Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/323830343a346263343a3a2f33322d3332203d3e20323637333238.roa
File:                     323830343a346263343a3a2f33322d3332203d3e20323637333238.roa (raw, json)
Hash identifier:          4YoKvswi/kZLEX2oEERCQuU7Qg5NrOo2ef9+GdwTxX0=
Subject key identifier:   2F:48:9B:35:61:F3:83:E4:3A:DE:25:B6:7D:5E:B4:77:D1:BC:A7:5C
Certificate issuer:       /CN=5302D22E25022C2AC70F9FFE36DEA4859889F443
Certificate serial:       1FFCB1AFCB2334A076D7D900E3947A68B6D2C482
Authority key identifier: 53:02:D2:2E:25:02:2C:2A:C7:0F:9F:FE:36:DE:A4:85:98:89:F4:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5302D22E25022C2AC70F9FFE36DEA4859889F443.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/323830343a346263343a3a2f33322d3332203d3e20323637333238.roa
Signing time:             Wed 03 May 2023 19:01:55 +0000
ROA not before:           Wed 03 May 2023 18:56:55 +0000
ROA not after:            Wed 01 May 2024 19:01:55 +0000
asID:                     267328
IP address blocks:        2804:4bc4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:fc:b1:af:cb:23:34:a0:76:d7:d9:00:e3:94:7a:68:b6:d2:c4:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5302D22E25022C2AC70F9FFE36DEA4859889F443
        Validity
            Not Before: May  3 18:56:55 2023 GMT
            Not After : May  1 19:01:55 2024 GMT
        Subject: CN=2F489B3561F383E43ADE25B67D5EB477D1BCA75C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:25:0e:23:af:9d:6e:d6:21:4a:3b:5b:f8:b7:
                    24:84:63:3e:08:da:26:0c:f9:de:b0:4a:44:73:b7:
                    05:a5:16:8a:82:48:ef:53:f4:69:90:ea:66:ad:ed:
                    1f:20:d0:77:4c:3a:21:2a:d0:b4:36:20:21:6f:9d:
                    58:42:ed:0d:cb:ab:32:f2:1c:fe:ee:49:0f:d1:86:
                    39:7d:e5:86:bd:18:0e:f5:1e:1a:0a:8c:65:8a:b6:
                    66:f3:5f:b6:6f:72:f1:88:14:f0:ac:b3:1f:30:cf:
                    23:e4:67:7c:28:c1:5d:de:a7:8c:8e:45:b8:68:ed:
                    58:ad:7f:1e:70:52:2b:d4:a0:d7:d7:d2:c5:54:98:
                    74:7e:b3:ba:0c:fd:01:09:e1:db:ce:55:57:d6:d7:
                    28:6e:10:44:df:83:f7:17:2c:6a:6a:5a:20:4d:af:
                    23:61:b7:34:39:4b:7d:c8:80:90:ff:48:7a:f7:f2:
                    f9:9d:ae:93:39:92:17:de:c8:07:f7:e3:6c:8c:2a:
                    97:14:0c:ab:f6:a4:5a:05:be:06:c2:3e:45:8b:80:
                    86:d7:3d:d7:56:32:d0:5b:f1:b2:be:0b:ae:0c:d0:
                    93:30:67:6c:26:ba:f4:14:11:bc:29:fa:8b:02:ff:
                    4b:9c:df:e4:e9:1c:54:a5:9a:cd:b1:08:51:18:8d:
                    ec:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:48:9B:35:61:F3:83:E4:3A:DE:25:B6:7D:5E:B4:77:D1:BC:A7:5C
            X509v3 Authority Key Identifier:
                keyid:53:02:D2:2E:25:02:2C:2A:C7:0F:9F:FE:36:DE:A4:85:98:89:F4:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/5302D22E25022C2AC70F9FFE36DEA4859889F443.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5302D22E25022C2AC70F9FFE36DEA4859889F443.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/323830343a346263343a3a2f33322d3332203d3e20323637333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:fd:6a:dc:b4:ed:07:56:84:e0:c3:8d:ff:93:08:4c:c9:cd:
         ce:31:bc:44:8a:cd:8b:b7:88:86:4a:d2:c0:28:80:20:d7:4b:
         9a:4f:3a:cc:3d:00:5d:f7:aa:67:e4:59:d2:86:53:05:74:db:
         77:44:c6:97:7e:bb:0f:55:c3:da:2d:e6:fe:9b:a4:e7:2b:c3:
         e3:7b:73:82:14:3e:19:49:c0:41:b0:0a:b2:98:ba:ca:17:92:
         20:ec:80:cc:a6:1e:00:40:7c:3e:d5:ef:52:0b:cc:5a:88:b4:
         49:d6:7e:56:52:0e:ad:fe:e3:1c:42:dc:26:29:38:48:9f:40:
         3e:a6:cc:71:f3:ea:d6:3a:01:00:e5:26:30:f9:48:77:1a:0b:
         a0:a7:a6:cd:d6:66:07:b6:c4:e9:84:be:a7:1f:49:58:f5:70:
         f4:aa:e7:b4:a3:bb:b3:4e:36:3c:7c:b4:e7:b3:1d:92:16:07:
         5e:0a:c0:4b:9b:e7:3c:f2:0c:45:be:16:f3:33:94:ab:64:d5:
         e0:1a:2d:ec:b6:4a:70:c8:95:7e:4e:ab:8b:7a:03:09:89:8c:
         47:13:f8:00:fa:cd:72:9c:7a:47:7f:b2:59:2c:35:38:a3:b9:
         d8:6b:e6:38:03:e8:e2:91:54:a8:de:26:c3:a9:04:9a:35:fd:
         a2:dd:43:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org