Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/323830343a356530383a3230303a3a2f34312d3431203d3e20323639303037.roa
File:                     323830343a356530383a3230303a3a2f34312d3431203d3e20323639303037.roa (raw, json)
Hash identifier:          0n45NHgZaT9SXyTOOEgNzZ4tyXBKrqMxOZH0wvTu060=
Subject key identifier:   C9:5D:D1:F7:69:2D:80:D0:CD:4E:A7:40:6D:7B:54:F5:5F:D4:CC:B8
Certificate issuer:       /CN=DE52C578BC0F9A7B70A231782F69295C2543D000
Certificate serial:       4695FEE5CB4CBF48036D2D57DDA6FE9B637089D3
Authority key identifier: DE:52:C5:78:BC:0F:9A:7B:70:A2:31:78:2F:69:29:5C:25:43:D0:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE52C578BC0F9A7B70A231782F69295C2543D000.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/323830343a356530383a3230303a3a2f34312d3431203d3e20323639303037.roa
Signing time:             Sat 22 Jan 2022 23:31:41 +0000
ROA not before:           Sat 22 Jan 2022 23:26:41 +0000
ROA not after:            Sat 21 Jan 2023 23:31:41 +0000
asID:                     269007
IP address blocks:        2804:5e08:200::/41 maxlen: 41

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:95:fe:e5:cb:4c:bf:48:03:6d:2d:57:dd:a6:fe:9b:63:70:89:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE52C578BC0F9A7B70A231782F69295C2543D000
        Validity
            Not Before: Jan 22 23:26:41 2022 GMT
            Not After : Jan 21 23:31:41 2023 GMT
        Subject: CN=C95DD1F7692D80D0CD4EA7406D7B54F55FD4CCB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:16:aa:7d:6c:d6:40:94:3f:ed:8b:19:db:2b:
                    85:d6:95:0b:57:ed:f4:4b:46:64:8b:7c:aa:f8:2b:
                    1a:d1:e3:30:4c:d0:1d:45:2b:df:11:96:f6:85:58:
                    e0:71:b8:77:2e:57:10:03:23:eb:8c:55:23:11:d1:
                    9f:61:9b:31:21:97:f9:a4:e6:b7:4d:05:eb:08:8a:
                    85:92:6b:9e:d2:b5:06:3e:3b:c4:5e:83:8c:cb:1f:
                    ab:39:16:89:ca:9f:ec:45:42:6e:81:1f:d4:78:22:
                    6b:d5:b7:78:20:98:d1:d8:37:41:ce:85:8f:86:c1:
                    a8:b8:2f:16:e1:00:6f:6b:b7:13:89:00:43:d9:bf:
                    84:64:d8:27:2b:ab:b5:cc:45:7e:91:c2:b6:69:02:
                    bd:e1:3f:7e:bd:3b:62:7b:17:a6:44:0b:d8:60:a0:
                    07:4b:3c:0b:4c:f6:9c:5f:f9:8e:aa:b5:2a:bd:3c:
                    05:98:d4:9f:03:b7:79:6a:02:d2:ac:a4:7d:52:85:
                    7a:05:8e:bd:d9:59:66:73:b4:bf:be:f8:a0:42:e3:
                    90:d6:8b:51:7c:a6:cc:a0:1c:40:79:4a:76:3e:97:
                    fe:03:32:93:4e:d1:ea:e1:b1:e0:c7:71:41:d5:a7:
                    55:e1:7e:da:22:ae:17:bb:c6:cd:7b:83:ed:fe:5f:
                    21:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:5D:D1:F7:69:2D:80:D0:CD:4E:A7:40:6D:7B:54:F5:5F:D4:CC:B8
            X509v3 Authority Key Identifier:
                keyid:DE:52:C5:78:BC:0F:9A:7B:70:A2:31:78:2F:69:29:5C:25:43:D0:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/DE52C578BC0F9A7B70A231782F69295C2543D000.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE52C578BC0F9A7B70A231782F69295C2543D000.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/323830343a356530383a3230303a3a2f34312d3431203d3e20323639303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e08:200::/41

    Signature Algorithm: sha256WithRSAEncryption
         14:26:9d:44:d4:27:af:c3:e4:e1:04:ab:b2:22:53:ff:d9:6d:
         5e:80:5d:c5:fa:4e:e2:0a:6a:6f:e4:33:4e:8e:85:b7:14:0f:
         ae:94:94:b2:d4:97:7e:1f:be:ac:32:f3:3f:5c:af:fd:7e:83:
         1d:0f:b9:23:e8:95:0f:f7:d2:0a:d5:84:8e:ef:90:6a:84:4a:
         70:c1:b1:8b:2b:d4:30:1c:bb:d1:66:bf:f5:a0:05:fe:51:a4:
         9f:c1:77:13:a3:fd:61:1b:45:3f:45:7c:5f:ba:a3:dc:e9:97:
         19:1e:25:02:ba:4e:93:dd:9b:10:99:54:1f:39:22:42:a5:dc:
         f7:37:96:74:d5:3c:f3:39:83:fc:51:62:72:09:dc:a8:97:22:
         de:50:cf:8f:00:f9:fa:bd:fd:06:1b:ce:0f:e2:d7:79:dc:aa:
         5d:65:e8:fb:e8:51:85:31:db:da:ee:97:bf:ab:80:36:12:ec:
         9c:a4:54:92:67:b3:42:d1:1f:7e:94:7a:17:6b:c4:12:61:62:
         62:e6:45:89:0b:c8:40:63:91:d1:62:84:93:7a:cd:db:d2:5b:
         92:58:f9:a9:f1:b0:3f:6b:d8:3c:72:b3:a7:b4:06:72:25:84:
         76:21:05:2e:7d:d5:c4:3f:77:f1:46:bf:2a:7b:65:8b:26:1f:
         db:e1:5d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org