Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/0/323830343a313964303a3a2f33332d3333203d3e203631383230.roa
File:                     323830343a313964303a3a2f33332d3333203d3e203631383230.roa (raw, json)
Hash identifier:          z9UAPRR2kI2PSt3q3ze1klBgcb2DuHy0sAcLXkeBFPo=
Subject key identifier:   4C:5D:70:1A:12:B0:BC:78:4E:E4:2F:F1:D8:01:DD:19:67:61:05:63
Certificate issuer:       /CN=8E53055106EEDE2F0DFBF8E2D72E71F1E4EE2C11
Certificate serial:       0238FB2C62241FB64ECB69A4E2A1F4A33DEE12EF
Authority key identifier: 8E:53:05:51:06:EE:DE:2F:0D:FB:F8:E2:D7:2E:71:F1:E4:EE:2C:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E53055106EEDE2F0DFBF8E2D72E71F1E4EE2C11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/0/323830343a313964303a3a2f33332d3333203d3e203631383230.roa
Signing time:             Thu 29 Feb 2024 17:28:01 +0000
ROA not before:           Thu 29 Feb 2024 17:23:01 +0000
ROA not after:            Thu 27 Feb 2025 17:28:01 +0000
asID:                     61820
IP address blocks:        2804:19d0::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:38:fb:2c:62:24:1f:b6:4e:cb:69:a4:e2:a1:f4:a3:3d:ee:12:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E53055106EEDE2F0DFBF8E2D72E71F1E4EE2C11
        Validity
            Not Before: Feb 29 17:23:01 2024 GMT
            Not After : Feb 27 17:28:01 2025 GMT
        Subject: CN=4C5D701A12B0BC784EE42FF1D801DD1967610563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cf:2b:c8:66:3b:e5:af:85:0f:f8:b7:ba:00:
                    cf:a3:28:de:d8:6b:59:48:88:56:d7:36:28:6b:c5:
                    c8:59:0d:b2:ce:32:12:02:98:e7:57:e3:38:e4:70:
                    64:a5:9a:5e:71:0c:5a:d3:a8:ac:44:a0:28:cd:7c:
                    b6:7b:8d:31:70:d4:dd:92:7d:38:10:4c:5e:8e:56:
                    d6:b9:6a:7c:e1:e5:45:45:60:a7:62:ff:72:a9:f1:
                    b1:f0:ac:48:e0:00:5b:06:43:2c:34:9d:cd:e0:ef:
                    23:ff:78:75:01:0f:08:12:07:b1:a4:54:69:07:32:
                    cd:95:9a:a9:b4:d2:e7:8d:dd:12:f0:27:60:27:68:
                    d7:13:50:95:82:35:1f:3d:7d:a5:78:f8:33:7d:b2:
                    d0:10:16:3b:2a:d5:ba:90:08:f1:33:67:0c:40:38:
                    01:bb:f7:74:6b:6e:b5:68:4b:25:35:5e:a2:66:1f:
                    b5:ab:9b:ac:42:67:d3:34:c7:a9:8b:05:be:a7:22:
                    d0:64:ee:c8:90:d8:9c:20:72:ac:26:ad:d8:7c:8f:
                    de:40:b3:f3:67:0c:f4:6a:8b:04:21:3d:fc:36:ee:
                    62:9d:22:b5:02:20:20:f0:64:1a:d3:22:e4:d9:a8:
                    68:2a:73:53:26:00:00:96:4d:bb:08:af:dd:7c:8b:
                    0e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:5D:70:1A:12:B0:BC:78:4E:E4:2F:F1:D8:01:DD:19:67:61:05:63
            X509v3 Authority Key Identifier:
                keyid:8E:53:05:51:06:EE:DE:2F:0D:FB:F8:E2:D7:2E:71:F1:E4:EE:2C:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/0/8E53055106EEDE2F0DFBF8E2D72E71F1E4EE2C11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E53055106EEDE2F0DFBF8E2D72E71F1E4EE2C11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/0/323830343a313964303a3a2f33332d3333203d3e203631383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:19d0::/33

    Signature Algorithm: sha256WithRSAEncryption
         9c:b9:be:b8:74:32:e0:69:a1:78:4a:e2:99:72:60:4d:88:33:
         2b:e2:27:82:0c:0e:7b:0e:18:25:4e:06:04:3d:26:a1:e3:7b:
         47:af:05:13:7b:4a:05:69:48:59:4c:cd:dd:04:c7:e5:74:42:
         20:e4:08:6e:4a:28:ed:d3:8b:5a:42:20:38:7d:35:15:ee:cb:
         ee:dd:f0:43:06:53:3a:4b:da:59:76:11:77:6a:1f:cd:ad:d9:
         56:7a:21:c7:33:b5:ec:37:f7:c8:a7:fc:07:d8:82:09:d2:95:
         fe:40:b4:dd:b7:7f:a9:a3:09:83:ca:20:b1:31:1a:17:df:82:
         85:fb:03:e9:0e:0a:a7:46:39:63:cb:3b:ce:d4:7a:fa:d8:db:
         76:e2:81:5a:cd:77:09:50:d0:23:35:2c:d6:1e:ae:05:d9:78:
         99:2a:cd:7d:e4:87:4d:d7:c8:97:77:42:1a:8c:66:70:ea:28:
         f2:60:be:b3:c8:a4:e7:56:74:22:a8:77:14:e2:78:94:56:86:
         5a:18:2e:ed:1a:a9:a6:40:f6:c8:d9:92:9e:92:89:21:1f:ef:
         75:56:41:72:0d:d5:2e:67:d0:7a:22:fb:d2:86:e1:9a:bb:11:
         13:0b:36:4f:9d:fe:de:a4:fc:b8:29:9b:77:55:74:6f:f7:ca:
         e1:19:af:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org