Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/38XQoywVwxp3ZRFypDYwcr3SqcWNwwoZCsbpJiihu28K/0/323830343a326462343a343030303a3a2f33342d3334203d3e20323635323938.roa
File:                     323830343a326462343a343030303a3a2f33342d3334203d3e20323635323938.roa (raw, json)
Hash identifier:          rZSshEvQ/1WVXsRuCMmxN+CtwDLZappfzqCDzbKyzZE=
Subject key identifier:   C5:57:8A:6F:3F:E6:DC:B3:EF:FB:F6:EE:98:F5:45:B0:C3:38:E1:CE
Certificate issuer:       /CN=C89FB798B987A5F0993D2D3DA37341AC88185E4E
Certificate serial:       7FBBF69D9C7BE98447D6BF024776C0DE24305A3D
Authority key identifier: C8:9F:B7:98:B9:87:A5:F0:99:3D:2D:3D:A3:73:41:AC:88:18:5E:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C89FB798B987A5F0993D2D3DA37341AC88185E4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/38XQoywVwxp3ZRFypDYwcr3SqcWNwwoZCsbpJiihu28K/0/323830343a326462343a343030303a3a2f33342d3334203d3e20323635323938.roa
Signing time:             Fri 22 Apr 2022 12:22:16 +0000
ROA not before:           Fri 22 Apr 2022 12:17:16 +0000
ROA not after:            Fri 21 Apr 2023 12:22:16 +0000
asID:                     265298
IP address blocks:        2804:2db4:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:bb:f6:9d:9c:7b:e9:84:47:d6:bf:02:47:76:c0:de:24:30:5a:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C89FB798B987A5F0993D2D3DA37341AC88185E4E
        Validity
            Not Before: Apr 22 12:17:16 2022 GMT
            Not After : Apr 21 12:22:16 2023 GMT
        Subject: CN=C5578A6F3FE6DCB3EFFBF6EE98F545B0C338E1CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c7:90:3b:d5:0e:1c:48:e7:fd:b7:ee:15:b1:
                    80:4a:84:3d:f7:b0:0e:fb:42:29:bb:f3:af:0b:c5:
                    8a:38:da:e8:3d:ea:bd:1a:79:f1:04:12:46:eb:49:
                    38:6a:64:2e:7b:ca:da:a0:41:71:aa:12:a3:21:8a:
                    89:5f:78:67:31:f3:b2:21:4b:9a:41:f5:5a:42:4f:
                    22:e1:1b:ca:94:8b:df:68:68:bc:ad:a0:52:7a:c8:
                    09:b1:fa:56:04:f0:72:ea:45:a5:0c:1d:75:69:4f:
                    28:98:ad:eb:bb:7c:26:db:9d:92:f1:cb:ec:6b:12:
                    8b:48:96:ad:40:6a:16:7e:00:be:bc:3e:5f:74:c6:
                    b5:f0:1e:18:f5:ed:72:3f:35:88:c7:48:88:97:3a:
                    50:41:e4:fb:82:8a:d3:43:89:76:9f:b6:87:6f:71:
                    7b:20:83:f7:41:52:a0:4b:41:29:2a:0d:dc:e5:17:
                    89:fa:35:9f:f1:d6:44:52:d3:75:2f:ef:47:41:e0:
                    85:04:0d:6f:d5:00:0b:8a:d7:cc:58:6e:8d:6b:a8:
                    7e:66:e0:7b:f9:e5:4d:79:31:be:db:93:7e:2b:32:
                    c5:76:94:3f:7c:ec:34:41:d3:fc:f6:b7:65:0b:cc:
                    78:1b:59:92:f0:e0:36:cb:cd:a5:de:f3:61:a3:8b:
                    51:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:57:8A:6F:3F:E6:DC:B3:EF:FB:F6:EE:98:F5:45:B0:C3:38:E1:CE
            X509v3 Authority Key Identifier:
                keyid:C8:9F:B7:98:B9:87:A5:F0:99:3D:2D:3D:A3:73:41:AC:88:18:5E:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/38XQoywVwxp3ZRFypDYwcr3SqcWNwwoZCsbpJiihu28K/0/C89FB798B987A5F0993D2D3DA37341AC88185E4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C89FB798B987A5F0993D2D3DA37341AC88185E4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/38XQoywVwxp3ZRFypDYwcr3SqcWNwwoZCsbpJiihu28K/0/323830343a326462343a343030303a3a2f33342d3334203d3e20323635323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2db4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         48:fa:ce:21:99:db:64:94:d2:19:26:15:a3:66:a4:94:31:fd:
         95:9b:61:5d:bf:88:03:7b:a4:27:82:9c:31:61:8c:18:64:e4:
         2e:21:4f:1c:29:40:78:6a:b2:b4:2a:b0:6d:f5:48:69:ed:d6:
         8c:fc:c6:51:fc:9f:06:ae:1f:47:1c:82:1b:ba:3f:a7:1c:f6:
         4b:85:2c:a9:a3:74:22:42:5e:7d:8f:d6:d7:76:2d:f8:05:a6:
         7c:0c:df:21:62:3c:4b:a8:33:f9:64:c4:e8:21:57:fa:7a:33:
         d8:0f:28:c2:f4:40:69:95:47:ae:9e:06:d5:c7:92:2b:25:d9:
         94:24:8a:26:d4:b5:cd:e7:0a:c5:c4:62:29:0a:d3:d5:51:d9:
         ab:4a:8d:dc:22:29:70:65:b1:88:8f:c6:35:13:d6:6d:43:de:
         e5:c5:a9:2b:87:7f:74:d9:00:00:88:0b:c2:b5:17:87:07:7b:
         bc:07:4d:48:db:9a:0a:c4:00:82:fa:27:14:e8:dc:ce:9c:a7:
         eb:99:95:ad:65:7d:02:5e:5b:fc:cb:b1:d3:86:89:b6:f7:04:
         fd:30:be:c0:df:a6:b9:09:b7:e4:ec:49:26:d3:56:89:e4:34:
         dc:04:57:25:f7:17:c1:33:59:3d:47:87:3c:88:b7:2e:49:9b:
         2c:d0:77:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:19 2024 by rpki-client on console-ams.rpki-client.org