Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/0/323830343a353834633a3a2f33332d3333203d3e20323638313230.roa
File:                     323830343a353834633a3a2f33332d3333203d3e20323638313230.roa (raw, json)
Hash identifier:          cx7p31knTxE9wQepopfGlJDRWIXZG/hpGTfsUaHx+YE=
Subject key identifier:   5E:90:FF:15:82:CA:BD:5E:3C:C4:46:79:FC:4B:AE:3F:86:A3:75:30
Certificate issuer:       /CN=95207D3AA322298A09BE47FE56BE6B847CBD596E
Certificate serial:       72B1F5E038787BFEA68AE12AAB3D983E2C8619F2
Authority key identifier: 95:20:7D:3A:A3:22:29:8A:09:BE:47:FE:56:BE:6B:84:7C:BD:59:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95207D3AA322298A09BE47FE56BE6B847CBD596E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/0/323830343a353834633a3a2f33332d3333203d3e20323638313230.roa
Signing time:             Thu 07 Mar 2024 22:52:37 +0000
ROA not before:           Thu 07 Mar 2024 22:47:37 +0000
ROA not after:            Thu 06 Mar 2025 22:52:37 +0000
asID:                     268120
IP address blocks:        2804:584c::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:b1:f5:e0:38:78:7b:fe:a6:8a:e1:2a:ab:3d:98:3e:2c:86:19:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95207D3AA322298A09BE47FE56BE6B847CBD596E
        Validity
            Not Before: Mar  7 22:47:37 2024 GMT
            Not After : Mar  6 22:52:37 2025 GMT
        Subject: CN=5E90FF1582CABD5E3CC44679FC4BAE3F86A37530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f1:8a:2e:04:fd:1e:06:4a:f4:a4:91:b8:58:
                    0d:47:21:81:80:2d:fe:d3:d7:98:cd:b2:76:1a:c5:
                    f3:7b:51:3c:45:06:48:f3:63:62:7f:e5:d5:e2:7f:
                    4d:af:fc:1c:85:3f:c2:d7:b5:7e:6f:55:a8:c4:45:
                    8f:8e:9c:bf:76:31:56:7a:ed:92:80:a1:3d:f2:f2:
                    82:88:4c:fc:aa:fc:89:7a:43:fc:39:ae:5d:0d:72:
                    09:6f:04:92:3c:3c:e6:2b:56:18:b0:fe:c9:0a:e6:
                    96:e6:1f:55:6e:79:91:f9:8b:f6:b7:ec:92:3e:db:
                    92:c9:0a:33:34:44:94:88:34:90:a8:3f:c1:6a:4a:
                    b2:0b:7a:cf:b4:58:86:e0:20:8b:0d:35:51:d4:08:
                    ef:52:6f:e8:65:63:f2:3d:c7:8b:36:3d:fc:38:ba:
                    01:e8:f9:e8:fe:6e:56:c8:55:a4:1b:a3:e4:fb:ac:
                    82:91:ab:e7:6b:d9:bd:9c:e5:32:0e:11:22:9a:4a:
                    75:7f:34:85:fe:dd:37:c3:f1:10:ec:11:67:30:53:
                    ed:ec:b0:47:52:57:5d:b4:27:ba:57:4b:b9:83:ab:
                    1d:f7:6d:9e:eb:72:e8:71:e2:42:8b:81:50:7b:e4:
                    42:dd:d0:18:07:b7:53:88:ac:cc:99:67:63:20:71:
                    43:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:90:FF:15:82:CA:BD:5E:3C:C4:46:79:FC:4B:AE:3F:86:A3:75:30
            X509v3 Authority Key Identifier:
                keyid:95:20:7D:3A:A3:22:29:8A:09:BE:47:FE:56:BE:6B:84:7C:BD:59:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/0/95207D3AA322298A09BE47FE56BE6B847CBD596E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95207D3AA322298A09BE47FE56BE6B847CBD596E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/0/323830343a353834633a3a2f33332d3333203d3e20323638313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:584c::/33

    Signature Algorithm: sha256WithRSAEncryption
         3a:28:02:f3:56:15:04:53:6a:74:6f:88:f5:35:44:62:19:c5:
         99:e8:e2:4d:70:e1:02:7d:9f:91:a9:0b:1c:ff:d0:7d:3e:a8:
         92:89:16:6d:6a:7d:54:d7:f4:e6:d4:76:b2:d0:c8:a1:66:4e:
         f5:cb:98:99:47:61:99:ca:19:31:ee:aa:1f:1b:ae:8c:44:d8:
         df:74:ed:cb:46:38:3e:18:00:25:16:67:ac:29:1e:b2:fe:63:
         5a:99:b6:ab:0d:1d:70:76:ee:1e:07:e3:e6:bd:7e:d8:6f:d3:
         b6:c5:0a:4e:1d:7b:8a:65:cf:aa:08:6e:4d:26:9b:7c:28:f9:
         e6:5d:da:ee:e7:d7:6f:21:8e:11:8a:9c:02:55:2c:98:66:cd:
         0e:57:b5:d4:3a:41:3f:50:fa:59:b3:c9:cb:bf:ce:35:59:ed:
         e3:06:d4:98:1f:1f:3f:73:68:7d:ce:9f:ea:76:89:06:bd:3b:
         25:80:57:20:78:d0:6c:ca:04:43:0c:55:85:47:b8:c1:0a:66:
         3a:8a:cf:33:06:90:da:e7:87:af:46:7f:23:61:0e:2d:23:84:
         ea:6c:68:cb:08:79:0b:95:ce:27:19:99:a3:75:a1:be:72:f4:
         c0:02:b8:a8:47:7b:02:a3:65:9f:a1:82:2d:e4:82:47:49:94:
         b3:ad:d1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org