Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2gmGM6Td4G1HHNtjKVLk5BAxrAevNzvAhaSH5w5yAJeY/0/323830343a363765633a3a2f33332d3333203d3e20323639363539.roa
File:                     323830343a363765633a3a2f33332d3333203d3e20323639363539.roa (raw, json)
Hash identifier:          5MPCIDMngsKvKx5A/k06h3mYHXg0EaV/tJ1/oSJ+MtA=
Subject key identifier:   C2:D4:96:07:DE:51:4F:D3:AD:96:95:DB:38:D9:B9:0D:92:11:E5:3E
Certificate issuer:       /CN=9A58D0B7179B6EA51E78B42B74723648AD8910EE
Certificate serial:       50D25507D423B46A72C5FA616DEC95ED42AD90AB
Authority key identifier: 9A:58:D0:B7:17:9B:6E:A5:1E:78:B4:2B:74:72:36:48:AD:89:10:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A58D0B7179B6EA51E78B42B74723648AD8910EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2gmGM6Td4G1HHNtjKVLk5BAxrAevNzvAhaSH5w5yAJeY/0/323830343a363765633a3a2f33332d3333203d3e20323639363539.roa
Signing time:             Fri 18 Nov 2022 14:06:38 +0000
ROA not before:           Fri 18 Nov 2022 14:01:38 +0000
ROA not after:            Fri 17 Nov 2023 14:06:38 +0000
asID:                     269659
IP address blocks:        2804:67ec::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:d2:55:07:d4:23:b4:6a:72:c5:fa:61:6d:ec:95:ed:42:ad:90:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A58D0B7179B6EA51E78B42B74723648AD8910EE
        Validity
            Not Before: Nov 18 14:01:38 2022 GMT
            Not After : Nov 17 14:06:38 2023 GMT
        Subject: CN=C2D49607DE514FD3AD9695DB38D9B90D9211E53E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:50:2c:41:ff:3d:29:9b:cc:9f:83:1f:4f:e3:
                    1a:1e:e3:af:40:25:b9:1b:b0:e0:86:b3:6d:f7:24:
                    04:b8:89:b1:8a:f6:87:c6:d7:8c:b3:eb:44:8f:5e:
                    99:50:c2:b7:84:25:57:6b:87:ef:ed:b2:35:23:fb:
                    8f:48:19:b3:25:98:be:2c:e6:57:48:d6:3a:60:08:
                    e4:11:83:df:91:be:1d:98:6b:c7:ed:cf:35:9c:5c:
                    a0:7a:e3:a8:db:4e:07:57:92:16:2f:ef:1a:11:35:
                    a1:62:d5:91:2b:f9:30:84:5d:32:a1:db:5d:53:4b:
                    0b:aa:2a:13:fa:2a:0d:a7:9d:35:c3:0c:b5:ee:bf:
                    d7:0d:3d:eb:7f:ba:eb:f5:d2:7f:c5:2c:79:4a:60:
                    9b:de:32:3b:2e:a4:1c:61:ba:99:1f:89:ab:be:0c:
                    d4:be:c8:38:1b:bb:6f:b1:ee:52:01:0b:3b:45:ad:
                    aa:04:07:ca:90:c1:79:21:d8:11:e8:cc:44:96:82:
                    4b:c3:2a:05:0e:6d:67:0c:30:a9:19:a8:dc:c5:78:
                    82:c7:1a:e9:f4:fe:0a:dc:3e:eb:3a:4f:cf:3e:6c:
                    ce:9b:51:94:2f:c0:e2:56:df:68:e8:ee:64:43:11:
                    9c:90:c0:2f:63:6b:a4:45:4b:b7:cf:b5:0c:67:14:
                    32:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D4:96:07:DE:51:4F:D3:AD:96:95:DB:38:D9:B9:0D:92:11:E5:3E
            X509v3 Authority Key Identifier:
                keyid:9A:58:D0:B7:17:9B:6E:A5:1E:78:B4:2B:74:72:36:48:AD:89:10:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2gmGM6Td4G1HHNtjKVLk5BAxrAevNzvAhaSH5w5yAJeY/0/9A58D0B7179B6EA51E78B42B74723648AD8910EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A58D0B7179B6EA51E78B42B74723648AD8910EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2gmGM6Td4G1HHNtjKVLk5BAxrAevNzvAhaSH5w5yAJeY/0/323830343a363765633a3a2f33332d3333203d3e20323639363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67ec::/33

    Signature Algorithm: sha256WithRSAEncryption
         a0:6b:d1:94:c0:76:66:9a:8a:32:cd:7e:4a:3b:6e:2b:67:95:
         3a:39:7f:1b:ba:7f:74:e1:5c:0b:6f:42:49:d0:e0:a0:33:a6:
         d2:76:ec:16:7b:a1:7b:f4:b0:28:c5:14:1e:5f:27:8a:1c:dd:
         1d:d4:4f:66:64:c0:a6:7d:4a:bd:87:a9:cb:f8:7f:e4:cb:21:
         94:4b:da:48:27:2b:df:33:d4:e5:5e:25:f5:26:06:f9:fe:6d:
         e3:e3:e9:70:1b:2a:1b:ad:c1:f6:8b:bc:7e:e9:da:2d:d9:cb:
         c4:64:42:7d:8c:06:9c:9c:05:f8:26:af:c5:4c:bb:43:83:fa:
         b4:da:1c:7e:5d:c3:5e:ed:51:aa:0c:86:0a:17:2d:6e:50:b4:
         5c:09:67:ad:dd:e7:d6:21:42:d9:db:f1:b3:51:ac:ed:e9:f0:
         a7:c8:7f:b7:03:89:ee:f1:50:2b:a9:9c:0e:d1:38:f6:15:57:
         ab:f3:ba:90:cd:89:4e:f8:31:e5:14:cb:7d:a2:d1:0c:8e:b1:
         5a:92:5f:da:88:ff:a1:39:c2:17:1c:49:16:43:bc:fe:a0:d5:
         ac:9f:50:c4:0d:ea:7a:78:d3:33:ef:38:14:0d:39:91:d1:56:
         c2:c6:23:fc:5d:cd:27:ff:a4:28:e5:79:b1:96:73:79:cb:d0:
         c0:9c:1d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org