Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/589yA5PVP2ZX7F1doCodSBsPRvP18nd6uHXNJGE3WARc/0/323830343a373830303a3a2f33332d3333203d3e20323731323134.roa
File:                     323830343a373830303a3a2f33332d3333203d3e20323731323134.roa (raw, json)
Hash identifier:          OhnhG1gcAgUZPOnfUHKQgwiL8vn/h4if1wrGNzPj1qM=
Subject key identifier:   F5:04:55:EC:03:E1:34:4A:3D:37:F2:CD:95:1C:E4:16:2B:A5:A4:08
Certificate issuer:       /CN=C389A7A938C80969CD8AA42F6DCDAABD9E5CEBDD
Certificate serial:       35C7A24AD167BE8B139CAB403ACA3F47B0BB7404
Authority key identifier: C3:89:A7:A9:38:C8:09:69:CD:8A:A4:2F:6D:CD:AA:BD:9E:5C:EB:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C389A7A938C80969CD8AA42F6DCDAABD9E5CEBDD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/589yA5PVP2ZX7F1doCodSBsPRvP18nd6uHXNJGE3WARc/0/323830343a373830303a3a2f33332d3333203d3e20323731323134.roa
Signing time:             Wed 09 Nov 2022 13:07:12 +0000
ROA not before:           Wed 09 Nov 2022 13:02:12 +0000
ROA not after:            Wed 08 Nov 2023 13:07:12 +0000
asID:                     271214
IP address blocks:        2804:7800::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:c7:a2:4a:d1:67:be:8b:13:9c:ab:40:3a:ca:3f:47:b0:bb:74:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C389A7A938C80969CD8AA42F6DCDAABD9E5CEBDD
        Validity
            Not Before: Nov  9 13:02:12 2022 GMT
            Not After : Nov  8 13:07:12 2023 GMT
        Subject: CN=F50455EC03E1344A3D37F2CD951CE4162BA5A408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cc:f6:6d:9c:d5:a8:68:61:be:40:ce:0e:40:
                    12:ae:0f:22:69:43:be:9d:a6:90:3f:e7:de:6c:8a:
                    f1:63:41:19:80:5d:ae:aa:f4:88:43:c4:e4:6c:ff:
                    c4:47:13:07:77:65:03:3d:13:a2:35:80:ff:b8:12:
                    a6:31:ff:ee:11:8e:db:a7:18:21:bd:4c:a4:75:80:
                    3a:45:e7:18:e3:9c:07:71:38:5f:d7:ef:a8:91:25:
                    53:70:b6:e0:86:ff:6f:3a:b2:c2:8b:2d:e8:39:5c:
                    4b:b6:1d:c3:cb:e7:5d:0d:e8:83:3f:eb:a5:a2:6a:
                    69:2c:34:4e:9f:6b:a9:90:5a:67:b6:33:52:04:55:
                    d6:ee:c5:4c:9c:55:6d:ea:4f:7b:2d:7c:4a:ed:50:
                    ba:34:b4:13:67:8c:a1:98:3a:4b:9e:7e:0c:19:e7:
                    97:91:84:59:9f:3b:bb:b3:78:d7:00:2a:a7:11:67:
                    12:8e:a7:07:ca:ec:78:b2:8b:13:3e:e0:2f:b7:eb:
                    8f:e9:68:f5:09:01:ea:c2:73:fb:c8:6d:73:9d:da:
                    87:67:c5:db:78:74:db:99:79:9c:ba:36:83:06:e8:
                    63:c0:56:32:08:70:20:4f:26:39:cd:b2:64:23:14:
                    f4:37:22:b9:07:c7:46:66:08:98:66:ed:c0:7d:a4:
                    30:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:04:55:EC:03:E1:34:4A:3D:37:F2:CD:95:1C:E4:16:2B:A5:A4:08
            X509v3 Authority Key Identifier:
                keyid:C3:89:A7:A9:38:C8:09:69:CD:8A:A4:2F:6D:CD:AA:BD:9E:5C:EB:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/589yA5PVP2ZX7F1doCodSBsPRvP18nd6uHXNJGE3WARc/0/C389A7A938C80969CD8AA42F6DCDAABD9E5CEBDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C389A7A938C80969CD8AA42F6DCDAABD9E5CEBDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/589yA5PVP2ZX7F1doCodSBsPRvP18nd6uHXNJGE3WARc/0/323830343a373830303a3a2f33332d3333203d3e20323731323134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7800::/33

    Signature Algorithm: sha256WithRSAEncryption
         67:0a:08:be:3b:8d:3f:17:22:e3:df:b9:9c:62:34:9d:19:a4:
         8b:fe:d7:82:a2:30:0c:f1:65:c1:a9:75:b2:be:d2:ac:b3:60:
         49:7b:f6:88:be:04:2c:18:fd:61:5f:0b:77:fe:99:ea:03:1a:
         a4:ff:80:1a:1a:1f:75:e9:3c:1f:f3:c5:3e:ad:8f:2b:03:42:
         d0:66:db:8c:4a:43:f5:fc:b6:a9:ef:44:a4:49:7d:c7:ce:9d:
         32:e4:ba:53:61:cb:5a:e6:05:9a:c9:83:16:1f:5a:6a:20:90:
         ff:04:de:88:d1:18:52:93:75:fd:15:f2:17:72:2c:88:14:24:
         fa:a1:fc:dc:8d:e8:e9:a2:91:03:dc:9c:65:d9:4c:78:de:f3:
         03:cc:b7:9b:8a:08:3d:06:e7:bb:a9:60:1f:cd:83:5b:9d:08:
         af:07:f4:9e:64:cd:8d:35:0e:86:fb:70:3e:09:8b:08:37:2b:
         a3:a2:6c:df:e0:24:89:d0:a1:85:30:de:f4:39:74:a6:00:c0:
         b6:30:eb:ff:4e:ad:25:03:c6:11:33:b4:6f:80:b0:30:6d:68:
         57:a3:2c:3d:d7:72:90:99:9d:0b:30:a4:32:35:f1:bd:a5:55:
         c3:0e:1c:2c:7d:e0:6d:f1:88:45:f8:a1:6b:e1:b9:bc:c9:a4:
         94:cc:d8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org