Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/323830343a6666343a3a2f33322d3336203d3e203533323138.roa
File:                     323830343a6666343a3a2f33322d3336203d3e203533323138.roa (raw, json)
Hash identifier:          YQLfVJfPAAqUMTFKQSWIUbx2ng2JGmxJWnuHTNk2Qqk=
Subject key identifier:   F6:14:04:3E:BD:F9:02:EF:6F:69:8A:CA:47:2C:37:D2:25:9D:D8:F3
Certificate issuer:       /CN=292430768F8FDCC636FCB3BD7A916A407C9461E8
Certificate serial:       14117F20818A80AD6EECA42F8B004722E569FD27
Authority key identifier: 29:24:30:76:8F:8F:DC:C6:36:FC:B3:BD:7A:91:6A:40:7C:94:61:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/292430768F8FDCC636FCB3BD7A916A407C9461E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/323830343a6666343a3a2f33322d3336203d3e203533323138.roa
Signing time:             Tue 02 Aug 2022 15:50:00 +0000
ROA not before:           Tue 02 Aug 2022 15:45:00 +0000
ROA not after:            Tue 01 Aug 2023 15:50:00 +0000
asID:                     53218
IP address blocks:        2804:ff4::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:11:7f:20:81:8a:80:ad:6e:ec:a4:2f:8b:00:47:22:e5:69:fd:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=292430768F8FDCC636FCB3BD7A916A407C9461E8
        Validity
            Not Before: Aug  2 15:45:00 2022 GMT
            Not After : Aug  1 15:50:00 2023 GMT
        Subject: CN=F614043EBDF902EF6F698ACA472C37D2259DD8F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:13:b3:3d:9b:e5:81:6d:de:23:bb:a7:6b:30:
                    10:73:64:2c:f5:90:13:65:84:19:0a:82:de:fa:76:
                    30:29:8d:b2:5c:07:e4:ba:8d:cd:cf:d5:5d:65:44:
                    81:41:4a:68:c9:66:39:c8:53:b2:53:2b:6c:4b:64:
                    f9:73:ca:45:53:cf:55:56:f1:dd:b1:3a:10:b4:fe:
                    6d:f0:3d:69:14:25:9b:c2:ac:cc:ad:66:19:de:b9:
                    bd:5f:cb:13:ec:e1:6c:c1:f1:14:b6:7f:cd:1c:aa:
                    29:3d:43:5d:88:fc:8f:84:6d:5b:d2:2b:cb:3a:8e:
                    1e:6f:b1:25:f8:ef:4f:19:1e:e9:b7:65:e4:a0:a9:
                    e5:64:54:03:d8:b7:d2:6c:fe:d2:cf:7f:5d:08:32:
                    a6:79:8e:04:6b:fe:6d:19:33:ef:1c:87:23:72:7b:
                    f1:1c:45:83:7e:d2:a2:a9:d8:53:dd:82:d1:20:44:
                    a1:dc:61:a2:51:94:a5:df:b6:3e:bb:e8:ad:11:29:
                    c5:46:bc:2c:f8:42:68:ce:b9:22:e6:4f:28:5c:9b:
                    99:56:10:0c:38:56:06:55:c6:20:6f:e2:43:64:26:
                    f0:58:73:3d:e1:98:b0:5d:bc:92:0c:56:67:34:18:
                    0e:5f:0b:3d:8d:4d:5f:5e:53:34:ad:f3:eb:7c:e5:
                    a3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:14:04:3E:BD:F9:02:EF:6F:69:8A:CA:47:2C:37:D2:25:9D:D8:F3
            X509v3 Authority Key Identifier:
                keyid:29:24:30:76:8F:8F:DC:C6:36:FC:B3:BD:7A:91:6A:40:7C:94:61:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/292430768F8FDCC636FCB3BD7A916A407C9461E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/292430768F8FDCC636FCB3BD7A916A407C9461E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/323830343a6666343a3a2f33322d3336203d3e203533323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ff4::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:e9:e5:18:64:39:c9:e8:32:49:3b:50:60:af:e9:c0:44:8e:
         db:67:49:92:41:07:e3:5b:2d:5a:10:eb:53:fc:1d:01:71:42:
         ce:25:e5:4e:40:de:65:44:1c:3c:db:09:6d:9a:ee:07:3c:73:
         d4:c6:3b:9e:41:52:e8:03:40:a3:1a:b4:a1:49:c4:8a:a4:a8:
         5a:b3:a0:9e:1a:6d:c4:b6:dd:41:b6:57:9c:97:43:97:46:61:
         11:33:cf:fb:7d:4c:1c:74:dc:06:e5:60:d8:bb:09:e7:8a:98:
         f0:79:31:5a:97:7f:c5:04:d0:20:87:73:3f:c0:68:a1:35:2e:
         79:dd:6e:53:bf:a3:50:78:77:47:e8:f5:89:20:8d:30:4b:5f:
         3d:12:75:09:21:ec:ac:0d:76:2e:fe:f2:ad:5e:a1:32:88:81:
         c6:97:c3:04:58:d3:f5:94:af:ba:b7:01:e4:2d:9b:c1:84:2a:
         41:45:1c:45:55:09:47:cd:f9:e2:80:49:2a:e3:41:e2:42:c9:
         e0:50:0a:53:fc:a2:c3:65:1a:40:8a:16:d7:ef:a2:28:22:b5:
         7e:17:98:67:af:28:15:76:a9:b2:bc:b2:f9:b2:2d:39:69:19:
         c6:fb:e1:0a:04:eb:fe:b0:34:b9:5d:b6:c2:ca:5c:02:b4:49:
         45:b9:ad:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org