Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/323830343a373934343a3130303a3a2f34302d3430203d3e203238363536.roa
File:                     323830343a373934343a3130303a3a2f34302d3430203d3e203238363536.roa (raw, json)
Hash identifier:          xS08B5eg0OpM3yBK8HZzSd/wd+OK62HIbbfKtu//nSE=
Subject key identifier:   52:BB:45:24:FB:FF:39:EF:63:98:B5:53:E5:FF:64:EF:57:12:E4:79
Certificate issuer:       /CN=4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF
Certificate serial:       1DEA943A43984D0E963E87F885932C05B5DC3BC6
Authority key identifier: 4C:DD:B0:C2:29:BC:D8:3E:F9:BF:28:32:1F:0A:D9:66:E0:19:B5:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/323830343a373934343a3130303a3a2f34302d3430203d3e203238363536.roa
Signing time:             Sat 01 Apr 2023 21:38:35 +0000
ROA not before:           Sat 01 Apr 2023 21:33:35 +0000
ROA not after:            Sat 30 Mar 2024 21:38:35 +0000
asID:                     28656
IP address blocks:        2804:7944:100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ea:94:3a:43:98:4d:0e:96:3e:87:f8:85:93:2c:05:b5:dc:3b:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF
        Validity
            Not Before: Apr  1 21:33:35 2023 GMT
            Not After : Mar 30 21:38:35 2024 GMT
        Subject: CN=52BB4524FBFF39EF6398B553E5FF64EF5712E479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e4:76:86:c5:35:7a:ab:2c:0c:44:52:cd:44:
                    f4:8e:95:0d:a5:e1:b5:c7:de:1f:5a:14:10:b0:d7:
                    e1:45:48:08:54:06:82:6e:4f:10:d0:f8:42:1a:12:
                    00:f8:03:8c:e8:4e:25:a2:79:7b:5b:61:4c:e9:00:
                    2f:f5:8c:ed:5d:47:45:b9:81:e4:90:34:1d:81:d7:
                    cf:ea:95:90:1b:97:d6:27:b2:58:ac:ac:9f:9b:f8:
                    53:8f:68:53:31:e1:03:c8:73:7a:6f:0e:f0:b2:26:
                    e8:56:6b:be:0c:15:26:2b:63:1b:b8:3f:c0:a9:1c:
                    8f:43:75:45:06:60:09:06:9e:4b:fd:87:71:1f:e0:
                    ff:ac:3a:7b:12:2f:68:65:77:cb:0e:86:c1:f8:55:
                    d8:05:ed:ff:cc:ad:24:a1:6c:99:bb:e4:fa:e1:e7:
                    f6:a8:18:4a:e8:92:0f:b8:89:ae:fd:ce:98:4c:e3:
                    5a:32:b7:0a:8f:c0:29:a8:49:3b:5c:a8:66:38:cd:
                    ae:3b:31:a6:6c:d5:49:7d:03:af:e6:75:eb:f0:86:
                    b5:7a:10:26:46:93:11:34:4c:c5:72:ee:95:27:de:
                    76:0e:b5:ee:99:55:73:15:6f:8a:8a:a4:2d:2c:c6:
                    03:ea:0d:8b:f3:07:71:88:f0:9b:fa:d4:e0:f3:82:
                    c9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BB:45:24:FB:FF:39:EF:63:98:B5:53:E5:FF:64:EF:57:12:E4:79
            X509v3 Authority Key Identifier:
                keyid:4C:DD:B0:C2:29:BC:D8:3E:F9:BF:28:32:1F:0A:D9:66:E0:19:B5:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/323830343a373934343a3130303a3a2f34302d3430203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7944:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         53:9a:b8:04:3a:b1:74:4e:1e:c8:3b:7f:17:47:70:66:e1:44:
         67:51:1b:db:cc:ef:93:a7:e4:0f:48:cf:82:94:70:bc:fa:84:
         4c:66:68:ca:73:c1:38:58:b9:a1:fa:9c:9b:55:a5:fc:13:79:
         b3:8b:d2:d6:6d:c5:89:bb:8f:a7:fa:ab:80:6f:b6:9c:0a:7f:
         5e:d8:63:da:16:ba:0d:b9:fc:98:bd:99:c5:ed:b7:a0:9b:95:
         78:56:29:8b:4e:fa:8f:f9:f0:d8:15:d3:2f:d5:03:75:3c:62:
         9e:79:05:0e:ab:1d:51:d0:d0:b9:6d:0f:e7:81:21:c3:41:cf:
         d5:c8:6f:53:92:44:a8:5c:29:c1:36:40:cc:d8:0c:9d:e5:28:
         a2:da:39:79:e6:0a:15:d4:7a:8b:bc:1b:08:94:d6:95:ad:63:
         ee:0b:c6:15:19:4d:52:ee:6d:29:a6:09:63:aa:10:62:d8:be:
         d4:e0:43:40:31:76:fb:3e:7c:1b:e2:ba:e4:27:db:5c:30:9d:
         28:b7:e8:38:42:b9:20:ac:2b:bc:c3:df:fc:68:95:69:1b:5e:
         da:49:11:38:58:5b:8c:da:ad:18:6e:5c:ea:03:6e:a1:73:16:
         10:fc:a5:42:99:ed:b4:81:39:47:e0:e4:02:49:50:4e:ac:09:
         cc:6f:b7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org