Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/0/323830343a3137343a3a2f33322d3438203d3e203533313532.roa
File:                     323830343a3137343a3a2f33322d3438203d3e203533313532.roa (raw, json)
Hash identifier:          vx5Nf1I7M3ikq8F0KY64hAHfKD0g1yKrhvVS118WFIM=
Subject key identifier:   95:6C:08:20:F9:D7:8F:16:52:5C:31:5E:AB:6D:D9:B5:AF:FD:0B:FF
Certificate issuer:       /CN=DEEE3D28D5A12448565CED39037051D4B533893D
Certificate serial:       5832BC8B26FD0B9016EB4DBC423DAF92A4F9CFBF
Authority key identifier: DE:EE:3D:28:D5:A1:24:48:56:5C:ED:39:03:70:51:D4:B5:33:89:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEEE3D28D5A12448565CED39037051D4B533893D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/0/323830343a3137343a3a2f33322d3438203d3e203533313532.roa
Signing time:             Thu 21 Mar 2024 21:00:25 +0000
ROA not before:           Thu 21 Mar 2024 20:55:25 +0000
ROA not after:            Thu 20 Mar 2025 21:00:25 +0000
asID:                     53152
IP address blocks:        2804:174::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:32:bc:8b:26:fd:0b:90:16:eb:4d:bc:42:3d:af:92:a4:f9:cf:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEEE3D28D5A12448565CED39037051D4B533893D
        Validity
            Not Before: Mar 21 20:55:25 2024 GMT
            Not After : Mar 20 21:00:25 2025 GMT
        Subject: CN=956C0820F9D78F16525C315EAB6DD9B5AFFD0BFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:61:08:a3:b9:69:d1:e3:9b:b2:c9:99:0e:21:
                    48:9a:93:f3:bd:5a:52:dd:7f:d8:ec:7e:84:e9:8e:
                    1d:bb:c6:25:8e:69:70:1c:97:a9:d8:b8:1f:e0:7b:
                    7b:0b:76:8c:22:17:b4:4b:80:35:45:9b:20:07:c3:
                    e7:08:d8:fc:da:d7:a1:e0:83:cc:75:7b:d7:f9:79:
                    66:32:39:0f:be:e6:56:6c:c6:db:48:f5:0e:bc:b2:
                    6d:7e:30:3f:a7:8f:bb:8a:6d:89:b2:83:5c:d7:f8:
                    b3:8e:49:04:eb:d1:b7:75:54:ab:d9:32:e0:76:e2:
                    39:10:96:7e:b0:0e:d6:6f:e8:8c:32:ef:a1:c0:84:
                    75:1e:b4:1a:08:8d:9a:d1:15:27:c6:04:87:72:f8:
                    85:cf:f1:09:46:f8:a8:f1:dd:f7:80:2f:55:8d:cb:
                    e4:10:fb:c8:34:5f:00:7d:1b:ac:4b:81:3c:a0:02:
                    e8:75:9c:47:9d:4d:6e:1f:9f:ea:a3:f3:9d:ab:7a:
                    07:07:9d:4a:a1:1c:36:fa:c0:9e:b3:18:82:b1:e7:
                    e5:8c:07:4e:6d:b9:f6:1d:59:41:b7:dd:c9:90:a6:
                    96:83:5f:8a:50:4e:69:36:fa:1a:53:c6:90:39:d3:
                    cf:6a:6c:8b:3d:e9:c2:6c:f3:16:c1:5e:57:35:fd:
                    a5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:6C:08:20:F9:D7:8F:16:52:5C:31:5E:AB:6D:D9:B5:AF:FD:0B:FF
            X509v3 Authority Key Identifier:
                keyid:DE:EE:3D:28:D5:A1:24:48:56:5C:ED:39:03:70:51:D4:B5:33:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/0/DEEE3D28D5A12448565CED39037051D4B533893D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEEE3D28D5A12448565CED39037051D4B533893D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/0/323830343a3137343a3a2f33322d3438203d3e203533313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:174::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:bc:92:6b:0f:ae:8a:5e:09:70:84:31:d0:62:93:9b:7d:d9:
         e5:c0:1f:b4:c5:7c:13:60:c4:5c:30:13:46:c5:90:74:84:d3:
         e9:eb:ab:2a:2f:dd:d1:f0:7e:12:21:e8:ee:d1:fb:10:07:6c:
         62:ff:07:7a:bd:c3:9a:31:ab:69:ce:c2:c4:c8:74:f0:d0:24:
         56:02:4b:cd:28:79:02:51:be:4d:8e:ff:17:7f:21:16:1a:a6:
         e3:25:e0:25:ae:8f:3f:66:57:b5:a4:89:22:ac:91:f8:9c:32:
         63:18:1a:82:18:31:28:48:a5:86:bd:ca:23:e5:70:51:73:fc:
         62:55:5e:22:ff:24:f0:54:19:9e:63:00:f9:12:5b:38:86:b7:
         bd:79:55:fa:d9:47:b7:b9:fb:54:3d:a4:a2:a0:ed:29:c0:03:
         2a:61:c3:d0:bc:95:9f:08:2d:38:67:bc:5e:d2:66:dd:d3:05:
         ba:9a:92:17:5d:cd:72:7d:7d:e3:4e:fe:02:e9:3d:9b:ea:e3:
         b8:da:d7:f3:81:21:64:ef:05:d8:25:9f:6a:42:59:ba:e3:19:
         db:a9:b1:02:bd:4a:2a:93:13:6f:1e:ea:70:cb:c9:d7:d5:ca:
         ed:6f:43:df:f7:94:b7:2f:cf:b5:bc:d5:2d:94:7d:f1:32:bf:
         5a:00:69:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org