Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/323830343a373261303a3a2f33332d3333203d3e20323730383635.roa
File:                     323830343a373261303a3a2f33332d3333203d3e20323730383635.roa (raw, json)
Hash identifier:          mZS5VI2isWsaruyub3Qa4WkfljWCCToFjvmXiKIm+ns=
Subject key identifier:   F3:4F:0F:90:29:C6:4F:55:76:2A:BF:2D:CE:B2:2E:B8:8F:60:DA:DA
Certificate issuer:       /CN=598EDA28EF65B1BCC35DF9638C6F24F5BA562C51
Certificate serial:       0557E76FA6E6BE9BC928DD9A6296462E9B28D275
Authority key identifier: 59:8E:DA:28:EF:65:B1:BC:C3:5D:F9:63:8C:6F:24:F5:BA:56:2C:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/598EDA28EF65B1BCC35DF9638C6F24F5BA562C51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/323830343a373261303a3a2f33332d3333203d3e20323730383635.roa
Signing time:             Wed 04 May 2022 14:41:09 +0000
ROA not before:           Wed 04 May 2022 14:36:09 +0000
ROA not after:            Wed 03 May 2023 14:41:09 +0000
asID:                     270865
IP address blocks:        2804:72a0::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:57:e7:6f:a6:e6:be:9b:c9:28:dd:9a:62:96:46:2e:9b:28:d2:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=598EDA28EF65B1BCC35DF9638C6F24F5BA562C51
        Validity
            Not Before: May  4 14:36:09 2022 GMT
            Not After : May  3 14:41:09 2023 GMT
        Subject: CN=F34F0F9029C64F55762ABF2DCEB22EB88F60DADA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9b:a9:a2:cd:94:7a:00:56:ae:27:92:5c:c8:
                    22:e8:3f:ea:af:95:cc:a8:41:af:38:ad:3f:b1:a3:
                    dc:f6:32:e7:c7:f4:a1:53:a5:7c:b1:88:60:77:fc:
                    e8:75:48:0b:4f:b7:18:ea:4a:12:59:40:40:3d:5c:
                    54:f7:04:65:c1:1f:90:04:9f:42:1a:91:db:89:c0:
                    6c:cb:cc:e3:2a:b1:92:1d:3a:65:45:f6:32:cf:7d:
                    50:5c:81:05:21:08:79:61:97:69:42:07:29:b1:a4:
                    06:ad:ba:b3:c7:60:32:07:d7:2a:95:a9:ed:1c:95:
                    34:78:ce:bb:d5:3d:42:95:44:cb:a8:b3:da:7e:03:
                    25:69:3b:9f:93:36:3b:fb:3e:dc:4b:7d:be:63:37:
                    bb:93:25:76:01:2c:94:86:45:4e:8d:3e:d2:1f:41:
                    c0:0c:43:cb:c9:ba:58:4d:cc:18:b0:09:9e:2d:47:
                    96:73:02:83:f9:04:8c:bb:41:12:8c:a0:d1:1f:0e:
                    67:d1:1f:27:97:e2:8c:bf:8e:b0:ed:ad:1c:da:42:
                    fd:05:cb:78:f4:a1:82:fd:0a:6a:db:56:33:c3:be:
                    35:af:24:64:e0:12:cd:25:50:5e:68:91:bc:4f:0d:
                    15:e3:f2:a2:dc:19:72:37:08:a0:5e:79:77:df:ab:
                    17:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:4F:0F:90:29:C6:4F:55:76:2A:BF:2D:CE:B2:2E:B8:8F:60:DA:DA
            X509v3 Authority Key Identifier:
                keyid:59:8E:DA:28:EF:65:B1:BC:C3:5D:F9:63:8C:6F:24:F5:BA:56:2C:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/598EDA28EF65B1BCC35DF9638C6F24F5BA562C51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/598EDA28EF65B1BCC35DF9638C6F24F5BA562C51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/323830343a373261303a3a2f33332d3333203d3e20323730383635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72a0::/33

    Signature Algorithm: sha256WithRSAEncryption
         b4:6e:52:7a:53:bc:4d:18:5a:6b:29:06:2c:4a:ca:c4:ee:63:
         a0:f0:db:9e:98:30:59:50:0f:45:8c:ab:30:82:15:eb:46:66:
         ed:9a:2e:96:e2:b5:22:2e:f4:8c:b7:36:9c:0d:f9:28:d7:9c:
         49:6c:16:11:19:2c:cc:f7:66:05:b8:00:6e:a7:5b:99:3f:50:
         5f:5e:6a:1d:36:40:69:b8:50:44:5e:bc:6f:b4:99:42:a3:1b:
         32:a6:ff:3a:fe:1b:55:3a:8a:1d:ba:5b:13:6f:0d:e4:26:77:
         f1:8b:ee:a6:32:0f:1a:85:0a:8e:26:90:59:57:bf:42:0c:2b:
         79:7d:c7:2f:9f:75:6e:b2:d6:fa:ae:07:cd:49:62:13:c3:7d:
         33:84:71:bf:2d:fc:bf:a0:fd:a9:85:b8:65:cd:15:d5:09:f7:
         51:0b:93:b4:59:14:07:95:a8:d5:78:8a:32:a6:4f:58:fa:f7:
         cb:b6:1c:0a:cd:60:50:86:7e:02:76:0f:9e:f5:7f:86:69:89:
         f7:7b:c2:e2:39:ea:0b:ab:59:ac:65:d1:e3:45:8f:3e:74:ef:
         22:4a:31:d3:9e:8f:e1:3f:35:7f:d1:4d:63:3d:1e:93:e3:03:
         aa:3a:f0:d5:6a:f4:f2:e4:14:6d:32:d0:8e:d9:10:4b:70:ab:
         68:c2:d9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org