Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/323830343a343538633a3a2f33322d3334203d3e20323636393334.roa
File:                     323830343a343538633a3a2f33322d3334203d3e20323636393334.roa (raw, json)
Hash identifier:          2MPzuuaLCynUMmj9un6i5E/mSpzwMYDveJ4b6tTP0Uw=
Subject key identifier:   53:EB:AC:FC:43:C1:16:83:25:C5:1C:84:52:A5:2C:4C:1B:8D:0D:98
Certificate issuer:       /CN=F58C653A90EBD6C4D81507F00284F07BDB55956D
Certificate serial:       655449A8C1FB3F3BC9C6CF0646D2FF3B7DD67D98
Authority key identifier: F5:8C:65:3A:90:EB:D6:C4:D8:15:07:F0:02:84:F0:7B:DB:55:95:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F58C653A90EBD6C4D81507F00284F07BDB55956D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/323830343a343538633a3a2f33322d3334203d3e20323636393334.roa
Signing time:             Mon 26 Sep 2022 02:00:00 +0000
ROA not before:           Mon 26 Sep 2022 01:55:00 +0000
ROA not after:            Mon 25 Sep 2023 02:00:00 +0000
asID:                     266934
IP address blocks:        2804:458c::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:54:49:a8:c1:fb:3f:3b:c9:c6:cf:06:46:d2:ff:3b:7d:d6:7d:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F58C653A90EBD6C4D81507F00284F07BDB55956D
        Validity
            Not Before: Sep 26 01:55:00 2022 GMT
            Not After : Sep 25 02:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b5:9b:9a:12:a2:b8:3c:f4:01:06:c1:51:68:
                    b6:3d:f2:25:76:0f:63:09:85:29:eb:3e:62:c8:6b:
                    0e:d0:87:c1:69:bb:00:bb:aa:f2:ca:2d:06:d6:60:
                    3d:b9:ec:0f:af:e0:4f:fb:af:09:9d:8a:ae:93:4f:
                    c9:d4:cf:47:0b:cf:f6:8e:e6:53:84:c9:4a:7e:bd:
                    18:33:4e:0c:7a:b2:88:29:33:7d:6a:3d:3e:3a:e2:
                    2b:06:cf:5c:e0:06:4e:07:f3:1b:0c:06:83:a7:ae:
                    76:29:08:66:ac:98:26:e2:fc:71:10:0e:89:ae:c3:
                    1b:bc:be:ee:5f:a8:7c:23:09:d8:54:46:65:5a:54:
                    98:66:01:0d:1d:72:6f:68:9e:62:b8:46:5a:62:18:
                    2b:01:65:b2:2d:4b:4a:b7:7a:70:52:fa:fe:cf:98:
                    8c:cd:84:76:70:34:ff:5b:aa:11:de:93:54:37:42:
                    de:9a:7e:44:c3:ea:50:ba:22:fc:6c:2c:38:fe:a0:
                    28:71:28:0a:72:48:07:af:e6:b2:af:77:fd:e3:f4:
                    d7:b5:cb:f1:58:26:57:8d:35:48:d4:e9:c0:a7:3d:
                    59:97:9f:9f:60:cc:1e:5f:cb:a1:65:66:40:d6:f5:
                    e9:3c:65:a8:bb:d9:c2:33:e2:83:86:ec:c3:f8:ee:
                    4c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:EB:AC:FC:43:C1:16:83:25:C5:1C:84:52:A5:2C:4C:1B:8D:0D:98
            X509v3 Authority Key Identifier:
                keyid:F5:8C:65:3A:90:EB:D6:C4:D8:15:07:F0:02:84:F0:7B:DB:55:95:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/F58C653A90EBD6C4D81507F00284F07BDB55956D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F58C653A90EBD6C4D81507F00284F07BDB55956D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/323830343a343538633a3a2f33322d3334203d3e20323636393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:458c::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:a4:ab:f1:38:d8:9b:20:4c:ad:a3:fc:31:28:33:65:83:dc:
         95:8f:19:31:44:05:b4:8d:6d:00:16:69:d6:37:d1:3c:9e:21:
         34:d7:b2:c3:a1:b1:58:0a:75:9e:98:16:a2:36:80:6f:e6:a4:
         14:64:ab:3e:ee:c6:b3:00:86:d7:cc:54:c3:37:66:f7:27:05:
         fe:af:33:69:83:1f:bd:b3:ac:12:91:82:f9:02:f7:56:ff:6d:
         f2:67:f8:c9:8e:7b:19:8e:a3:c9:20:8c:2c:91:43:2b:0d:45:
         98:d3:89:d7:a9:25:84:3a:17:7b:72:8d:9d:6e:6f:c7:96:d0:
         18:78:19:6a:72:49:5c:15:46:61:0b:83:b7:ff:ca:41:b5:15:
         45:b6:39:5c:d0:38:7c:3b:f5:b2:ea:7f:23:94:b4:22:cd:66:
         b0:d9:3d:07:7c:54:1e:96:03:22:8b:37:b5:72:90:dd:cc:79:
         cd:14:9a:5d:e6:a9:9a:c0:bb:c6:7f:db:34:5a:4e:bd:1b:7f:
         91:b1:3e:68:d6:75:d4:e9:ba:26:b4:c2:ba:dc:49:57:56:20:
         cf:29:75:7b:55:57:18:6f:f9:42:c8:42:cd:2b:ed:17:f7:b8:
         48:5e:65:c9:59:ca:e8:f3:46:2c:00:35:b1:88:ca:bc:00:b7:
         0d:0c:44:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org