Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/323830343a316234343a3a2f33352d3335203d3e203631373137.roa
File:                     323830343a316234343a3a2f33352d3335203d3e203631373137.roa (raw, json)
Hash identifier:          vw3wKhjdqmUsgcJlWhDr8qF602uc0l8YBXBPXetjsK0=
Subject key identifier:   EA:39:57:93:14:7B:54:9D:EA:DA:7A:42:6C:C2:77:84:6D:47:93:A5
Certificate issuer:       /CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
Certificate serial:       0B450988DC08ADBD89E9407CFCF1F5845B180D08
Authority key identifier: 5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/323830343a316234343a3a2f33352d3335203d3e203631373137.roa
Signing time:             Sat 09 Dec 2023 13:03:42 +0000
ROA not before:           Sat 09 Dec 2023 12:58:42 +0000
ROA not after:            Sat 07 Dec 2024 13:03:42 +0000
asID:                     61717
IP address blocks:        2804:1b44::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:45:09:88:dc:08:ad:bd:89:e9:40:7c:fc:f1:f5:84:5b:18:0d:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
        Validity
            Not Before: Dec  9 12:58:42 2023 GMT
            Not After : Dec  7 13:03:42 2024 GMT
        Subject: CN=EA395793147B549DEADA7A426CC277846D4793A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a9:66:15:6c:70:da:a8:86:97:1e:04:fc:56:
                    10:ea:f7:82:6d:fe:e1:4a:97:3d:cb:3d:51:6a:22:
                    e8:28:a8:12:c1:59:f9:06:42:16:a2:9a:f6:b7:ba:
                    33:e3:72:25:98:b3:ce:91:db:5e:9d:87:6f:d5:3f:
                    e7:e8:ff:ab:4c:d1:d3:d8:27:38:6d:45:e1:df:f7:
                    8a:bc:da:2f:3b:8f:d1:50:77:12:76:fd:8f:c6:23:
                    c4:a7:ec:a6:42:c4:0a:14:b2:bb:9e:3c:71:41:67:
                    38:28:51:7e:a8:c6:fc:2d:41:d3:92:85:44:72:50:
                    59:2b:34:1c:02:87:87:2f:84:bf:6e:c9:68:9b:6f:
                    7c:1f:59:e8:99:ea:d8:53:c0:6d:51:44:19:56:88:
                    46:40:82:12:81:36:3e:b4:fd:ab:81:f5:80:31:43:
                    4d:a2:dc:85:f9:65:37:9f:52:40:d1:8b:b8:30:45:
                    f8:a3:38:85:40:46:cb:db:4f:4d:32:2d:71:23:77:
                    f2:65:4b:4d:56:78:37:18:c1:74:01:6e:3e:38:3b:
                    fa:48:e7:0b:7c:e9:8a:d6:1b:36:65:15:bd:11:3d:
                    81:b3:5a:59:69:f2:f5:0a:29:f7:87:2f:e7:b2:e0:
                    d8:74:4e:4a:d0:31:be:36:0f:af:ee:9e:b0:0f:b6:
                    ae:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:39:57:93:14:7B:54:9D:EA:DA:7A:42:6C:C2:77:84:6D:47:93:A5
            X509v3 Authority Key Identifier:
                keyid:5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/323830343a316234343a3a2f33352d3335203d3e203631373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b44::/35

    Signature Algorithm: sha256WithRSAEncryption
         77:5c:dc:d3:ce:25:7e:a3:a5:fe:45:87:1b:65:71:ca:fe:c3:
         2b:9f:5d:5c:96:49:a3:8b:fc:0d:99:08:4b:14:1c:6b:41:75:
         e7:6b:42:3b:36:e5:a7:68:85:8e:7e:65:23:4d:51:1a:fd:70:
         c2:3b:ff:18:c4:fe:9c:88:83:5c:b1:33:01:c8:0b:2f:f0:67:
         02:b4:2e:68:c3:73:db:35:9a:91:2d:54:28:2e:2a:e5:22:80:
         25:24:80:51:99:ee:5f:5f:f6:08:9a:b3:0e:a7:c5:e3:f4:10:
         f0:09:0e:45:35:18:ac:a5:23:60:67:86:44:2c:56:23:06:84:
         7c:ee:5e:72:84:d5:8e:e4:5a:cc:1a:ac:06:4a:57:ac:46:92:
         d8:67:f5:cb:e0:bf:74:0d:47:4a:d6:7f:11:4c:b4:64:cf:17:
         ff:88:c4:5b:ea:16:50:db:14:0c:18:04:39:a1:b6:14:86:d6:
         29:20:4d:ad:db:e0:5a:47:49:57:2e:d5:9e:19:b0:22:a0:33:
         63:4a:46:92:88:42:71:7d:a9:fe:ae:43:7a:90:f9:1c:99:5b:
         04:4d:90:fc:7a:58:18:86:7e:8b:7b:80:e6:b6:a8:15:fd:1b:
         31:09:e6:ea:b4:ac:4d:ce:e9:94:1e:3b:29:b3:b2:a6:d9:9a:
         5e:7e:68:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org