Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/323830343a353230383a3a2f33332d3333203d3e203238353934.roa
File:                     323830343a353230383a3a2f33332d3333203d3e203238353934.roa (raw, json)
Hash identifier:          Ru4fEpK0iOwcXWXY7qMmGtxl1lvOq7nby2rp05fMKWM=
Subject key identifier:   4D:05:B3:C1:FC:12:36:61:79:8A:B7:07:A4:D8:54:42:F2:45:A5:61
Certificate issuer:       /CN=022A43659AD22D768D09981B94C1A7A7BFC1AF03
Certificate serial:       49E2F5321D2D55BA5905866EC98BF3E5076DA7F3
Authority key identifier: 02:2A:43:65:9A:D2:2D:76:8D:09:98:1B:94:C1:A7:A7:BF:C1:AF:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/323830343a353230383a3a2f33332d3333203d3e203238353934.roa
Signing time:             Mon 03 Jul 2023 10:29:35 +0000
ROA not before:           Mon 03 Jul 2023 10:24:35 +0000
ROA not after:            Mon 01 Jul 2024 10:29:35 +0000
asID:                     28594
IP address blocks:        2804:5208::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e2:f5:32:1d:2d:55:ba:59:05:86:6e:c9:8b:f3:e5:07:6d:a7:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=022A43659AD22D768D09981B94C1A7A7BFC1AF03
        Validity
            Not Before: Jul  3 10:24:35 2023 GMT
            Not After : Jul  1 10:29:35 2024 GMT
        Subject: CN=4D05B3C1FC123661798AB707A4D85442F245A561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e7:67:b2:15:9c:2f:51:63:f8:4f:9a:e5:45:
                    bf:09:53:62:ad:e3:0c:f3:ab:61:45:23:9f:bc:59:
                    7b:0c:3c:d6:c1:5c:94:20:c7:c8:98:31:90:e6:67:
                    d4:d6:ab:ea:58:65:6e:6a:e8:6f:29:ff:a0:88:47:
                    4c:d0:b8:7d:cb:62:19:22:9d:1f:29:a2:47:d3:fb:
                    10:9e:1b:3d:c4:d7:b7:96:c3:34:61:1b:9d:01:5b:
                    83:a9:97:01:ef:7d:d4:18:56:72:8f:a9:9c:c9:df:
                    89:a2:f1:c3:58:f3:06:74:2c:c4:97:7d:a4:37:75:
                    37:e9:d3:09:c2:3a:74:1d:5d:a6:30:98:49:54:fd:
                    0c:53:3c:2b:54:d7:71:e8:71:52:e7:81:5d:cf:7a:
                    66:6f:e8:17:21:3e:e8:8d:f4:23:df:01:fa:ad:2b:
                    28:ed:9e:6b:85:ab:f2:82:70:22:a7:d3:a0:56:03:
                    b1:30:80:b6:fe:99:65:38:ed:9d:51:7c:91:e3:35:
                    96:7b:72:ce:f0:03:2a:39:68:b7:65:52:e3:3c:5d:
                    0e:4e:cf:35:2e:1b:e1:6b:fd:68:75:3c:f9:f1:68:
                    b2:94:c2:b5:78:2a:35:eb:be:db:45:e6:ca:b3:da:
                    f9:35:85:fd:17:ce:5e:32:80:18:ca:ec:5b:8f:75:
                    c3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:05:B3:C1:FC:12:36:61:79:8A:B7:07:A4:D8:54:42:F2:45:A5:61
            X509v3 Authority Key Identifier:
                keyid:02:2A:43:65:9A:D2:2D:76:8D:09:98:1B:94:C1:A7:A7:BF:C1:AF:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/323830343a353230383a3a2f33332d3333203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5208::/33

    Signature Algorithm: sha256WithRSAEncryption
         d3:bc:72:14:55:40:bf:f7:dd:28:63:4c:ac:43:aa:8f:b3:f5:
         ac:7a:f5:a5:16:3c:b1:e8:06:96:ac:3e:9d:23:de:1b:18:66:
         e2:dd:d5:08:12:d3:12:13:0d:75:08:9b:b7:6f:3d:58:6f:22:
         8a:88:67:7c:19:4b:9b:ce:ea:7f:2d:50:ca:7d:9d:e7:01:30:
         94:e0:99:b2:03:74:15:43:e6:c2:01:ba:06:ce:30:52:b3:0c:
         dc:61:20:c9:b2:a6:99:31:04:1f:73:c9:b0:9e:8c:b7:1b:6e:
         4d:fa:8d:2f:1a:55:00:97:ce:b7:78:1c:4c:a4:6c:ff:3a:00:
         9c:77:89:f2:a4:b5:03:33:53:b7:03:77:5d:74:7d:ee:3f:38:
         41:86:79:d5:2b:da:51:26:7d:11:e4:2b:76:ac:85:c7:cd:cb:
         05:60:5e:19:7d:10:b0:8f:16:02:49:a1:1a:a2:f4:93:60:ef:
         e7:49:fc:c3:01:fd:75:13:1e:8d:3d:aa:cb:d8:66:58:dc:f2:
         88:3e:7b:cf:29:8e:ab:e0:0a:aa:dd:8b:1b:8b:36:fb:54:00:
         18:b5:8e:93:b0:88:a0:d6:79:b7:5d:46:2b:90:8b:83:2e:2f:
         8f:9f:86:71:f4:df:a2:6f:b3:88:57:77:b5:b7:b1:f4:dd:b4:
         54:54:b1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org