Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/323830343a3838303a3a2f33322d3332203d3e203238323230.roa
File:                     323830343a3838303a3a2f33322d3332203d3e203238323230.roa (raw, json)
Hash identifier:          87UNudfxyqFS9i67LV9FSWscyAqUHE6g3coNhyQnMZM=
Subject key identifier:   16:64:50:FA:D7:F3:EF:F4:99:31:DD:39:FB:98:4E:7C:72:07:72:4F
Certificate issuer:       /CN=052CB6BAADACF0A7AC98360EA3C81CD72B04569F
Certificate serial:       4650303A073C82EDB97CADB1D7E4B35D1A445491
Authority key identifier: 05:2C:B6:BA:AD:AC:F0:A7:AC:98:36:0E:A3:C8:1C:D7:2B:04:56:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/052CB6BAADACF0A7AC98360EA3C81CD72B04569F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/323830343a3838303a3a2f33322d3332203d3e203238323230.roa
Signing time:             Thu 06 Oct 2022 17:39:47 +0000
ROA not before:           Thu 06 Oct 2022 17:34:47 +0000
ROA not after:            Thu 05 Oct 2023 17:39:47 +0000
asID:                     28220
IP address blocks:        2804:880::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:50:30:3a:07:3c:82:ed:b9:7c:ad:b1:d7:e4:b3:5d:1a:44:54:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=052CB6BAADACF0A7AC98360EA3C81CD72B04569F
        Validity
            Not Before: Oct  6 17:34:47 2022 GMT
            Not After : Oct  5 17:39:47 2023 GMT
        Subject: CN=166450FAD7F3EFF49931DD39FB984E7C7207724F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:65:25:17:fb:c1:c0:f3:0c:64:d9:78:a4:26:
                    5a:b2:3e:7e:6d:59:7d:03:29:cf:8d:d6:56:11:33:
                    f3:11:88:a2:ed:a8:68:1e:e7:41:77:9c:5a:44:59:
                    68:04:2b:8f:61:68:c7:93:97:5a:bc:4c:e7:bf:73:
                    b8:06:af:26:f8:c5:54:34:e9:d9:fe:54:24:16:b9:
                    7c:bd:2a:93:9a:3e:a3:06:53:8a:dc:5c:77:be:9c:
                    c0:bf:e4:a3:ac:20:0c:d6:4d:27:8b:d1:26:cd:a9:
                    d9:c5:62:8b:24:90:58:f3:aa:b1:b7:e6:de:cb:53:
                    61:84:e9:1c:ba:e3:c8:df:f7:d2:40:55:ef:c0:0e:
                    64:a4:06:56:8b:d3:50:3b:72:52:cd:d8:43:1f:dd:
                    f5:9f:cb:6c:6c:6f:76:27:7c:6d:25:6d:3a:97:3e:
                    fc:65:1f:e1:f0:c4:cb:8a:83:6d:36:c8:b6:bc:1c:
                    43:32:65:65:81:d7:21:b0:7e:3b:79:11:c7:85:da:
                    1e:a9:0f:8d:e5:f9:9e:59:c9:ca:58:8f:f5:f3:a5:
                    85:1b:8e:d0:12:af:b1:c0:24:ce:b5:52:40:fd:05:
                    6d:92:74:5b:90:53:94:ac:e6:c7:48:b7:de:3a:be:
                    8b:db:2d:f1:2c:b3:d2:dd:1d:7d:84:95:31:c9:fc:
                    9e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:64:50:FA:D7:F3:EF:F4:99:31:DD:39:FB:98:4E:7C:72:07:72:4F
            X509v3 Authority Key Identifier:
                keyid:05:2C:B6:BA:AD:AC:F0:A7:AC:98:36:0E:A3:C8:1C:D7:2B:04:56:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/052CB6BAADACF0A7AC98360EA3C81CD72B04569F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/052CB6BAADACF0A7AC98360EA3C81CD72B04569F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/323830343a3838303a3a2f33322d3332203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:880::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:73:32:27:82:e6:d8:ed:a0:88:ce:e1:f9:0d:4e:b5:96:0b:
         41:6e:55:6f:df:a7:ab:54:02:00:0b:fb:3b:73:76:d2:82:14:
         0b:54:8c:de:ef:1b:0c:9b:dd:90:6e:e1:57:cd:0d:97:ee:28:
         00:60:a8:fd:5d:44:86:54:b5:00:86:02:0b:48:96:40:4a:ab:
         ce:ec:b0:06:90:e7:3a:fa:9f:05:78:bc:02:b2:f8:d6:cf:45:
         66:35:4f:2e:47:55:f7:8b:3a:cf:da:a5:1b:50:c5:7f:d7:59:
         63:51:c7:94:f2:df:b9:30:da:3c:15:6c:ea:f7:a4:07:0c:4e:
         65:db:d1:ea:aa:8f:54:84:a8:d4:1e:07:3a:62:40:82:60:ce:
         ae:34:89:44:75:db:6a:bd:2d:fc:0b:b5:aa:8b:82:99:36:e3:
         e6:ee:0c:8f:ec:a7:15:76:ba:1d:fe:d0:1a:66:c0:00:05:f9:
         70:5e:64:e7:f7:f6:be:56:27:47:1d:4a:b1:a5:32:ca:b3:77:
         e6:88:d8:82:d4:7a:2d:c1:66:2b:0e:97:50:99:e1:6d:d4:88:
         8e:45:e0:fe:d3:5f:70:b8:6e:9a:ca:4a:79:e5:5f:ce:78:96:
         91:a3:f1:9b:0f:24:de:a7:82:6a:ee:6f:20:cf:2d:fc:82:cd:
         6c:d5:5d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org