Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/323830343a346263343a3a2f33322d3430203d3e20323637333238.roa
File:                     323830343a346263343a3a2f33322d3430203d3e20323637333238.roa (raw, json)
Hash identifier:          QXpu0s36EKjsVf9ycvIwTc3dyssKAKAmIOTp1fSCOes=
Subject key identifier:   D7:E8:00:94:67:29:D9:5A:AC:B4:F7:81:83:8A:3C:BF:97:09:CD:C6
Certificate issuer:       /CN=5302D22E25022C2AC70F9FFE36DEA4859889F443
Certificate serial:       5D81F188ACF13D348804A119FF894EEB5CB602F2
Authority key identifier: 53:02:D2:2E:25:02:2C:2A:C7:0F:9F:FE:36:DE:A4:85:98:89:F4:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5302D22E25022C2AC70F9FFE36DEA4859889F443.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/323830343a346263343a3a2f33322d3430203d3e20323637333238.roa
Signing time:             Wed 17 May 2023 16:47:51 +0000
ROA not before:           Wed 17 May 2023 16:42:51 +0000
ROA not after:            Wed 15 May 2024 16:47:51 +0000
asID:                     267328
IP address blocks:        2804:4bc4::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:81:f1:88:ac:f1:3d:34:88:04:a1:19:ff:89:4e:eb:5c:b6:02:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5302D22E25022C2AC70F9FFE36DEA4859889F443
        Validity
            Not Before: May 17 16:42:51 2023 GMT
            Not After : May 15 16:47:51 2024 GMT
        Subject: CN=D7E800946729D95AACB4F781838A3CBF9709CDC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7f:d5:78:02:e4:df:b8:84:86:2f:c4:ec:0a:
                    ae:32:27:4a:da:ff:cc:94:eb:43:bc:d8:f6:9e:a9:
                    45:05:df:f5:65:a3:89:60:dc:f2:d6:52:f0:28:3c:
                    d3:f9:58:08:b5:6a:b3:f0:4c:49:b7:02:92:2e:b6:
                    f7:2f:92:3c:5a:01:57:5b:4d:39:36:37:78:0f:d3:
                    34:14:75:ae:3c:3f:23:d2:90:78:b5:fb:f0:f4:ec:
                    7d:14:6d:87:d8:eb:91:c6:49:d1:3b:15:24:4f:49:
                    3a:d4:bb:4f:09:1f:86:d0:98:76:d7:58:ca:3d:43:
                    3c:e1:52:3e:7a:0d:85:f9:a0:89:7a:95:cb:02:45:
                    9a:dc:39:83:c3:c7:b3:da:36:fe:4b:f9:7d:7c:67:
                    8c:4e:c4:55:d5:51:ee:2a:8c:c7:de:4c:67:8e:7c:
                    e6:c3:93:85:c5:ea:78:5a:5b:31:e5:09:90:29:66:
                    6e:a8:e9:7b:06:cb:dc:00:28:35:8b:57:df:d9:58:
                    62:a3:e7:18:20:27:33:21:79:4b:a6:7a:9d:c5:81:
                    36:e1:65:ec:bf:06:95:63:85:bb:f6:9c:0e:9d:d7:
                    d3:a5:04:27:71:5d:e7:c0:ab:3b:7f:4c:bc:af:14:
                    ed:1d:6d:02:cb:b7:5c:06:76:ed:bc:52:6b:1d:09:
                    5c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E8:00:94:67:29:D9:5A:AC:B4:F7:81:83:8A:3C:BF:97:09:CD:C6
            X509v3 Authority Key Identifier:
                keyid:53:02:D2:2E:25:02:2C:2A:C7:0F:9F:FE:36:DE:A4:85:98:89:F4:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/5302D22E25022C2AC70F9FFE36DEA4859889F443.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5302D22E25022C2AC70F9FFE36DEA4859889F443.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/323830343a346263343a3a2f33322d3430203d3e20323637333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:d4:dc:ba:56:fb:ce:5f:18:05:01:35:e7:9a:c7:20:99:fb:
         d0:88:e0:56:e4:d6:9b:71:81:cc:d4:6d:b5:be:32:a8:72:93:
         06:e2:61:7a:5f:5a:14:70:fe:bc:31:b1:8f:a0:51:64:8c:4d:
         03:73:10:43:a7:ce:33:2f:4f:cb:a8:1d:b8:ac:f0:7b:9a:ae:
         96:61:bb:63:5a:03:09:08:90:74:71:71:dd:5a:94:ca:4f:58:
         bf:cd:06:aa:fb:2c:c4:6d:ff:43:95:0b:2d:b9:f5:5a:93:dc:
         3e:ad:2e:0e:c8:2f:04:5c:f7:96:93:7b:e0:13:46:ab:dd:b7:
         e6:45:12:78:91:e0:7e:d2:55:ff:ca:95:87:5e:35:9f:ac:9a:
         8c:4c:d6:b5:49:f1:58:7e:c4:6c:28:d9:f0:ae:10:e2:b1:5d:
         8e:7e:91:92:3f:15:32:b1:46:d6:e4:06:d3:f0:1f:cb:e8:12:
         f6:10:9d:63:6b:65:46:49:8b:92:ca:ed:9c:ff:1f:de:b0:50:
         1f:94:7e:22:df:32:e1:26:7e:b4:b0:00:e7:23:df:7f:42:8d:
         f7:69:98:d4:52:0a:62:13:31:b6:6c:07:be:22:24:64:94:9a:
         d9:06:98:d4:76:5b:47:92:05:e4:52:4c:55:37:e7:98:52:15:
         45:7c:15:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org