Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/323830343a373839303a343030303a3a2f33342d3334203d3e20323731323531.roa
File:                     323830343a373839303a343030303a3a2f33342d3334203d3e20323731323531.roa (raw, json)
Hash identifier:          pCHe5JakQvLwH4tnd+Lz+bMB3n2IzHxzKNB2DfvLebM=
Subject key identifier:   0B:44:47:21:81:B0:A5:BA:21:CC:9A:23:B5:C6:8C:81:01:2F:05:20
Certificate issuer:       /CN=28AE421F873EEF31551BBDBEE42FCD791F60F68D
Certificate serial:       23CAB1CC672771A02ADB017846EA2AF886AC4A17
Authority key identifier: 28:AE:42:1F:87:3E:EF:31:55:1B:BD:BE:E4:2F:CD:79:1F:60:F6:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28AE421F873EEF31551BBDBEE42FCD791F60F68D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/323830343a373839303a343030303a3a2f33342d3334203d3e20323731323531.roa
Signing time:             Fri 17 Nov 2023 17:36:39 +0000
ROA not before:           Fri 17 Nov 2023 17:31:39 +0000
ROA not after:            Fri 15 Nov 2024 17:36:39 +0000
asID:                     271251
IP address blocks:        2804:7890:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ca:b1:cc:67:27:71:a0:2a:db:01:78:46:ea:2a:f8:86:ac:4a:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28AE421F873EEF31551BBDBEE42FCD791F60F68D
        Validity
            Not Before: Nov 17 17:31:39 2023 GMT
            Not After : Nov 15 17:36:39 2024 GMT
        Subject: CN=0B44472181B0A5BA21CC9A23B5C68C81012F0520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ae:24:0f:09:f8:98:16:0d:31:cd:cc:61:bf:
                    b7:64:ec:a7:c2:16:2e:5b:48:76:78:37:57:ff:ee:
                    1d:f6:46:09:99:35:66:fc:43:98:82:8c:e8:9f:9c:
                    1e:15:d9:d9:50:73:3d:48:f7:a3:3c:c1:f2:3a:b6:
                    33:7f:6c:34:e4:88:90:f7:82:30:ad:19:8d:18:23:
                    f6:ef:b2:38:2b:8c:37:55:d5:6d:04:e7:52:9a:6c:
                    de:f5:52:72:b8:80:25:f9:12:16:18:04:76:50:63:
                    15:40:5c:f2:f8:df:0e:86:4b:19:4d:66:12:de:39:
                    4f:21:84:cf:67:ed:e6:87:07:ad:f8:25:fa:36:aa:
                    3e:06:5d:d0:d1:a4:43:de:e2:92:1d:9e:e3:99:5a:
                    5e:90:aa:ac:5b:84:33:36:50:ca:58:cb:01:32:9d:
                    16:e2:c4:3a:76:a3:74:e0:d1:d1:fd:fe:4a:56:bf:
                    29:ee:9e:51:60:07:18:51:93:9a:f0:d9:b1:55:b2:
                    e0:74:26:f1:c2:59:89:c6:7b:03:a8:db:d7:b8:8b:
                    93:57:1b:2d:93:b3:cd:38:9a:ef:ff:48:3f:27:d6:
                    7f:e9:e5:e0:eb:1e:3b:a4:d7:89:36:f3:81:4d:55:
                    d6:53:d2:d9:5f:43:1c:87:2f:48:06:34:02:c2:5d:
                    d1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:44:47:21:81:B0:A5:BA:21:CC:9A:23:B5:C6:8C:81:01:2F:05:20
            X509v3 Authority Key Identifier:
                keyid:28:AE:42:1F:87:3E:EF:31:55:1B:BD:BE:E4:2F:CD:79:1F:60:F6:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/28AE421F873EEF31551BBDBEE42FCD791F60F68D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28AE421F873EEF31551BBDBEE42FCD791F60F68D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/323830343a373839303a343030303a3a2f33342d3334203d3e20323731323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7890:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3b:92:99:e6:8f:74:f0:2e:4f:f1:33:61:1c:ab:7f:31:1a:5d:
         d2:e9:9e:3c:8f:d7:73:2b:ae:a6:93:a9:82:df:f4:8d:f0:d3:
         49:5d:c5:95:96:2b:3e:26:29:0d:0b:de:0f:00:bd:be:1e:a7:
         d9:23:2a:16:ff:b0:f7:ae:0f:31:bf:2f:55:2c:16:5d:cf:66:
         e1:0a:bc:41:2a:24:57:7c:58:c7:d8:0c:be:ed:85:55:06:20:
         17:28:6e:79:55:5c:1f:61:ab:e9:d0:bd:21:91:54:e0:2c:64:
         05:8d:2b:11:e4:8a:c8:2a:2a:18:9e:53:28:f2:ef:88:97:b7:
         2a:81:a1:4b:2e:43:bb:32:7f:46:a2:c9:d0:5e:d4:ee:ea:c0:
         73:fd:65:f7:8c:c8:46:7b:69:79:94:77:15:20:23:4c:e3:43:
         24:ff:e2:b7:fb:8b:58:95:43:d1:b8:f4:0f:1c:a7:94:a8:ad:
         be:a7:8a:c8:83:53:d9:27:03:0d:69:ff:6f:d1:5a:4e:4c:64:
         a0:bc:d7:3d:d6:32:42:1a:c5:82:b0:0f:b9:7c:18:06:20:d7:
         77:03:90:e1:3b:0f:b5:0a:d8:76:3d:02:bf:7f:a1:ee:85:45:
         08:3a:33:b6:20:57:b8:6a:8a:b1:38:9c:b1:2e:36:d1:00:51:
         20:23:a9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org