Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/323830343a373839303a383030303a3a2f33332d3333203d3e20323731323531.roa
File:                     323830343a373839303a383030303a3a2f33332d3333203d3e20323731323531.roa (raw, json)
Hash identifier:          TI60WQETvCcy8ji+jZJVThDNtYH/jxGIOqaPbdE0aBA=
Subject key identifier:   C8:5B:28:64:ED:30:D2:50:F4:0C:AC:B7:FD:AC:2F:64:72:6E:CA:97
Certificate issuer:       /CN=28AE421F873EEF31551BBDBEE42FCD791F60F68D
Certificate serial:       707E4F87C1563A6C2614EB696C59CD81AB84D1BA
Authority key identifier: 28:AE:42:1F:87:3E:EF:31:55:1B:BD:BE:E4:2F:CD:79:1F:60:F6:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28AE421F873EEF31551BBDBEE42FCD791F60F68D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/323830343a373839303a383030303a3a2f33332d3333203d3e20323731323531.roa
Signing time:             Fri 17 Nov 2023 17:36:38 +0000
ROA not before:           Fri 17 Nov 2023 17:31:38 +0000
ROA not after:            Fri 15 Nov 2024 17:36:38 +0000
asID:                     271251
IP address blocks:        2804:7890:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:7e:4f:87:c1:56:3a:6c:26:14:eb:69:6c:59:cd:81:ab:84:d1:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28AE421F873EEF31551BBDBEE42FCD791F60F68D
        Validity
            Not Before: Nov 17 17:31:38 2023 GMT
            Not After : Nov 15 17:36:38 2024 GMT
        Subject: CN=C85B2864ED30D250F40CACB7FDAC2F64726ECA97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:13:b3:a2:be:38:c2:bc:a0:bb:b0:9f:04:96:
                    96:82:5f:e7:5b:be:44:62:b9:4d:a5:09:52:08:7c:
                    dd:f3:62:d9:6c:53:df:46:cb:c4:62:25:28:47:5a:
                    91:6d:98:37:26:b6:7d:6b:62:92:4a:c6:e7:e1:ee:
                    84:90:c2:5c:af:c5:30:65:64:45:60:ee:57:fc:b5:
                    16:7a:0c:7c:42:be:22:72:ce:fb:67:68:b0:68:71:
                    df:45:a5:03:7a:96:b4:dc:4c:61:f3:62:6e:f2:9a:
                    28:bc:39:a2:bf:7d:bd:36:3e:98:25:ee:d5:8a:d2:
                    f3:25:7c:34:bd:81:4f:ea:22:c2:23:d8:c3:2f:96:
                    4b:b7:c1:0d:9a:9e:c6:62:04:44:8f:51:97:6a:a3:
                    e4:11:4f:55:22:32:fa:e4:5f:30:fa:50:9c:2b:04:
                    0d:49:b1:7c:d9:09:23:bf:a0:10:08:16:72:37:8a:
                    a6:1f:2e:d2:e3:57:43:5e:2c:dd:de:f2:d6:d8:39:
                    c7:97:cb:86:d6:fc:28:38:ad:3d:e5:9b:f3:15:7f:
                    ca:d3:89:31:ba:f3:ba:d1:ba:57:bc:fb:6b:e0:bf:
                    b9:e6:eb:ef:eb:11:67:3c:2b:fa:ee:15:d6:a1:e7:
                    91:36:5f:bc:76:eb:01:e0:90:f4:9c:ca:53:87:c2:
                    d3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:5B:28:64:ED:30:D2:50:F4:0C:AC:B7:FD:AC:2F:64:72:6E:CA:97
            X509v3 Authority Key Identifier:
                keyid:28:AE:42:1F:87:3E:EF:31:55:1B:BD:BE:E4:2F:CD:79:1F:60:F6:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/28AE421F873EEF31551BBDBEE42FCD791F60F68D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28AE421F873EEF31551BBDBEE42FCD791F60F68D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/323830343a373839303a383030303a3a2f33332d3333203d3e20323731323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7890:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         0a:95:e8:f1:b4:9c:9e:56:85:f8:2c:81:b1:dd:2a:e7:f0:4f:
         86:66:c7:45:b1:c2:3f:6c:c6:7a:42:c7:82:e6:88:d9:85:63:
         c8:18:15:fa:22:b2:7a:ad:43:f1:ea:4a:9e:16:42:8e:1b:45:
         9f:a2:85:3b:79:18:a2:5a:69:33:fb:3c:40:29:0a:6a:e4:48:
         00:dd:f8:14:07:bb:22:39:59:9b:c1:3d:ed:24:1f:16:5f:49:
         a1:cf:7f:71:88:65:e8:69:50:a4:b4:53:6c:0c:43:06:89:97:
         c9:a2:f0:f9:92:5e:6a:a9:d5:0d:fc:e6:9b:8d:ab:26:13:e9:
         8d:4f:21:56:6f:1d:ff:6e:56:63:63:bf:2b:fc:a8:ff:8b:ff:
         b8:46:23:56:cd:51:e1:81:64:51:69:cd:7e:4c:d8:85:44:26:
         e2:7f:35:5c:9d:1d:c1:e7:8f:e8:90:f2:02:df:ba:35:19:73:
         7a:04:e8:8e:4b:25:42:7d:16:d8:cd:f5:f6:14:d6:3b:d7:33:
         3e:7b:c4:9d:49:37:20:e8:67:af:bb:d7:b3:34:8d:ef:f5:c4:
         69:0f:9b:df:f6:2f:fd:42:72:ff:93:99:df:81:61:bb:08:b2:
         93:9d:83:09:41:ee:75:28:f8:09:6d:e6:50:e5:23:00:5f:c7:
         a2:31:58:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org