Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DWD9LfuR9UcYi6hYx9XgGXYAEFWgoyugUYW73BhAYVy/0/323830343a366664633a3a2f33322d3634203d3e20323730363839.roa
File:                     323830343a366664633a3a2f33322d3634203d3e20323730363839.roa (raw, json)
Hash identifier:          +dRlqRbY6O7cauOYkyYaDvFJ1iwqlvgJIhBHiw4WNGc=
Subject key identifier:   EB:AD:4C:44:CA:4E:0C:05:5A:E3:E1:50:A2:7A:1C:A2:DF:D1:AE:65
Certificate issuer:       /CN=4211525F8C1A24BF6EA600936B62F70A6142F334
Certificate serial:       533E50F23F9290BAFD4D2F0B553A4C0B3B26163C
Authority key identifier: 42:11:52:5F:8C:1A:24:BF:6E:A6:00:93:6B:62:F7:0A:61:42:F3:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4211525F8C1A24BF6EA600936B62F70A6142F334.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DWD9LfuR9UcYi6hYx9XgGXYAEFWgoyugUYW73BhAYVy/0/323830343a366664633a3a2f33322d3634203d3e20323730363839.roa
Signing time:             Wed 11 Jan 2023 20:00:00 +0000
ROA not before:           Wed 11 Jan 2023 19:55:00 +0000
ROA not after:            Thu 11 Jan 2024 20:00:00 +0000
asID:                     270689
IP address blocks:        2804:6fdc::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:3e:50:f2:3f:92:90:ba:fd:4d:2f:0b:55:3a:4c:0b:3b:26:16:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4211525F8C1A24BF6EA600936B62F70A6142F334
        Validity
            Not Before: Jan 11 19:55:00 2023 GMT
            Not After : Jan 11 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:48:c3:f4:cc:4c:d0:53:29:57:20:fe:6d:60:
                    16:61:13:9d:f5:4b:f3:5c:65:af:a0:d2:19:d6:06:
                    dd:e3:91:6e:0e:c9:6d:e5:38:93:4c:ad:72:62:05:
                    eb:64:21:d5:a4:42:88:e4:5e:eb:8f:8d:c2:e0:b1:
                    6c:1d:fe:12:56:10:d9:a0:a5:5a:5a:8d:8c:79:2a:
                    3e:34:2b:2c:e9:9c:2c:26:5b:42:de:e7:aa:4d:96:
                    bf:91:0d:7d:7c:ff:06:21:3b:91:f4:d4:8d:cd:8c:
                    91:e1:63:f9:ba:20:13:cd:29:15:98:28:a3:49:e9:
                    42:88:14:19:9c:a0:9a:f2:be:79:d9:d5:05:ef:57:
                    16:a5:f6:d8:7d:f5:80:dd:6b:63:31:88:31:3d:a7:
                    62:54:04:fb:dc:8d:20:66:9f:6e:04:2b:2f:b9:c4:
                    26:ab:ee:32:49:48:b2:84:11:9d:85:74:58:f0:01:
                    57:e3:2c:85:80:e3:ba:4c:95:65:3a:79:44:b7:ed:
                    9e:92:4a:0b:1b:0e:77:2b:e2:3d:8e:23:ab:86:e3:
                    28:bf:60:0b:03:a3:5a:21:45:55:e8:d0:7a:04:30:
                    12:50:f7:bc:64:4e:47:97:d1:53:ee:a0:29:52:93:
                    c8:cf:3a:91:46:f7:f5:fa:5f:86:28:88:b7:f0:4c:
                    17:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AD:4C:44:CA:4E:0C:05:5A:E3:E1:50:A2:7A:1C:A2:DF:D1:AE:65
            X509v3 Authority Key Identifier:
                keyid:42:11:52:5F:8C:1A:24:BF:6E:A6:00:93:6B:62:F7:0A:61:42:F3:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DWD9LfuR9UcYi6hYx9XgGXYAEFWgoyugUYW73BhAYVy/0/4211525F8C1A24BF6EA600936B62F70A6142F334.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4211525F8C1A24BF6EA600936B62F70A6142F334.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DWD9LfuR9UcYi6hYx9XgGXYAEFWgoyugUYW73BhAYVy/0/323830343a366664633a3a2f33322d3634203d3e20323730363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6fdc::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:3b:b9:9d:70:a2:28:59:88:f5:eb:9a:7b:6d:d1:b0:03:6d:
         0a:68:b2:1b:6f:f8:ab:49:23:38:c9:12:fd:dc:a9:21:3b:cb:
         bc:3e:ad:ed:49:63:99:67:07:48:ef:62:a9:79:22:0f:fc:3d:
         29:71:52:db:f5:d3:9d:b8:6d:49:c3:1c:44:6c:73:a7:96:a8:
         ae:57:df:92:c2:d7:d6:b4:58:67:9e:64:0a:d3:92:80:10:96:
         05:3a:33:40:62:04:7b:57:d2:b7:db:63:e6:17:22:c6:d6:2c:
         09:d5:c1:cf:1c:79:5a:0e:f7:d4:7e:f2:09:4f:ec:eb:aa:ae:
         1e:89:b8:08:19:09:83:d0:1d:47:aa:9c:12:e8:71:a4:f8:bc:
         df:aa:b8:8d:98:c2:d4:94:18:36:72:d6:83:72:90:d9:99:a5:
         0f:93:c4:ea:16:37:90:cb:ce:b7:01:df:38:f1:a9:01:23:2a:
         57:9b:14:e1:46:bf:a7:20:a3:19:91:a0:1c:5f:f7:cf:5b:26:
         b7:06:5c:39:8e:aa:7a:4e:ec:f2:04:e3:67:af:62:b0:36:d7:
         52:b3:4d:43:9f:58:88:79:87:96:25:b7:7f:a6:a5:12:b6:82:
         4a:5c:12:e3:19:fe:44:93:fd:8e:c8:d6:ac:96:13:c3:c2:94:
         9e:15:65:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org