Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/323830343a356530383a3a2f34312d3431203d3e20323639303037.roa
File:                     323830343a356530383a3a2f34312d3431203d3e20323639303037.roa (raw, json)
Hash identifier:          cqJUEjaPZoPh9iLvvu8ZselBeNq/wHqTjZJBQ55Z4bc=
Subject key identifier:   8A:44:AD:2F:79:0A:7D:81:EA:7A:C5:4A:D4:21:93:98:82:CC:D3:5A
Certificate issuer:       /CN=DE52C578BC0F9A7B70A231782F69295C2543D000
Certificate serial:       4DF45C3D77C23C8DC716723E345820BD5F05C026
Authority key identifier: DE:52:C5:78:BC:0F:9A:7B:70:A2:31:78:2F:69:29:5C:25:43:D0:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE52C578BC0F9A7B70A231782F69295C2543D000.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/323830343a356530383a3a2f34312d3431203d3e20323639303037.roa
Signing time:             Sat 22 Jan 2022 23:31:41 +0000
ROA not before:           Sat 22 Jan 2022 23:26:41 +0000
ROA not after:            Sat 21 Jan 2023 23:31:41 +0000
asID:                     269007
IP address blocks:        2804:5e08::/41 maxlen: 41

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:f4:5c:3d:77:c2:3c:8d:c7:16:72:3e:34:58:20:bd:5f:05:c0:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE52C578BC0F9A7B70A231782F69295C2543D000
        Validity
            Not Before: Jan 22 23:26:41 2022 GMT
            Not After : Jan 21 23:31:41 2023 GMT
        Subject: CN=8A44AD2F790A7D81EA7AC54AD421939882CCD35A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:79:47:95:be:a2:fe:e4:a5:66:63:12:d1:7b:
                    d3:6f:f8:d9:7e:ff:55:92:f9:95:05:10:ca:52:eb:
                    72:81:49:b2:35:30:eb:47:40:50:a2:51:ce:25:9a:
                    0e:48:2c:8b:6c:94:29:06:2b:79:56:63:ec:5b:f4:
                    bc:79:e5:e7:5a:9f:3a:d2:33:17:cd:c8:24:5d:70:
                    77:b5:98:da:25:7d:2e:04:85:27:3d:70:a1:08:df:
                    bf:87:cb:95:3c:6f:cc:74:50:48:61:52:3d:79:59:
                    d9:11:d1:a5:47:df:59:7e:96:9a:19:dd:a8:72:18:
                    67:93:8e:6e:7f:17:bc:f3:e5:89:7a:a3:be:24:bc:
                    ff:da:73:2d:eb:9d:df:28:76:3e:20:12:cd:2d:d0:
                    e9:47:b6:01:47:97:41:f7:74:26:af:b1:76:5c:7a:
                    a8:c0:de:58:9b:e1:93:89:16:15:c0:9c:e1:ae:47:
                    16:69:79:da:7d:d8:d3:84:2a:a6:c5:61:8d:8f:2c:
                    74:73:f5:14:1e:ec:c5:63:89:58:1f:94:49:37:76:
                    48:a5:d8:73:ca:5c:cf:26:6a:27:e3:1a:dc:86:d2:
                    6f:3c:99:23:59:ec:b9:21:bd:37:f4:44:01:58:70:
                    4a:28:4c:c3:d5:45:f2:6e:f8:f1:fa:bf:2d:02:0c:
                    34:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:44:AD:2F:79:0A:7D:81:EA:7A:C5:4A:D4:21:93:98:82:CC:D3:5A
            X509v3 Authority Key Identifier:
                keyid:DE:52:C5:78:BC:0F:9A:7B:70:A2:31:78:2F:69:29:5C:25:43:D0:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/DE52C578BC0F9A7B70A231782F69295C2543D000.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE52C578BC0F9A7B70A231782F69295C2543D000.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/323830343a356530383a3a2f34312d3431203d3e20323639303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e08::/41

    Signature Algorithm: sha256WithRSAEncryption
         2a:82:98:42:89:c4:e1:0b:f7:00:35:a9:18:49:20:a0:f1:ec:
         b8:41:c2:d0:8a:3c:9b:35:96:71:8e:b6:42:52:f1:d1:94:7b:
         ca:57:42:34:fc:2e:cd:a3:18:2e:88:d6:fa:77:62:18:3a:e2:
         50:b7:a6:02:d6:a3:49:e4:e7:ef:b0:68:60:16:6c:6d:9c:cd:
         d4:08:97:ca:7b:43:f8:7a:83:46:8c:ae:cc:28:7b:e7:7f:0f:
         17:0f:96:71:ea:fc:3f:94:62:ef:d3:c3:f0:38:9b:30:b6:30:
         de:72:ee:a7:70:85:9d:08:a9:b2:b3:fd:d4:e1:24:89:f9:89:
         bf:29:1a:1a:5a:e1:d9:bf:eb:85:d1:30:cf:c0:90:11:f3:d5:
         e7:46:35:8b:00:2e:9e:54:68:89:73:14:33:d3:f8:49:d9:b9:
         92:7e:93:d4:b2:fe:a2:db:2e:d4:b1:e0:14:58:e9:e8:97:87:
         fa:e2:11:ad:8f:f9:99:e8:c7:3e:5c:76:2e:22:38:62:57:fe:
         50:a9:fc:2b:a3:96:8c:67:fd:cf:af:2b:21:7a:b2:37:d9:38:
         72:c4:ff:a7:79:ed:77:27:d5:11:f5:93:ee:a0:87:64:cb:bc:
         b9:7d:ff:4b:ef:c0:2b:13:44:1b:42:52:f1:7c:fa:67:5a:7d:
         ca:eb:d4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org