Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/0/323830343a383530633a3a2f33322d3438203d3e20323732353534.roa
File:                     323830343a383530633a3a2f33322d3438203d3e20323732353534.roa (raw, json)
Hash identifier:          bZetFqzFVEoirEuyIkduNaaRSF2cYTj61RP5Njl5VDM=
Subject key identifier:   CD:B7:EE:D3:E4:96:E1:F6:76:4C:43:73:03:59:08:B5:2A:18:E0:D9
Certificate issuer:       /CN=B639289C584282C6EC0A358A4DE9FCCD0DC2D829
Certificate serial:       5A4FBE09830D914C8C71A75A90E1E6D6A383AB4E
Authority key identifier: B6:39:28:9C:58:42:82:C6:EC:0A:35:8A:4D:E9:FC:CD:0D:C2:D8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B639289C584282C6EC0A358A4DE9FCCD0DC2D829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/0/323830343a383530633a3a2f33322d3438203d3e20323732353534.roa
Signing time:             Thu 03 Feb 2022 23:57:48 +0000
ROA not before:           Thu 03 Feb 2022 23:52:48 +0000
ROA not after:            Thu 02 Feb 2023 23:57:48 +0000
asID:                     272554
IP address blocks:        2804:850c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:4f:be:09:83:0d:91:4c:8c:71:a7:5a:90:e1:e6:d6:a3:83:ab:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B639289C584282C6EC0A358A4DE9FCCD0DC2D829
        Validity
            Not Before: Feb  3 23:52:48 2022 GMT
            Not After : Feb  2 23:57:48 2023 GMT
        Subject: CN=CDB7EED3E496E1F6764C4373035908B52A18E0D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:14:99:bb:0a:23:b7:bb:75:64:b5:b3:6d:4c:
                    9c:c1:27:53:60:57:cc:4a:f0:ac:6a:91:a1:84:13:
                    d8:1c:93:97:de:20:02:1f:10:c3:07:a6:ac:40:cc:
                    6b:70:23:d3:ac:02:97:1d:28:f6:e0:cf:3b:a5:bc:
                    a1:e9:53:f1:55:ab:63:43:bd:3a:a8:c9:66:e2:da:
                    b4:b1:41:c6:04:da:a3:1a:e9:2f:9f:89:57:67:85:
                    b3:fc:f4:2b:77:89:39:ad:3f:e4:b5:7c:84:c9:27:
                    df:5d:f4:f7:87:77:ff:4a:37:33:08:89:a2:7b:63:
                    1f:b6:da:6c:0b:c6:69:83:fc:08:f7:e9:96:f6:b0:
                    aa:ae:f7:47:3e:01:48:ec:3e:bb:27:00:47:53:fd:
                    24:67:45:cf:55:c1:c3:3c:e3:e4:18:a3:17:6f:2b:
                    29:2d:74:62:9f:f4:23:db:98:fc:68:bb:36:46:7b:
                    a8:69:e6:4c:b9:03:e5:79:29:c6:50:9c:4e:c9:19:
                    2b:1e:f7:a2:2f:0e:e5:86:9e:8c:cf:dd:4f:42:c3:
                    ac:dc:cc:c0:d3:7c:5f:77:8c:f7:23:84:d0:3d:2f:
                    35:56:23:9d:3f:2e:77:07:33:5e:20:3a:bc:62:54:
                    a6:cb:46:14:68:3b:16:a3:78:47:1c:ab:a5:f0:6d:
                    16:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B7:EE:D3:E4:96:E1:F6:76:4C:43:73:03:59:08:B5:2A:18:E0:D9
            X509v3 Authority Key Identifier:
                keyid:B6:39:28:9C:58:42:82:C6:EC:0A:35:8A:4D:E9:FC:CD:0D:C2:D8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/0/B639289C584282C6EC0A358A4DE9FCCD0DC2D829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B639289C584282C6EC0A358A4DE9FCCD0DC2D829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/0/323830343a383530633a3a2f33322d3438203d3e20323732353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:850c::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:3b:b4:2e:24:cc:cd:d4:18:25:48:ef:b2:61:9d:00:5c:00:
         2d:70:23:50:56:b9:36:8d:3d:1f:c1:c2:f9:c1:1d:b3:ca:dd:
         ea:04:49:00:50:f6:c2:3c:35:a3:16:8d:41:f9:9a:e1:33:29:
         cc:7a:34:76:4e:5e:1c:99:d3:a6:c0:53:75:32:24:a3:ac:99:
         74:f4:28:11:a1:87:47:cd:d8:8b:65:21:e7:99:0d:23:dc:5b:
         60:c8:bf:09:1c:31:5a:08:d0:a7:bb:ce:dc:37:e2:57:86:85:
         e1:a0:16:c9:b3:23:d7:34:2d:ad:7e:7e:a0:75:ee:59:74:d4:
         8a:99:1c:79:68:cf:f4:52:7f:64:22:f1:b9:dc:f8:21:e2:f9:
         59:b0:75:3b:18:fd:69:a5:60:1b:a4:91:c2:98:0c:45:d6:19:
         39:75:2d:b2:a4:24:90:24:ce:cb:41:7f:b4:2e:3e:20:4a:20:
         f2:fc:4e:3b:de:b1:77:f2:5a:f9:90:12:97:4e:07:4e:46:e5:
         7f:e8:d4:25:79:30:1c:6c:e9:2c:50:fa:6c:68:e1:0b:82:07:
         b8:dc:c0:16:be:62:92:8a:7f:26:ef:00:b9:16:51:0b:fd:40:
         b5:66:fa:f9:cb:5c:09:a4:ab:f9:8b:76:66:68:85:20:b3:16:
         f8:31:ab:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org