b:a5:24:bd:c8:35:2e:22:1b:23:
                    c4:12:a2:fc:aa:c7:4b:2c:d5:98:76:62:63:71:0a:
                    53:d7:e9:3c:3c:56:03:f9:bc:02:62:ed:07:7c:94:
                    cc:10:17:1b:78:9d:44:a2:30:cf:db:ee:b0:f6:7b:
                    75:56:1d:2b:d6:ce:c2:8d:a4:aa:39:a1:ae:f5:cc:
                    03:06:5b:ff:60:fb:81:00:33:64:ee:e0:ae:2e:a2:
                    5c:fe:2e:f0:be:a7:0e:2b:21:a8:b7:96:8c:60:73:
                    2d:fd:ea:1a:34:bc:06:2c:bf:67:03:e3:d9:c5:01:
                    b1:00:2f:89:a4:69:50:aa:4a:69:95:b3:de:5e:ae:
                    63:a3:0a:cc:76:ce:20:03:2c:34:f8:4c:3f:e1:49:
                    65:47:13:a2:08:09:09:d8:8f:e9:2e:50:9f:2d:b4:
                    d0:63:ee:70:2f:46:7c:b6:fc:24:e1:86:ef:2a:24:
                    f9:e4:95:20:1b:fa:8c:e7:38:5f:68:74:d9:b8:d7:
                    89:28:d0:7c:83:4e:50:cd:b1:61:ab:f9:54:8f:16:
                    d5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:9F:82:68:44:59:C2:DD:D0:FF:AD:77:6A:ED:70:F7:66:45:50:36
            X509v3 Authority Key Identifier:
                keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/323830343a323134303a313830313a3a2f34382d3438203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2140:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         c1:7a:a9:4c:12:e8:14:07:0f:45:f4:3c:0f:26:0a:f9:e2:d1:
         ec:38:29:d6:47:d3:fa:5c:78:8b:9f:74:d1:53:42:14:14:a2:
         20:5f:a4:0a:ea:a5:43:cd:64:f4:61:24:4b:c1:a8:76:56:b7:
         41:5c:4c:80:4f:0d:cc:33:c0:d2:7e:5b:28:51:57:ff:7f:4d:
         f4:4c:9f:d4:26:da:f9:a6:09:2c:59:52:0a:53:54:e0:24:2c:
         b2:8b:29:d7:95:74:3c:54:94:ca:87:36:16:96:52:b5:40:fc:
         17:60:fc:80:00:89:89:03:64:84:ac:4e:ae:07:38:bd:f6:23:
         1b:d2:51:1f:9f:af:6a:09:57:5f:ee:85:c7:29:8c:d4:b2:e2:
         91:90:9e:82:ce:bc:34:cb:53:fa:9b:95:b8:1c:44:be:5f:24:
         54:ca:a4:c6:85:0e:3c:b0:be:d5:98:fc:fa:4f:6a:a6:64:fb:
         82:ad:20:e7:8e:51:d4:43:48:d0:02:19:3e:a3:1c:f9:be:f1:
         dc:05:ca:47:42:9a:c0:9f:36:ff:80:64:0c:9e:78:d1:08:2b:
         e2:53:8b:32:ae:48:a4:61:77:5f:5d:6e:ac:ab:56:60:6b:5d:
         58:2b:21:7f:69:af:22:f6:4c:0d:d2:42:72:56:59:7e:0f:8b:
         34:40:20:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org