Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/323830343a323537303a633030303a3a2f34342d3434203d3e20323634323831.roa
File:                     323830343a323537303a633030303a3a2f34342d3434203d3e20323634323831.roa (raw, json)
Hash identifier:          3oGT9X2AcD0ZNbqPTUK/jwZRCxhjHKtU6i4zKgP44Wc=
Subject key identifier:   B3:55:25:7E:B8:CC:A6:72:28:E5:54:FB:84:97:9F:0D:3E:64:E7:1B
Certificate issuer:       /CN=4C284B298BD83B2CD795241085A51344CAAA6914
Certificate serial:       475E9BCC27D2996C95A95CF945B7C4098F2561D3
Authority key identifier: 4C:28:4B:29:8B:D8:3B:2C:D7:95:24:10:85:A5:13:44:CA:AA:69:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C284B298BD83B2CD795241085A51344CAAA6914.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/323830343a323537303a633030303a3a2f34342d3434203d3e20323634323831.roa
Signing time:             Sat 08 Apr 2023 14:05:03 +0000
ROA not before:           Sat 08 Apr 2023 14:00:03 +0000
ROA not after:            Sat 06 Apr 2024 14:05:03 +0000
asID:                     264281
IP address blocks:        2804:2570:c000::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:5e:9b:cc:27:d2:99:6c:95:a9:5c:f9:45:b7:c4:09:8f:25:61:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C284B298BD83B2CD795241085A51344CAAA6914
        Validity
            Not Before: Apr  8 14:00:03 2023 GMT
            Not After : Apr  6 14:05:03 2024 GMT
        Subject: CN=B355257EB8CCA67228E554FB84979F0D3E64E71B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a1:ac:a7:b0:50:45:75:e7:dd:2c:81:8d:94:
                    0d:b5:8d:3f:28:5d:f5:7f:76:2e:c1:0f:04:a0:fc:
                    37:7e:9b:64:86:4b:d6:8c:6b:e6:fb:d5:ab:cd:3d:
                    9b:25:a0:5d:5a:90:05:01:71:62:db:15:06:71:46:
                    8b:f5:a2:9f:08:72:d0:0b:68:f9:c5:45:6e:ec:79:
                    ce:c3:35:e8:2a:7f:44:8e:52:16:e4:c3:f2:42:44:
                    d8:5c:d8:6b:47:99:c9:57:af:f8:d4:c1:8f:a3:a6:
                    39:7e:62:da:46:0c:d3:70:ff:72:a3:0f:5f:cd:5c:
                    22:c2:05:04:88:6f:6b:92:9a:d8:cf:8a:8c:a3:9f:
                    f7:5b:86:74:a2:6c:1b:f8:14:14:0b:34:84:91:da:
                    1a:8b:58:99:04:85:a3:dd:79:4f:13:df:2c:e3:bf:
                    d3:44:51:aa:18:bb:59:86:ec:f5:32:98:d9:8b:44:
                    3d:a9:3a:0c:b4:82:76:f4:1c:fe:b0:39:49:21:04:
                    03:89:4b:24:03:eb:a9:2d:ec:86:12:11:bb:23:21:
                    0d:7e:9a:3d:92:27:88:c2:99:ff:87:64:24:af:02:
                    1e:e0:ac:2f:7a:10:b2:45:16:9c:32:d9:98:ef:2e:
                    6b:e7:1a:4b:75:cc:cd:76:8e:99:80:b9:a3:4c:07:
                    3a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:55:25:7E:B8:CC:A6:72:28:E5:54:FB:84:97:9F:0D:3E:64:E7:1B
            X509v3 Authority Key Identifier:
                keyid:4C:28:4B:29:8B:D8:3B:2C:D7:95:24:10:85:A5:13:44:CA:AA:69:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/4C284B298BD83B2CD795241085A51344CAAA6914.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C284B298BD83B2CD795241085A51344CAAA6914.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/323830343a323537303a633030303a3a2f34342d3434203d3e20323634323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2570:c000::/44

    Signature Algorithm: sha256WithRSAEncryption
         b4:c7:e7:0f:73:43:00:16:2a:2d:f6:a3:dd:b5:ab:a1:7e:65:
         a8:83:97:c1:df:02:7b:17:98:bc:67:e3:96:7d:53:56:2d:e3:
         e5:f7:1b:c8:f6:90:03:4c:6c:a9:f4:53:7c:65:47:5a:ea:a7:
         cf:1f:99:e9:84:ae:ef:8f:0d:6c:69:cc:23:50:9a:7c:87:69:
         e9:16:3f:fd:9d:d8:98:8b:2c:5a:aa:08:e8:80:b1:e2:29:53:
         7a:e0:05:6c:79:23:ed:40:ca:39:e8:6e:8c:8e:38:8e:d8:d5:
         e3:b1:ec:94:0d:41:04:5a:11:d6:7b:73:ce:92:f8:e0:87:55:
         0f:5a:b2:0e:91:c4:5c:65:37:ba:b5:6b:b4:cf:82:80:6e:9d:
         3a:24:d8:77:db:0e:9a:6c:47:96:9c:6a:cf:d7:87:90:2e:c6:
         00:83:0b:54:f6:2a:34:30:8d:f3:60:16:fb:e4:79:73:06:78:
         81:ca:b4:82:83:2a:3f:ea:66:06:b2:82:65:7e:7b:70:2c:af:
         14:78:dd:72:c6:12:0b:2a:25:d9:f7:b2:89:47:4d:e2:42:c1:
         49:69:79:a4:3b:1e:97:b4:0f:1d:79:0c:38:f4:45:5e:ab:76:
         81:68:c1:ff:86:83:72:22:32:31:2c:0f:47:13:cf:a0:39:0d:
         2a:56:12:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org