Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/323830343a373934343a3a2f33322d3332203d3e20323731323935.roa
File:                     323830343a373934343a3a2f33322d3332203d3e20323731323935.roa (raw, json)
Hash identifier:          llOLKE6EETTS4EkEIoQE0I3sVt++XDV5/rfy3MXSxJE=
Subject key identifier:   B5:0B:8C:E1:8C:CD:72:0E:A8:FD:2F:D1:6A:10:96:BA:51:EC:65:F2
Certificate issuer:       /CN=6BB28979534152D56CDB8941822004B21C044476
Certificate serial:       3E1974D49ED7B3EA122DFA61EC2D566A2BABEBAD
Authority key identifier: 6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/323830343a373934343a3a2f33322d3332203d3e20323731323935.roa
Signing time:             Sun 19 Mar 2023 13:28:18 +0000
ROA not before:           Sun 19 Mar 2023 13:23:18 +0000
ROA not after:            Sun 17 Mar 2024 13:28:18 +0000
asID:                     271295
IP address blocks:        2804:7944::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:19:74:d4:9e:d7:b3:ea:12:2d:fa:61:ec:2d:56:6a:2b:ab:eb:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BB28979534152D56CDB8941822004B21C044476
        Validity
            Not Before: Mar 19 13:23:18 2023 GMT
            Not After : Mar 17 13:28:18 2024 GMT
        Subject: CN=B50B8CE18CCD720EA8FD2FD16A1096BA51EC65F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:02:a3:11:2d:f1:0f:53:1b:96:c0:42:b3:fb:
                    2a:88:ef:27:63:f3:e0:da:2e:80:c7:bd:3a:bf:2f:
                    14:82:c3:3e:ba:f9:3f:ce:2f:b7:04:64:97:92:3f:
                    8a:05:e7:11:32:07:9c:62:53:cd:94:68:53:b4:ec:
                    5d:03:27:6e:1c:4d:89:c2:24:c5:81:95:77:20:43:
                    bd:26:2b:39:e5:52:b4:c0:ac:de:94:24:73:79:c0:
                    12:7c:aa:1c:37:56:30:3c:23:01:58:1a:e5:c8:e1:
                    6a:c1:d9:18:0b:d0:d3:54:1d:8a:ab:bd:52:aa:fa:
                    64:9d:f7:e4:bd:c6:b2:67:37:20:55:65:0c:7e:74:
                    b9:1e:7c:95:35:12:ea:b2:78:94:d3:ac:23:0f:0a:
                    3e:c6:c7:2e:d8:aa:5a:c5:bb:08:95:d8:60:df:a1:
                    3b:e3:20:ac:b8:cc:bc:6b:b9:d9:b6:91:8b:75:49:
                    7e:0f:73:37:cc:fa:af:79:36:df:9b:e9:c0:b5:f1:
                    56:cc:9f:1b:cb:53:7c:ce:71:90:d9:37:89:44:80:
                    5a:a0:3d:51:24:62:a4:db:6d:f3:78:1e:a9:db:93:
                    95:49:9c:76:ae:fe:41:ba:65:c7:27:40:04:3b:fb:
                    46:9c:b6:7f:dd:19:47:73:14:96:7d:43:dc:cc:bc:
                    15:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:0B:8C:E1:8C:CD:72:0E:A8:FD:2F:D1:6A:10:96:BA:51:EC:65:F2
            X509v3 Authority Key Identifier:
                keyid:6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/6BB28979534152D56CDB8941822004B21C044476.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/323830343a373934343a3a2f33322d3332203d3e20323731323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7944::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:7f:8a:ab:74:8f:8e:e9:e4:df:de:db:e0:da:1a:0c:04:ba:
         cd:7e:1e:0d:41:dc:43:76:50:f3:e4:4a:ff:a2:39:2c:44:ea:
         6e:61:8c:78:5b:45:1f:93:e1:90:d8:1a:e1:05:24:49:92:07:
         f0:ff:06:0d:4e:e0:a3:f0:7d:6a:ed:4b:48:8d:a6:97:fa:99:
         47:5e:d3:f3:79:d4:ba:4a:d8:74:60:0d:b6:39:cc:81:31:53:
         46:e4:66:85:00:4a:ba:8c:61:25:30:b8:47:d6:55:06:7b:dc:
         2a:73:cc:05:e4:92:fd:5b:90:f1:0b:39:0a:75:fc:41:3d:35:
         8e:41:2d:d3:93:e2:dc:d7:77:c4:c1:55:02:bd:93:9c:69:31:
         e2:d5:28:82:e3:d2:6d:0b:51:6f:c6:f7:be:c7:38:1e:c8:35:
         62:2d:59:53:3c:7d:69:9f:a2:70:e3:fa:b0:d3:0e:5b:b6:99:
         70:45:bd:3d:2f:90:42:3a:03:fd:fd:8a:ce:e9:44:0b:b4:4a:
         06:4d:68:e5:8d:3d:cb:ac:e6:d9:7f:30:1e:02:96:90:fd:2e:
         44:40:20:d4:f2:31:b7:85:06:a3:47:95:71:7e:9e:8f:42:0b:
         23:85:fa:e0:bc:e5:c6:d4:a4:5c:d8:d1:d1:2b:39:f8:47:f2:
         4f:85:c6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org