Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/323830343a353230383a383030303a3a2f34382d3438203d3e203238353934.roa
File:                     323830343a353230383a383030303a3a2f34382d3438203d3e203238353934.roa (raw, json)
Hash identifier:          bzmgNvqToTMSw0nYqb85sqOENU1+VpxrydZDhmSCBAg=
Subject key identifier:   BA:00:47:E5:22:66:98:8D:95:BB:C8:D5:43:A1:C4:41:24:80:D7:AC
Certificate issuer:       /CN=022A43659AD22D768D09981B94C1A7A7BFC1AF03
Certificate serial:       0B077499E66F1BAE4E603B7FF50A50067FB90344
Authority key identifier: 02:2A:43:65:9A:D2:2D:76:8D:09:98:1B:94:C1:A7:A7:BF:C1:AF:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/323830343a353230383a383030303a3a2f34382d3438203d3e203238353934.roa
Signing time:             Mon 03 Jul 2023 10:29:40 +0000
ROA not before:           Mon 03 Jul 2023 10:24:40 +0000
ROA not after:            Mon 01 Jul 2024 10:29:40 +0000
asID:                     28594
IP address blocks:        2804:5208:8000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:07:74:99:e6:6f:1b:ae:4e:60:3b:7f:f5:0a:50:06:7f:b9:03:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=022A43659AD22D768D09981B94C1A7A7BFC1AF03
        Validity
            Not Before: Jul  3 10:24:40 2023 GMT
            Not After : Jul  1 10:29:40 2024 GMT
        Subject: CN=BA0047E52266988D95BBC8D543A1C4412480D7AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:9c:54:91:b3:e4:b5:4a:a1:b8:07:1e:7b:d9:
                    cd:af:04:38:41:e5:a4:82:af:fa:73:db:54:03:98:
                    55:6d:69:d6:f8:c3:7f:44:27:f1:33:8e:f8:72:03:
                    89:e5:cf:cf:fa:53:64:e9:25:30:bd:83:9d:81:ad:
                    37:a1:88:74:e3:f7:63:dd:c3:8f:73:83:11:3f:d7:
                    7e:3d:a2:3f:11:61:ff:41:65:a5:1e:7c:6a:6c:84:
                    a9:2e:9a:6c:89:5c:f5:25:02:f5:1a:d2:a4:85:ef:
                    7f:48:0d:d2:3b:e4:03:31:c6:c9:28:3f:89:a5:81:
                    1d:43:82:65:33:22:30:83:34:5b:05:28:80:b6:67:
                    b1:b0:c3:f4:d3:05:b2:73:ca:96:cb:d7:b7:2e:d9:
                    e5:74:98:6e:f2:21:6f:0a:65:4d:00:28:16:5f:a2:
                    08:ff:2a:93:2e:d0:4d:16:09:93:0e:d9:b1:f8:3e:
                    e7:7f:cb:7d:e3:5c:bb:c1:18:2b:16:ab:aa:cc:a8:
                    f7:ca:b6:71:81:b0:10:79:50:2e:0f:da:69:41:72:
                    bb:c3:73:fc:15:f7:de:f5:3d:3b:70:ea:0e:0a:71:
                    72:88:34:b8:69:51:16:02:fb:32:d7:44:a6:f6:3d:
                    13:d4:c7:58:e5:8f:b6:f4:e9:5f:2f:fd:68:44:bf:
                    73:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:00:47:E5:22:66:98:8D:95:BB:C8:D5:43:A1:C4:41:24:80:D7:AC
            X509v3 Authority Key Identifier:
                keyid:02:2A:43:65:9A:D2:2D:76:8D:09:98:1B:94:C1:A7:A7:BF:C1:AF:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/323830343a353230383a383030303a3a2f34382d3438203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5208:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:82:c8:8f:29:b8:11:3f:8d:f0:0d:93:71:f0:ae:4b:c3:e5:
         37:5c:44:f1:e8:eb:5b:25:c4:60:82:8d:a6:b0:0e:46:08:c9:
         b9:59:cc:0d:c4:25:5d:6b:25:65:d5:cf:a5:68:8a:54:68:02:
         f4:97:dc:62:be:f2:bd:ba:28:d8:b8:fb:35:3c:33:c0:a7:bc:
         cd:e8:40:9b:93:a6:ef:eb:f3:1b:bf:ce:d2:f1:ed:6a:0a:58:
         2e:0e:22:5a:93:42:0c:61:3a:9b:09:7d:7a:f7:ef:2b:56:01:
         5e:ae:99:1d:18:24:c6:4d:18:66:7b:22:74:e4:97:bc:b2:70:
         75:78:73:90:85:82:70:55:71:d8:11:04:2f:64:52:fd:80:2b:
         41:e3:b0:7c:72:de:e0:80:71:06:92:c6:1f:17:42:33:c5:5a:
         3a:92:b3:63:2c:bb:0f:9c:11:4a:81:b7:f5:c4:eb:c8:82:f9:
         4b:c1:2e:4d:75:56:7d:79:7e:07:a1:4f:3c:aa:23:55:03:43:
         07:94:91:f8:72:f6:55:90:82:b7:c3:87:e9:45:b3:15:d4:47:
         b5:d6:90:99:c9:73:42:77:c6:4d:f2:b7:59:ef:4d:15:84:e3:
         38:10:21:82:a1:7e:70:ca:28:5f:8a:83:75:79:9b:40:0f:06:
         1b:80:a0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org