Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/323830343a356530383a3130303a3a2f34312d3431203d3e20323639303037.roa
File:                     323830343a356530383a3130303a3a2f34312d3431203d3e20323639303037.roa (raw, json)
Hash identifier:          RByuFz+Mu8T2Mbmv0YXl+vdmEDsIdbeQV1qCPAHpVPM=
Subject key identifier:   55:85:A2:BE:94:E4:AA:B5:4B:E6:62:92:F5:50:98:DB:E1:3D:17:BA
Certificate issuer:       /CN=DE52C578BC0F9A7B70A231782F69295C2543D000
Certificate serial:       26C63E3D8E5C90A6392228C6D64F73EB50F46B25
Authority key identifier: DE:52:C5:78:BC:0F:9A:7B:70:A2:31:78:2F:69:29:5C:25:43:D0:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE52C578BC0F9A7B70A231782F69295C2543D000.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/323830343a356530383a3130303a3a2f34312d3431203d3e20323639303037.roa
Signing time:             Sat 22 Jan 2022 23:31:41 +0000
ROA not before:           Sat 22 Jan 2022 23:26:41 +0000
ROA not after:            Sat 21 Jan 2023 23:31:41 +0000
asID:                     269007
IP address blocks:        2804:5e08:100::/41 maxlen: 41

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c6:3e:3d:8e:5c:90:a6:39:22:28:c6:d6:4f:73:eb:50:f4:6b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE52C578BC0F9A7B70A231782F69295C2543D000
        Validity
            Not Before: Jan 22 23:26:41 2022 GMT
            Not After : Jan 21 23:31:41 2023 GMT
        Subject: CN=5585A2BE94E4AAB54BE66292F55098DBE13D17BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a9:07:8c:ae:62:1d:fc:71:ae:94:44:f0:c1:
                    8a:e4:b3:56:89:6b:98:f2:35:ac:7c:94:45:5a:9d:
                    fc:80:25:db:10:4d:d6:21:91:a5:42:c2:83:3d:1f:
                    e1:de:40:be:bc:c9:91:00:21:73:7f:8e:db:cd:41:
                    cf:e1:c2:23:58:3e:c1:18:e0:c0:ba:52:d0:58:76:
                    c0:9f:39:fd:37:93:5b:df:a0:df:65:14:52:40:70:
                    bc:ac:66:9f:2f:13:d4:b6:66:eb:b8:62:56:da:4c:
                    cf:8a:ed:8b:cf:f2:32:8b:93:86:95:11:b0:07:3b:
                    c7:00:aa:20:53:13:2b:34:33:fb:87:82:89:5a:1a:
                    50:44:cd:b6:06:23:34:82:80:f3:bd:5c:d4:f6:bf:
                    1d:02:65:44:31:6b:79:82:c9:22:51:67:68:cd:7a:
                    76:ff:c5:c5:08:59:d3:d9:ad:42:10:83:b2:f6:c2:
                    77:9f:41:1a:bd:07:c5:cc:45:45:bf:7c:8e:33:c7:
                    ad:4d:15:af:d2:f0:8e:bc:b3:86:72:dc:74:6d:79:
                    7c:c9:9b:36:ea:b0:b9:9f:b0:da:b1:42:da:81:b4:
                    4b:c9:64:02:3e:d0:0a:1e:f6:45:ff:b7:ab:86:43:
                    b3:04:e2:df:f6:a3:ff:5b:4c:b9:18:fb:ad:14:aa:
                    56:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:85:A2:BE:94:E4:AA:B5:4B:E6:62:92:F5:50:98:DB:E1:3D:17:BA
            X509v3 Authority Key Identifier:
                keyid:DE:52:C5:78:BC:0F:9A:7B:70:A2:31:78:2F:69:29:5C:25:43:D0:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/DE52C578BC0F9A7B70A231782F69295C2543D000.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE52C578BC0F9A7B70A231782F69295C2543D000.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/323830343a356530383a3130303a3a2f34312d3431203d3e20323639303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e08:100::/41

    Signature Algorithm: sha256WithRSAEncryption
         1f:16:78:61:f9:d3:c2:ff:8e:a6:61:62:18:d9:68:40:8a:20:
         67:8e:fd:90:22:37:aa:d9:8c:e8:6e:ca:11:5d:7f:58:d6:3e:
         41:9a:b0:4e:37:54:b3:95:46:ec:09:e0:cb:83:d3:ca:00:2d:
         fa:25:48:8a:7a:94:b4:b3:0c:34:08:ab:99:2b:81:20:32:43:
         be:42:ed:e2:a0:78:03:7a:61:77:63:1e:52:26:b1:b7:52:46:
         8b:1b:28:09:f0:05:95:0e:54:48:2e:86:62:6f:8a:99:68:5c:
         b8:ea:76:f0:ac:7c:28:b8:47:9e:fb:83:bc:19:20:a7:7c:7c:
         3d:4d:0a:7b:0d:db:9e:c6:e8:50:ba:61:ad:17:4c:7a:d5:24:
         dc:e2:31:e8:d3:b3:f1:ac:39:e8:03:af:71:7a:1f:b8:d7:01:
         52:9a:90:bd:8b:af:ba:d3:7c:37:01:43:ad:a8:3b:c8:db:d0:
         1f:48:96:d4:c6:48:66:06:b2:2a:f7:99:0d:81:e6:99:bd:a5:
         d4:ff:cb:fb:d3:fb:da:3d:f2:79:41:d1:43:29:64:b1:d3:bd:
         ce:c7:0a:53:4c:82:54:e7:c0:78:2d:b8:cc:ce:fa:48:a4:e4:
         eb:e0:4f:0b:f8:01:a9:12:2c:0f:73:59:00:68:67:27:68:f4:
         13:65:ca:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org