Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/323830343a353765303a3a2f33332d3333203d3e20323638303932.roa
File:                     323830343a353765303a3a2f33332d3333203d3e20323638303932.roa (raw, json)
Hash identifier:          sDU3ktog7xUKwDcPACE9bRCaq1Xc6VHui5FPkIt3mVc=
Subject key identifier:   1D:79:DE:AF:17:36:D5:89:AE:83:30:07:CD:D1:9F:74:B9:72:78:7A
Certificate issuer:       /CN=D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB
Certificate serial:       5A65153997E460E738E50FB7CC953B58B0CFBFD3
Authority key identifier: D9:C1:AF:83:E5:C3:D2:3A:7D:78:AA:5F:10:EB:8C:89:3F:19:F5:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/323830343a353765303a3a2f33332d3333203d3e20323638303932.roa
Signing time:             Thu 10 Aug 2023 12:05:07 +0000
ROA not before:           Thu 10 Aug 2023 12:00:07 +0000
ROA not after:            Thu 08 Aug 2024 12:05:07 +0000
asID:                     268092
IP address blocks:        2804:57e0::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:65:15:39:97:e4:60:e7:38:e5:0f:b7:cc:95:3b:58:b0:cf:bf:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB
        Validity
            Not Before: Aug 10 12:00:07 2023 GMT
            Not After : Aug  8 12:05:07 2024 GMT
        Subject: CN=1D79DEAF1736D589AE833007CDD19F74B972787A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:af:8c:cd:9a:c2:fb:79:a9:66:e0:ac:09:09:
                    9a:9f:7f:64:88:54:61:ef:1a:12:fb:59:9f:de:ad:
                    43:b6:7e:6a:88:e5:cf:22:b8:a6:c3:6d:f9:22:44:
                    96:ec:6f:2f:b9:19:94:53:a0:33:35:f2:93:a2:0a:
                    d8:b6:78:98:52:6b:b1:af:a9:12:90:40:f0:e2:40:
                    5c:d6:90:20:c1:f5:fb:b5:ea:0a:24:9c:3f:2a:92:
                    c4:6b:ec:de:fa:fd:b7:0f:1a:e7:48:3a:78:df:0b:
                    40:5d:2f:79:83:73:4f:d3:e6:c5:c4:dd:5e:83:ff:
                    5b:bb:b4:63:7f:46:98:06:bd:b7:04:01:7d:c8:69:
                    26:1b:b8:d7:00:3b:32:38:49:e6:78:dc:bb:3a:75:
                    4a:87:29:ea:be:29:96:fb:a0:45:87:3c:ba:2f:07:
                    fc:0c:5d:8f:d9:b7:e5:c7:65:88:bf:d4:99:ee:59:
                    40:3a:5d:4d:9f:5e:e2:8e:2e:c7:09:aa:a9:4d:be:
                    8e:59:b7:ae:fa:7d:b3:6c:ae:cc:c5:c4:5e:7c:1a:
                    36:e7:f1:34:2d:23:6d:ae:7f:d5:b0:5b:dc:ed:6c:
                    d5:08:a5:52:a9:23:a3:82:da:fa:7b:bf:4b:7a:0d:
                    aa:86:cf:c9:d6:6b:eb:55:73:98:3d:3f:b0:39:6e:
                    31:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:79:DE:AF:17:36:D5:89:AE:83:30:07:CD:D1:9F:74:B9:72:78:7A
            X509v3 Authority Key Identifier:
                keyid:D9:C1:AF:83:E5:C3:D2:3A:7D:78:AA:5F:10:EB:8C:89:3F:19:F5:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/323830343a353765303a3a2f33332d3333203d3e20323638303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:57e0::/33

    Signature Algorithm: sha256WithRSAEncryption
         6c:50:20:81:3d:6a:5f:53:0e:8d:73:43:bf:12:d0:7b:c3:7e:
         0b:04:67:5b:ad:71:25:ba:7c:47:58:df:33:28:71:06:b0:8a:
         a8:8f:05:9e:59:1b:86:4e:7f:a8:6c:ba:4a:6a:37:bf:b5:57:
         ad:a9:5f:81:1e:b6:31:5c:fa:84:cd:2c:b4:54:fd:de:01:30:
         d6:1b:06:99:dc:4e:17:5c:7f:6d:78:d8:f8:f2:54:98:db:7b:
         2a:5b:87:f2:42:2e:8b:a2:87:67:fd:36:2e:50:7c:d4:67:46:
         6e:0f:14:90:a1:0d:96:17:28:06:b1:70:59:65:05:b1:8e:55:
         a5:ba:57:06:0b:3c:5c:be:f5:14:f1:a8:74:3a:d8:28:b2:5a:
         ac:06:4a:38:98:dd:12:db:14:4b:44:1a:e0:ae:6b:bf:11:2a:
         2c:27:22:5b:41:f9:ce:ea:a5:7e:04:c7:89:dd:7f:a1:49:2e:
         d3:b2:a3:5f:4b:06:18:8f:a9:f0:d7:1d:98:33:c8:39:2d:62:
         92:e8:a9:d5:74:94:ed:a9:1e:8a:bc:1b:c6:fc:6f:19:fe:c5:
         c0:bc:45:e5:35:ef:77:e5:9f:64:94:d8:cd:c4:28:d9:c6:71:
         ed:0e:f4:ed:ee:50:01:80:8e:f2:05:d7:0e:4b:61:fe:63:2d:
         6f:30:8c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org