Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5MunSkbtD1tKo57W3ryJKjvSbJGpi36cHJ4nL25ebhz9/0/323830343a383535633a3a2f33322d3438203d3e20323732353734.roa
File:                     323830343a383535633a3a2f33322d3438203d3e20323732353734.roa (raw, json)
Hash identifier:          VV1hKNw4CQKWBcb0nCJFcwjIkbOi+25om7Axw9atMYY=
Subject key identifier:   A5:CD:2E:A5:3A:1F:8F:6C:EF:10:A3:B1:23:33:88:B1:78:E6:D5:75
Certificate issuer:       /CN=29A91DD1A8D2DAB8A86EC0A379E1FABC7D9E0488
Certificate serial:       358AB25F2446F87E0C5619155A8445EA97BC1333
Authority key identifier: 29:A9:1D:D1:A8:D2:DA:B8:A8:6E:C0:A3:79:E1:FA:BC:7D:9E:04:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/29A91DD1A8D2DAB8A86EC0A379E1FABC7D9E0488.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5MunSkbtD1tKo57W3ryJKjvSbJGpi36cHJ4nL25ebhz9/0/323830343a383535633a3a2f33322d3438203d3e20323732353734.roa
Signing time:             Wed 30 Mar 2022 16:08:43 +0000
ROA not before:           Wed 30 Mar 2022 16:03:43 +0000
ROA not after:            Wed 29 Mar 2023 16:08:43 +0000
asID:                     272574
IP address blocks:        2804:855c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:8a:b2:5f:24:46:f8:7e:0c:56:19:15:5a:84:45:ea:97:bc:13:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29A91DD1A8D2DAB8A86EC0A379E1FABC7D9E0488
        Validity
            Not Before: Mar 30 16:03:43 2022 GMT
            Not After : Mar 29 16:08:43 2023 GMT
        Subject: CN=3082010A0282010100C3CCC089FD2DEF85AF6E93E9A26508C4E280D9C4CF7314267BB8CBFD9B1C148F768BDA172537DD8D092FE2995B310AB046E361AEC82AA99DD4A941C643CDF1905CBCD9F9E139EA6BC803F464D1EF933CF1302052039B53AA877076AA02154C52C774925AC0CA93E0AB6BF97C634264C7F761470093FC7EDF6AD295C3D39C314286E26BC4F1D94700B9EC3142FBA34369C0764CD689E6FFC36BD6A0DD7E46DA1CF06F97878EE484F66EA98D6BF51A460E87CFDD2DBEF0ADD536CA99EEBD94AA50C021C1C30D43EC00B5D0B2395746F26E1BC612B3C584128216ED9A5965C0CF7F5061414D64CAD32EB09C6428850F76C085FCE32721737152AB0ED883A62491B10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cc:c0:89:fd:2d:ef:85:af:6e:93:e9:a2:65:
                    08:c4:e2:80:d9:c4:cf:73:14:26:7b:b8:cb:fd:9b:
                    1c:14:8f:76:8b:da:17:25:37:dd:8d:09:2f:e2:99:
                    5b:31:0a:b0:46:e3:61:ae:c8:2a:a9:9d:d4:a9:41:
                    c6:43:cd:f1:90:5c:bc:d9:f9:e1:39:ea:6b:c8:03:
                    f4:64:d1:ef:93:3c:f1:30:20:52:03:9b:53:aa:87:
                    70:76:aa:02:15:4c:52:c7:74:92:5a:c0:ca:93:e0:
                    ab:6b:f9:7c:63:42:64:c7:f7:61:47:00:93:fc:7e:
                    df:6a:d2:95:c3:d3:9c:31:42:86:e2:6b:c4:f1:d9:
                    47:00:b9:ec:31:42:fb:a3:43:69:c0:76:4c:d6:89:
                    e6:ff:c3:6b:d6:a0:dd:7e:46:da:1c:f0:6f:97:87:
                    8e:e4:84:f6:6e:a9:8d:6b:f5:1a:46:0e:87:cf:dd:
                    2d:be:f0:ad:d5:36:ca:99:ee:bd:94:aa:50:c0:21:
                    c1:c3:0d:43:ec:00:b5:d0:b2:39:57:46:f2:6e:1b:
                    c6:12:b3:c5:84:12:82:16:ed:9a:59:65:c0:cf:7f:
                    50:61:41:4d:64:ca:d3:2e:b0:9c:64:28:85:0f:76:
                    c0:85:fc:e3:27:21:73:71:52:ab:0e:d8:83:a6:24:
                    91:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:CD:2E:A5:3A:1F:8F:6C:EF:10:A3:B1:23:33:88:B1:78:E6:D5:75
            X509v3 Authority Key Identifier:
                keyid:29:A9:1D:D1:A8:D2:DA:B8:A8:6E:C0:A3:79:E1:FA:BC:7D:9E:04:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5MunSkbtD1tKo57W3ryJKjvSbJGpi36cHJ4nL25ebhz9/0/29A91DD1A8D2DAB8A86EC0A379E1FABC7D9E0488.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/29A91DD1A8D2DAB8A86EC0A379E1FABC7D9E0488.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5MunSkbtD1tKo57W3ryJKjvSbJGpi36cHJ4nL25ebhz9/0/323830343a383535633a3a2f33322d3438203d3e20323732353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:855c::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:aa:da:69:6a:53:de:fa:6b:1e:0e:b7:bf:21:69:38:52:00:
         cb:dd:4f:ac:3e:5a:d8:32:34:dd:4c:0c:ef:88:09:c7:0c:e6:
         3a:dc:d7:1c:69:84:9f:c2:a1:95:56:95:f3:15:58:ef:2c:49:
         67:ad:55:a0:4c:29:d1:e6:f2:e0:eb:a9:8f:ae:dc:cf:2b:9e:
         eb:4d:ee:a0:1d:b6:d1:9f:a3:8f:6e:5b:67:4c:75:7c:5a:47:
         ea:52:1e:d1:9a:00:ee:f9:60:62:f3:98:ae:e1:6e:59:2a:cd:
         97:c9:10:4c:2e:57:18:2e:73:2c:5b:47:0b:0b:e3:9c:20:cc:
         33:75:02:29:4c:af:eb:c4:d5:1f:da:cc:c4:40:35:e0:d7:c7:
         3e:20:4c:6f:dd:a1:da:48:ac:57:5b:fb:56:cc:2d:1b:c7:7c:
         ff:51:47:d6:76:ac:f9:0c:c6:84:a6:c8:00:18:20:c9:df:44:
         86:74:11:3a:f2:5c:58:3e:33:57:d6:83:a6:8d:34:16:3f:bc:
         b8:35:c2:f5:68:71:d8:b6:d9:77:28:e1:4e:90:fc:27:f4:fd:
         f0:40:2d:f3:c3:b7:d5:13:75:08:7d:93:87:a9:3b:b6:3e:82:
         8a:b7:3f:1f:9f:81:a9:9f:e9:3f:08:b9:6a:ef:0b:f4:9f:ce:
         93:87:cc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org