Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/323830343a333363633a3a2f33322d3430203d3e203238363536.roa
File:                     323830343a333363633a3a2f33322d3430203d3e203238363536.roa (raw, json)
Hash identifier:          TQtPjl4xHGM8W6W7gHtiW2PtLe9vY5LBLG2oP25gNeA=
Subject key identifier:   56:FB:0B:A1:B2:76:18:AE:D0:70:73:EB:1D:FC:46:AC:36:0E:D2:6D
Certificate issuer:       /CN=7E3E133E801DA73CE14E16E83124A29A9EE74F22
Certificate serial:       100DEB5C28DFDEB990EBF1F5EA3DA025A72E974A
Authority key identifier: 7E:3E:13:3E:80:1D:A7:3C:E1:4E:16:E8:31:24:A2:9A:9E:E7:4F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E3E133E801DA73CE14E16E83124A29A9EE74F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/323830343a333363633a3a2f33322d3430203d3e203238363536.roa
Signing time:             Mon 08 May 2023 11:48:51 +0000
ROA not before:           Mon 08 May 2023 11:43:51 +0000
ROA not after:            Mon 06 May 2024 11:48:51 +0000
asID:                     28656
IP address blocks:        2804:33cc::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:0d:eb:5c:28:df:de:b9:90:eb:f1:f5:ea:3d:a0:25:a7:2e:97:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E3E133E801DA73CE14E16E83124A29A9EE74F22
        Validity
            Not Before: May  8 11:43:51 2023 GMT
            Not After : May  6 11:48:51 2024 GMT
        Subject: CN=56FB0BA1B27618AED07073EB1DFC46AC360ED26D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:93:64:23:a2:e4:e8:bc:5a:9d:6b:63:3e:c5:
                    0d:3a:2c:bf:2e:85:0e:01:14:f5:53:12:6a:c6:d5:
                    52:7f:f7:39:95:7a:b2:80:d7:f8:45:60:12:f9:3f:
                    c9:af:e3:82:49:3e:84:fc:5c:0c:44:2f:02:fd:83:
                    51:bd:8c:ba:60:11:3a:39:20:93:3f:7f:12:9e:f6:
                    f5:41:1c:90:c9:26:c3:0f:7a:92:aa:94:dc:d8:9a:
                    77:58:09:63:e0:5d:69:de:56:b4:19:fa:45:b8:fd:
                    2b:4d:5a:ef:80:f5:15:0a:1e:8a:13:ec:af:ae:a5:
                    ee:be:48:c6:30:84:49:5c:13:b1:b9:c7:1e:2a:37:
                    5a:32:95:b4:62:1e:be:f9:74:ee:1c:29:2c:5e:d2:
                    1b:3c:64:50:61:55:9f:5a:b4:47:62:2a:b9:c5:2f:
                    ac:a2:27:18:c0:66:08:22:f0:d5:4b:ae:f8:72:3a:
                    74:5d:1e:b4:3d:c5:31:a0:26:76:71:bb:0e:c8:02:
                    06:c7:e5:e1:25:f8:01:93:58:50:a0:e9:ec:6e:ae:
                    10:4c:b0:64:62:09:c5:4a:cc:80:36:25:92:64:9d:
                    d1:3f:1e:e6:21:9c:23:09:9f:5a:b7:0f:c9:65:7c:
                    28:c2:da:46:04:62:46:58:5e:a5:b4:ac:b0:8f:e0:
                    74:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:FB:0B:A1:B2:76:18:AE:D0:70:73:EB:1D:FC:46:AC:36:0E:D2:6D
            X509v3 Authority Key Identifier:
                keyid:7E:3E:13:3E:80:1D:A7:3C:E1:4E:16:E8:31:24:A2:9A:9E:E7:4F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/7E3E133E801DA73CE14E16E83124A29A9EE74F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E3E133E801DA73CE14E16E83124A29A9EE74F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/323830343a333363633a3a2f33322d3430203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:02:15:d2:f7:7f:05:69:b9:95:9b:01:38:3c:be:47:c5:76:
         bf:68:12:6a:9c:8a:aa:a8:96:a9:7c:7d:69:0d:a3:e8:b9:69:
         c9:c6:77:6e:41:44:2b:4c:46:45:ae:e3:aa:fc:bb:6c:51:85:
         9d:dd:80:13:74:f7:77:86:b7:7b:c9:69:d0:11:95:b9:91:ea:
         87:6c:59:c5:e0:47:18:8a:86:d8:4f:ac:a0:55:6a:7d:00:2a:
         76:b4:15:98:f8:ad:02:28:cc:e7:c2:fd:7e:bb:7f:a0:31:d4:
         f4:00:c8:5c:7d:3d:22:10:f5:9f:3d:32:f3:60:e6:7f:93:a5:
         fc:b0:75:4f:fd:a2:3b:88:23:69:8d:60:ef:e0:50:f5:c9:a2:
         37:bf:ed:2d:29:7a:15:98:a8:5b:8d:74:82:b6:c2:2c:75:58:
         83:f3:33:8c:ce:5a:d5:12:94:23:2e:38:f5:b8:43:1b:49:eb:
         bf:56:bc:37:7e:75:06:31:48:d5:a5:a9:58:f5:1b:8e:59:4a:
         55:8b:1d:b8:07:b7:99:58:63:9b:84:65:bf:a6:9d:0e:a7:ee:
         9c:f4:89:77:54:62:70:cf:e0:9e:05:48:7f:4e:8c:f2:cd:08:
         77:06:17:5a:fe:24:06:8c:52:8d:06:f0:0c:5c:ab:6f:58:07:
         c0:6d:6c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org