Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/323830343a373839303a3a2f33342d3334203d3e20323731323531.roa
File:                     323830343a373839303a3a2f33342d3334203d3e20323731323531.roa (raw, json)
Hash identifier:          ATRtoYbU3h0u2f/rm7DY4DMxxH0DienE66T3VSXfcOc=
Subject key identifier:   DD:90:1C:CB:0C:4F:F6:22:9A:9E:0C:F7:B4:77:8D:38:1F:9E:27:65
Certificate issuer:       /CN=28AE421F873EEF31551BBDBEE42FCD791F60F68D
Certificate serial:       6B0DB63957A3610DFA9DA31791C9E00910D1B27B
Authority key identifier: 28:AE:42:1F:87:3E:EF:31:55:1B:BD:BE:E4:2F:CD:79:1F:60:F6:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28AE421F873EEF31551BBDBEE42FCD791F60F68D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/323830343a373839303a3a2f33342d3334203d3e20323731323531.roa
Signing time:             Fri 17 Nov 2023 17:36:39 +0000
ROA not before:           Fri 17 Nov 2023 17:31:39 +0000
ROA not after:            Fri 15 Nov 2024 17:36:39 +0000
asID:                     271251
IP address blocks:        2804:7890::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:0d:b6:39:57:a3:61:0d:fa:9d:a3:17:91:c9:e0:09:10:d1:b2:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28AE421F873EEF31551BBDBEE42FCD791F60F68D
        Validity
            Not Before: Nov 17 17:31:39 2023 GMT
            Not After : Nov 15 17:36:39 2024 GMT
        Subject: CN=DD901CCB0C4FF6229A9E0CF7B4778D381F9E2765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1c:2a:94:d4:e4:bf:aa:4f:19:9c:c5:9c:6e:
                    4b:37:bd:13:11:1c:47:9b:49:38:c1:0a:40:8a:7b:
                    2e:b9:b1:ab:83:90:22:ff:fe:c6:0b:62:7e:26:78:
                    48:48:7b:62:10:df:b5:43:7c:d9:78:86:e2:ed:7c:
                    b1:1f:34:b5:cd:33:2e:6a:e7:a9:34:76:fd:d3:7f:
                    c2:ca:7e:8b:d3:9a:14:31:15:c1:85:97:ef:94:94:
                    f6:05:c7:89:d7:09:38:97:67:6b:17:de:cd:d3:6b:
                    e2:de:4f:ae:66:96:15:2c:df:70:92:11:90:26:6b:
                    78:77:5d:5a:2c:b4:f9:bb:dd:66:65:30:62:44:64:
                    1c:e3:79:44:be:36:c1:fe:93:43:de:cb:87:ed:3b:
                    92:24:0f:c8:1a:ab:4b:fc:b2:46:e4:31:53:82:eb:
                    48:7c:c4:6c:6c:84:ce:b9:ab:55:8a:17:7d:b8:fb:
                    ac:9b:2e:d1:20:fc:65:ab:cc:32:59:ff:18:12:92:
                    84:86:f8:2b:f5:53:d2:93:f7:3c:30:45:8b:47:5d:
                    8a:fe:c0:7a:53:d8:04:c8:a8:5a:3f:8c:bb:48:b4:
                    60:42:f3:e5:89:9b:04:cd:6d:ac:a9:ae:30:d8:ff:
                    e2:37:01:42:e8:26:14:51:40:6b:72:97:8d:46:cf:
                    cb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:90:1C:CB:0C:4F:F6:22:9A:9E:0C:F7:B4:77:8D:38:1F:9E:27:65
            X509v3 Authority Key Identifier:
                keyid:28:AE:42:1F:87:3E:EF:31:55:1B:BD:BE:E4:2F:CD:79:1F:60:F6:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/28AE421F873EEF31551BBDBEE42FCD791F60F68D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28AE421F873EEF31551BBDBEE42FCD791F60F68D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/323830343a373839303a3a2f33342d3334203d3e20323731323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7890::/34

    Signature Algorithm: sha256WithRSAEncryption
         4d:3c:2d:5a:f1:3f:3e:48:20:66:75:07:d2:45:6e:65:81:d8:
         73:72:7a:f9:0d:cd:b0:95:32:54:fe:ce:74:cd:5f:ee:78:3c:
         d3:4e:18:b0:35:9c:31:cd:94:92:8d:ac:b1:ac:f6:62:3b:da:
         f0:c5:3b:3e:cf:2f:72:0b:58:25:ea:d5:6b:4d:da:55:69:96:
         62:cf:4c:6d:e2:38:d6:a2:b2:62:df:6b:54:4c:e5:6a:c2:98:
         94:eb:32:8b:bf:f0:b7:eb:0d:f8:04:8c:0d:37:1d:80:72:1b:
         54:2a:ce:54:7f:43:03:7f:04:c1:03:8b:fa:66:b0:5a:d6:00:
         bc:40:5f:d2:df:4f:5b:a0:58:43:c9:3e:64:e2:7d:9b:a2:e7:
         8a:aa:40:51:6e:2c:9e:3e:3d:6d:e9:e1:db:32:2a:73:b2:8b:
         ce:58:b1:50:99:28:28:24:de:cb:eb:6c:20:ea:26:46:e7:d5:
         23:b4:ee:4b:98:9a:8b:8c:75:50:17:d1:ac:80:45:b8:77:bb:
         b7:f2:04:e2:da:91:96:62:71:cb:2a:d5:c9:2e:c8:c0:2f:15:
         4c:62:0b:c9:ac:c1:0f:4d:1e:e2:0e:03:2c:86:e3:3d:74:e4:
         2e:c8:55:61:9a:70:7e:3c:a6:3a:8a:21:16:8f:0c:95:99:fc:
         4b:c8:78:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org