Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/323830343a333363633a3a2f33322d313238203d3e203238363536.roa
File:                     323830343a333363633a3a2f33322d313238203d3e203238363536.roa (raw, json)
Hash identifier:          ZAHCXDPk4R8C92F1fAbpYmKqLLeqCZuJI+Zwf1n1l84=
Subject key identifier:   40:0E:95:EF:B9:4D:D8:A6:B2:8F:FB:4E:09:11:72:0A:72:9D:2A:02
Certificate issuer:       /CN=4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF
Certificate serial:       2521D2E0B553288F6BFABE45985F6C88DC71A1DA
Authority key identifier: 4C:DD:B0:C2:29:BC:D8:3E:F9:BF:28:32:1F:0A:D9:66:E0:19:B5:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/323830343a333363633a3a2f33322d313238203d3e203238363536.roa
Signing time:             Mon 27 Mar 2023 17:40:33 +0000
ROA not before:           Mon 27 Mar 2023 17:35:33 +0000
ROA not after:            Mon 25 Mar 2024 17:40:33 +0000
asID:                     28656
IP address blocks:        2804:33cc::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:21:d2:e0:b5:53:28:8f:6b:fa:be:45:98:5f:6c:88:dc:71:a1:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF
        Validity
            Not Before: Mar 27 17:35:33 2023 GMT
            Not After : Mar 25 17:40:33 2024 GMT
        Subject: CN=400E95EFB94DD8A6B28FFB4E0911720A729D2A02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c4:69:e9:6a:f2:5e:48:c1:06:b5:72:80:e4:
                    53:63:6e:3a:3a:b8:d1:c5:9e:de:95:be:52:b1:36:
                    42:8b:52:ec:86:1b:da:36:17:c7:1f:ad:a6:4d:b3:
                    43:7c:87:08:58:9b:b1:44:5b:6b:1c:51:77:ef:02:
                    97:e8:6f:3b:7e:5a:5f:6a:9d:4b:b1:54:ad:4a:23:
                    68:0c:2d:76:44:20:06:a7:ac:5e:87:cf:8e:42:0d:
                    58:c6:10:c6:d0:d6:5d:6a:dd:34:2d:bf:59:66:f2:
                    4f:3e:a7:10:00:65:9d:58:0f:ac:c7:b6:75:86:b0:
                    b1:78:6e:e5:20:58:eb:91:36:91:b7:96:ce:f5:75:
                    16:d6:65:d0:7a:ce:3a:c3:e7:e8:5b:5b:0c:4d:8a:
                    c6:32:12:05:f6:c2:64:16:32:e7:35:d2:d1:2c:d3:
                    4a:80:1f:66:37:8f:96:bb:6a:01:c7:12:52:47:df:
                    36:93:cc:f6:f7:79:76:b2:c1:de:af:c9:92:9b:aa:
                    bd:58:c3:64:99:5b:20:c4:e1:dd:dc:f2:fd:23:d4:
                    bc:3c:dd:df:3b:3a:c9:27:57:35:63:71:22:22:5b:
                    d6:bd:37:4e:ca:e2:13:67:27:27:0c:4d:46:1f:ca:
                    28:6d:62:71:66:07:2f:5c:cf:40:28:90:36:62:a5:
                    3f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:0E:95:EF:B9:4D:D8:A6:B2:8F:FB:4E:09:11:72:0A:72:9D:2A:02
            X509v3 Authority Key Identifier:
                keyid:4C:DD:B0:C2:29:BC:D8:3E:F9:BF:28:32:1F:0A:D9:66:E0:19:B5:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/323830343a333363633a3a2f33322d313238203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:ee:74:4c:cc:bf:b8:30:94:63:68:66:30:1b:82:32:2b:94:
         f7:92:c7:89:c0:da:94:a9:99:a8:04:4b:10:e7:46:7e:c2:78:
         0c:49:69:84:c9:e9:82:0e:70:a4:44:9f:87:e5:da:3b:42:d3:
         9d:6b:1e:d6:61:11:8f:9d:46:da:61:77:2a:db:74:61:7d:7e:
         57:1f:b0:cc:4d:84:b6:6a:45:45:4a:56:6f:14:e2:48:e3:73:
         eb:3c:3f:ff:09:54:e5:81:48:92:ab:b9:9f:81:05:3a:92:d2:
         f6:54:41:96:9c:53:70:52:9b:a1:b2:6c:f3:28:b2:05:3c:87:
         0f:8d:c2:0b:a0:a5:a7:16:ac:4c:12:5a:1a:7f:d1:9e:07:b7:
         af:31:35:f1:04:39:21:bf:4c:65:95:84:36:89:1f:8d:c4:cc:
         30:3d:65:64:fd:47:12:be:a7:56:64:cd:f3:57:ae:31:0b:16:
         cc:fb:72:c5:cc:68:72:ea:0c:f5:df:64:a1:d4:64:ac:e1:f1:
         28:f2:e2:66:c4:13:c0:3c:e8:6a:89:22:5d:6a:8f:c6:ae:18:
         e8:2f:2e:0c:48:e9:be:35:80:65:0b:bd:91:47:56:16:9e:be:
         34:f7:15:09:59:7e:c9:0a:c3:d1:6a:db:73:d5:d7:38:95:c4:
         2e:f6:70:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org