Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/323830343a323139303a633030303a3a2f33342d3334203d3e20323634353632.roa
File:                     323830343a323139303a633030303a3a2f33342d3334203d3e20323634353632.roa (raw, json)
Hash identifier:          BvoSymCRGN9v81k4v8+rQuKjAZT+hT9aURlisL8aoNI=
Subject key identifier:   5B:8B:69:CD:42:64:D7:11:E6:C4:53:CD:3F:15:1A:9A:62:E8:53:A8
Certificate issuer:       /CN=B1FD414C315A51B2503A7D1B9FE2EADA575BB03E
Certificate serial:       2FB898F4F950DDDEE86A058E8413B8911FC90FDA
Authority key identifier: B1:FD:41:4C:31:5A:51:B2:50:3A:7D:1B:9F:E2:EA:DA:57:5B:B0:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1FD414C315A51B2503A7D1B9FE2EADA575BB03E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/323830343a323139303a633030303a3a2f33342d3334203d3e20323634353632.roa
Signing time:             Fri 05 May 2023 19:15:32 +0000
ROA not before:           Fri 05 May 2023 19:10:32 +0000
ROA not after:            Fri 03 May 2024 19:15:32 +0000
asID:                     264562
IP address blocks:        2804:2190:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:b8:98:f4:f9:50:dd:de:e8:6a:05:8e:84:13:b8:91:1f:c9:0f:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1FD414C315A51B2503A7D1B9FE2EADA575BB03E
        Validity
            Not Before: May  5 19:10:32 2023 GMT
            Not After : May  3 19:15:32 2024 GMT
        Subject: CN=5B8B69CD4264D711E6C453CD3F151A9A62E853A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7a:42:b5:9e:c9:a3:28:32:48:20:d1:c3:7a:
                    85:d9:74:31:ba:b6:09:95:5e:3a:e3:c6:3f:b5:12:
                    0d:ff:40:df:3b:bd:44:07:16:da:a0:03:85:5d:54:
                    ba:0f:ba:76:ec:58:59:32:ee:24:7d:1e:aa:47:18:
                    1b:fb:c4:a4:3d:3f:ab:9a:0d:e8:63:23:ff:70:ee:
                    eb:89:db:35:d0:d4:dc:fb:06:4e:2d:98:ec:15:27:
                    fd:23:21:9c:c8:ff:f2:44:b3:c0:44:53:b7:8e:f4:
                    79:5a:e6:e7:57:63:94:cb:f6:f9:81:b0:a8:e4:47:
                    4c:59:9c:83:53:43:40:7e:0c:03:c3:4a:2a:5d:77:
                    36:03:1d:80:09:d0:85:ae:aa:7c:24:b2:56:18:75:
                    69:74:4d:a8:04:84:1c:52:cf:b3:fb:9e:6b:96:79:
                    3a:de:8f:d2:6a:71:cb:4b:82:5f:22:8d:21:44:52:
                    81:81:a5:c8:9d:79:2c:2d:5c:e8:41:60:89:93:e5:
                    af:ba:04:5a:df:02:8b:a3:bc:22:2c:6c:46:b4:99:
                    5d:5e:1e:aa:ce:c2:e2:19:41:e1:d4:9d:bb:10:61:
                    a4:b6:34:ee:5f:68:7c:c3:8c:75:a0:1c:d9:3b:29:
                    35:91:68:18:28:d0:69:1b:86:1d:ee:ca:dc:53:a9:
                    6c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8B:69:CD:42:64:D7:11:E6:C4:53:CD:3F:15:1A:9A:62:E8:53:A8
            X509v3 Authority Key Identifier:
                keyid:B1:FD:41:4C:31:5A:51:B2:50:3A:7D:1B:9F:E2:EA:DA:57:5B:B0:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/B1FD414C315A51B2503A7D1B9FE2EADA575BB03E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1FD414C315A51B2503A7D1B9FE2EADA575BB03E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/323830343a323139303a633030303a3a2f33342d3334203d3e20323634353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2190:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8a:34:ce:bd:a4:45:c9:e2:98:71:ab:b5:32:05:5c:3c:7d:4d:
         16:ff:52:f6:7c:32:a8:d9:6b:64:82:ad:43:bf:ad:e8:71:d2:
         f2:8a:36:47:7c:f0:ce:a1:9b:e0:a4:f2:89:83:00:02:79:01:
         df:10:35:c8:b1:d2:48:b2:21:22:3b:d3:64:10:6f:61:92:0d:
         66:05:ab:0b:7c:52:34:ac:34:10:7d:32:0e:c9:69:d6:7a:ed:
         b2:2b:5b:08:0f:ee:ce:f8:f5:9b:f2:8e:43:e4:6c:e4:61:25:
         7a:2d:b6:4e:7e:af:12:f5:85:f7:c2:06:72:1b:42:ae:2f:11:
         d1:67:4e:09:ae:79:a1:80:b3:94:06:7e:91:0c:15:73:fa:dc:
         24:32:f6:59:89:4e:ef:51:55:96:7d:f0:7d:8d:0c:e3:71:3e:
         d3:20:44:9b:98:5c:08:d8:50:59:fc:8c:96:16:15:6a:24:f2:
         4c:39:d6:c9:9d:5e:7d:7a:30:52:f1:d8:68:ed:1d:73:2c:e5:
         32:7b:19:f2:05:1e:6c:fd:74:e2:21:19:bd:27:38:64:f1:27:
         1f:ac:6d:2a:00:1e:d5:a6:ae:cd:6c:e9:6f:d4:8b:8b:0e:05:
         82:28:04:d1:89:5a:56:b1:c1:b0:e5:c1:81:c4:4f:3d:53:8f:
         76:18:20:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org