Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/0/323830343a3464383a3a2f33322d3332203d3e203532393935.roa
File:                     323830343a3464383a3a2f33322d3332203d3e203532393935.roa (raw, json)
Hash identifier:          NudpRBTDfeREfIQFKvt7JcicPVcVhUICBw8ro9FuYu8=
Subject key identifier:   BC:5F:F9:60:A4:85:D0:39:49:BB:92:3F:09:C6:51:FB:70:62:EB:0A
Certificate issuer:       /CN=D85200B38B49C68D1D0BF6CACDC2C7F14E042C44
Certificate serial:       4DAA44F04893D46F95F9237DFA298C9B124C7F79
Authority key identifier: D8:52:00:B3:8B:49:C6:8D:1D:0B:F6:CA:CD:C2:C7:F1:4E:04:2C:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85200B38B49C68D1D0BF6CACDC2C7F14E042C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/0/323830343a3464383a3a2f33322d3332203d3e203532393935.roa
Signing time:             Wed 14 Jun 2023 19:00:00 +0000
ROA not before:           Wed 14 Jun 2023 18:55:00 +0000
ROA not after:            Wed 12 Jun 2024 19:00:00 +0000
asID:                     52995
IP address blocks:        2804:4d8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:aa:44:f0:48:93:d4:6f:95:f9:23:7d:fa:29:8c:9b:12:4c:7f:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85200B38B49C68D1D0BF6CACDC2C7F14E042C44
        Validity
            Not Before: Jun 14 18:55:00 2023 GMT
            Not After : Jun 12 19:00:00 2024 GMT
        Subject: CN=BC5FF960A485D03949BB923F09C651FB7062EB0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a9:fc:0c:8c:b6:de:3c:28:81:7a:0c:2d:ac:
                    07:4b:d1:e6:c2:3f:68:97:b5:de:bd:5e:b5:6d:98:
                    4c:6f:8e:34:62:73:78:5c:c6:9e:df:ed:3d:6e:72:
                    27:c3:92:6e:10:f2:3d:e4:9f:00:ca:f5:e3:be:22:
                    ea:43:be:c0:e2:b7:34:1d:11:4f:94:2a:f3:cc:18:
                    ac:32:8e:f2:dc:03:52:fc:f2:4b:f7:f2:06:9f:c2:
                    47:e1:0e:7a:0b:d0:37:cd:a5:e8:e5:3d:03:e5:6c:
                    23:94:e8:fe:4b:46:86:a4:c7:29:0d:d2:b2:82:83:
                    25:9d:78:e8:54:f8:f1:00:35:b4:52:e6:d8:7e:d1:
                    03:85:07:9c:da:51:d4:a2:5f:d1:61:44:79:31:f3:
                    f0:19:1a:67:a7:1d:df:6b:6b:be:93:be:5e:f0:56:
                    b9:0e:41:34:18:ed:cc:7c:35:df:c6:e6:61:b9:f0:
                    e5:ea:27:06:2a:5d:e6:04:ed:9a:89:52:a4:79:42:
                    29:7a:5c:72:8e:88:33:0d:1e:ba:c9:86:22:f4:70:
                    d8:af:1c:5b:09:56:80:69:df:41:5d:7d:8d:77:ad:
                    0d:c6:17:74:5f:3c:cc:08:bb:8c:30:4f:d5:e7:c2:
                    98:f2:5b:c7:64:19:5b:a5:80:c8:06:29:9c:ab:e4:
                    b2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:5F:F9:60:A4:85:D0:39:49:BB:92:3F:09:C6:51:FB:70:62:EB:0A
            X509v3 Authority Key Identifier:
                keyid:D8:52:00:B3:8B:49:C6:8D:1D:0B:F6:CA:CD:C2:C7:F1:4E:04:2C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/0/D85200B38B49C68D1D0BF6CACDC2C7F14E042C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85200B38B49C68D1D0BF6CACDC2C7F14E042C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/0/323830343a3464383a3a2f33322d3332203d3e203532393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:fe:75:1a:dc:c8:cd:5c:4b:81:ac:10:9f:dd:9d:f3:82:c8:
         c3:21:12:63:89:f8:db:f6:c9:e3:b1:f1:a7:83:f9:e4:88:9f:
         a2:82:80:a0:b9:75:9b:46:27:06:73:c4:0d:63:94:8c:92:ce:
         3c:5b:1b:08:60:f9:a5:86:2d:00:86:9c:56:12:a0:f9:43:a9:
         21:97:67:55:4f:95:de:c4:d8:9d:b2:ea:ba:be:35:cc:e0:71:
         35:7c:67:ab:36:a6:5a:93:f0:42:6d:22:53:1b:c8:fc:01:4d:
         6f:0d:6e:c5:ab:13:52:12:cd:ab:ea:0b:68:d2:44:03:31:17:
         de:9c:d0:73:87:9e:3b:fd:2d:86:91:74:33:ef:f2:40:e2:45:
         9b:1d:b8:f8:5f:81:35:ea:28:73:45:d4:82:1b:e0:c6:20:ca:
         7b:bf:6e:ad:5e:e4:05:26:f0:8f:2b:32:39:d1:98:40:c5:25:
         a5:a4:9e:fc:a8:83:e0:41:89:77:41:63:6c:4c:19:77:b7:18:
         12:46:ea:b7:56:e5:bc:45:f7:16:a9:09:bd:7a:f3:6b:de:5a:
         f4:d1:62:a6:73:58:b0:a7:db:19:23:ed:12:82:a3:c5:f3:ae:
         d7:66:65:66:98:26:bb:20:cd:fd:12:a7:aa:10:bc:11:c3:d3:
         52:9e:13:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:27 2024 by rpki-client on console-ams.rpki-client.org