Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5cbD581Da4ZvApJ2tuZ8MoH37t9nxJsgSzZYPYa69r4D/0/323830343a3461303a3a2f33322d3438203d3e203532393839.roa
File:                     323830343a3461303a3a2f33322d3438203d3e203532393839.roa (raw, json)
Hash identifier:          o3I3zWkhBOdYPdUaaQcXZ658x71qlbIJdxEf9F2ghZ0=
Subject key identifier:   41:BE:E7:23:10:39:B4:A9:AE:E4:22:14:BC:8F:6A:CB:D9:13:73:EA
Certificate issuer:       /CN=52F74CD9CD82590FB93E8841BA356D693CF1C4E4
Certificate serial:       5A2682FFDE81EA341678BBF9A04DE4BB3F22DB44
Authority key identifier: 52:F7:4C:D9:CD:82:59:0F:B9:3E:88:41:BA:35:6D:69:3C:F1:C4:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52F74CD9CD82590FB93E8841BA356D693CF1C4E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5cbD581Da4ZvApJ2tuZ8MoH37t9nxJsgSzZYPYa69r4D/0/323830343a3461303a3a2f33322d3438203d3e203532393839.roa
Signing time:             Wed 30 Mar 2022 18:00:00 +0000
ROA not before:           Wed 30 Mar 2022 17:55:00 +0000
ROA not after:            Thu 30 Mar 2023 18:00:00 +0000
asID:                     52989
IP address blocks:        2804:4a0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:26:82:ff:de:81:ea:34:16:78:bb:f9:a0:4d:e4:bb:3f:22:db:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52F74CD9CD82590FB93E8841BA356D693CF1C4E4
        Validity
            Not Before: Mar 30 17:55:00 2022 GMT
            Not After : Mar 30 18:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ea:21:27:b9:30:4a:cf:78:d9:a9:3f:9a:e8:
                    fe:c4:d5:85:44:55:31:cd:36:eb:45:d9:35:81:cd:
                    4b:a2:32:f6:95:3c:c1:c7:55:a5:25:c1:26:bc:3b:
                    ac:ba:b9:99:f2:4b:76:e4:bb:97:1a:d1:ec:18:68:
                    e5:c1:d4:4c:f3:dc:9d:12:06:01:ce:df:6d:d6:d6:
                    f7:85:f8:86:64:ef:3b:9c:1b:08:64:e6:be:8d:71:
                    c7:88:03:cf:d9:38:41:d9:30:dc:04:65:ef:0c:89:
                    bd:0a:0b:51:8b:e4:09:04:ea:e4:20:5f:b2:1e:3c:
                    e2:95:cd:4d:23:71:31:c5:cb:83:a1:10:ed:4b:23:
                    b3:66:47:2a:22:b1:3d:f5:74:66:83:62:6e:fa:eb:
                    98:93:fb:43:1b:50:bb:9e:7b:30:f8:d3:2d:e9:71:
                    66:b4:bc:a8:18:0b:5b:ea:9b:d1:79:21:a0:71:2d:
                    4c:31:28:68:c3:c4:95:d0:98:cc:94:a1:32:b1:01:
                    30:1a:de:7d:c0:6c:18:33:e9:70:15:6e:e5:a2:3d:
                    33:ba:7a:c0:d3:b5:b5:5e:77:71:55:60:97:05:cb:
                    35:5b:a3:b4:67:0e:55:cd:f3:63:51:76:30:19:6f:
                    92:c4:fd:ba:e9:47:34:ba:54:2b:50:5f:4d:74:94:
                    51:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:BE:E7:23:10:39:B4:A9:AE:E4:22:14:BC:8F:6A:CB:D9:13:73:EA
            X509v3 Authority Key Identifier:
                keyid:52:F7:4C:D9:CD:82:59:0F:B9:3E:88:41:BA:35:6D:69:3C:F1:C4:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5cbD581Da4ZvApJ2tuZ8MoH37t9nxJsgSzZYPYa69r4D/0/52F74CD9CD82590FB93E8841BA356D693CF1C4E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52F74CD9CD82590FB93E8841BA356D693CF1C4E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cbD581Da4ZvApJ2tuZ8MoH37t9nxJsgSzZYPYa69r4D/0/323830343a3461303a3a2f33322d3438203d3e203532393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:be:23:fa:2c:dc:53:82:01:45:cd:4a:31:1c:bf:a7:a9:45:
         cb:a5:4b:70:92:62:55:06:57:34:c8:88:85:8f:8d:23:c2:f9:
         dd:1c:ed:2e:3a:87:18:ec:6b:05:a7:cf:44:7a:e7:d9:97:bb:
         2f:f2:3b:96:f6:df:18:dc:d4:ef:fb:e1:de:e6:86:11:c6:27:
         6f:fd:66:7e:f9:9b:fe:bd:a1:58:1f:c1:19:ec:c4:e6:a9:2e:
         61:7b:82:dd:ed:cf:48:c0:c5:c4:19:67:0e:c6:9b:4b:7a:91:
         9c:14:d8:94:81:ed:60:0a:3a:d9:7e:1d:e5:eb:3a:2b:37:b7:
         28:1a:92:36:20:ca:fd:a3:3c:8a:23:49:7e:af:00:5e:2b:d6:
         34:ea:8b:ad:2b:25:49:45:70:b4:90:d3:3f:07:79:ff:40:d2:
         8a:41:f2:06:26:6b:32:3c:7a:26:12:42:99:be:77:56:bc:1a:
         4a:a6:4d:99:30:80:cb:d1:c7:09:be:72:80:b7:6e:ea:31:83:
         1a:e4:0f:0c:1d:61:c8:28:62:8a:11:4f:43:07:28:8a:89:58:
         d0:42:8e:32:83:9b:7e:14:f8:96:73:60:8f:c6:a9:a5:2f:26:
         ba:d2:bd:3a:c8:a8:eb:ab:19:de:42:2f:69:d0:79:51:09:db:
         70:c8:f7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org