Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/0/323830343a383665383a3a2f33322d313238203d3e20323732363734.roa
File:                     323830343a383665383a3a2f33322d313238203d3e20323732363734.roa (raw, json)
Hash identifier:          DULx5dNP07KZi0FoNQczxyMmmme43s61l+lCfzqZBnI=
Subject key identifier:   F2:DF:F8:20:F6:B6:6D:F2:3C:E5:D6:68:6C:49:3A:E5:A2:1E:C6:4D
Certificate issuer:       /CN=919E622EF3F1FA79978A87AB73285ED4B5F50E48
Certificate serial:       1D7C94B8FBAF1B2FD35E2E90491A063F442B637A
Authority key identifier: 91:9E:62:2E:F3:F1:FA:79:97:8A:87:AB:73:28:5E:D4:B5:F5:0E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/919E622EF3F1FA79978A87AB73285ED4B5F50E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/0/323830343a383665383a3a2f33322d313238203d3e20323732363734.roa
Signing time:             Wed 26 Apr 2023 13:08:07 +0000
ROA not before:           Wed 26 Apr 2023 13:03:07 +0000
ROA not after:            Wed 24 Apr 2024 13:08:07 +0000
asID:                     272674
IP address blocks:        2804:86e8::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:7c:94:b8:fb:af:1b:2f:d3:5e:2e:90:49:1a:06:3f:44:2b:63:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=919E622EF3F1FA79978A87AB73285ED4B5F50E48
        Validity
            Not Before: Apr 26 13:03:07 2023 GMT
            Not After : Apr 24 13:08:07 2024 GMT
        Subject: CN=F2DFF820F6B66DF23CE5D6686C493AE5A21EC64D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4c:20:a3:d2:7f:21:90:2e:ef:04:a5:ec:05:
                    f3:08:7c:6f:a2:f4:11:a0:36:2f:47:9e:33:d2:50:
                    59:af:d5:a1:98:29:6b:55:ad:9d:46:6e:f5:99:29:
                    36:45:90:7a:4e:8d:54:32:2b:e5:30:e2:63:12:a5:
                    76:45:1a:c5:56:2e:b6:95:dc:6a:7b:d8:d1:e7:10:
                    10:00:15:54:eb:5f:2d:be:e3:08:d7:05:3b:5b:05:
                    8c:a4:80:9c:45:22:ca:15:c4:65:ad:14:f7:ef:53:
                    5c:3e:d5:9b:65:9f:e7:1f:27:d1:99:d5:8a:64:ae:
                    ec:71:8e:83:2a:eb:e8:62:ea:c9:bd:d9:b2:49:d2:
                    73:03:ed:ca:b9:d5:e6:49:07:bd:7d:29:af:44:1d:
                    3f:21:f1:46:11:3c:49:7a:33:ff:e6:5c:33:a7:38:
                    e8:91:f2:a6:82:f2:04:e7:e2:e3:b8:4a:f8:3e:50:
                    1d:d9:a4:32:28:2f:fa:1f:b2:07:cb:63:de:60:4d:
                    53:fb:ce:5e:58:3d:88:56:da:ca:a1:61:07:11:9c:
                    89:a1:07:0f:69:30:7e:9e:06:a1:86:7b:c4:2c:18:
                    c8:f7:e8:ae:5c:49:73:45:bf:10:30:5a:dc:11:86:
                    17:4c:36:73:0e:56:dc:1e:72:af:2b:3f:1c:74:eb:
                    d2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:DF:F8:20:F6:B6:6D:F2:3C:E5:D6:68:6C:49:3A:E5:A2:1E:C6:4D
            X509v3 Authority Key Identifier:
                keyid:91:9E:62:2E:F3:F1:FA:79:97:8A:87:AB:73:28:5E:D4:B5:F5:0E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/0/919E622EF3F1FA79978A87AB73285ED4B5F50E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/919E622EF3F1FA79978A87AB73285ED4B5F50E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/0/323830343a383665383a3a2f33322d313238203d3e20323732363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:86e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:2a:5e:d6:59:83:b8:c5:4e:bf:fe:3e:08:41:ba:06:e1:17:
         d1:d0:cc:d1:43:4b:2f:b0:35:61:a0:d9:51:6e:e3:15:55:fb:
         f1:0f:c8:ad:e4:04:d7:cb:7d:b0:fd:20:4a:e6:05:6b:c4:3a:
         2f:02:ba:8f:40:3d:12:bb:11:db:c6:cd:bc:fb:c7:2e:51:fa:
         99:a8:d0:d1:70:e6:c3:3a:9a:94:a0:8b:03:49:d1:57:6c:13:
         fa:ab:1e:94:3c:f0:f5:9c:20:b8:7e:6b:9f:ee:4e:8c:a7:56:
         7f:43:05:e2:51:e3:ef:ee:b7:49:91:14:63:c8:b3:01:cb:db:
         a2:90:a1:d1:7b:97:7b:fe:1b:a8:98:68:25:81:11:6e:d9:73:
         fc:8f:9e:91:07:99:ab:31:38:45:37:76:f3:30:b0:b3:67:91:
         ed:14:06:8a:c2:a2:81:fb:5f:16:39:f4:b2:08:7e:56:df:16:
         0b:ea:c7:b8:08:2a:dc:9f:8c:55:5b:49:ca:4a:f8:bf:44:d9:
         0d:af:1f:c3:ae:f4:27:2a:b7:2c:4e:bf:4c:7c:14:48:0c:9d:
         30:86:d2:cf:2f:f8:0e:27:9a:b7:b6:4d:cd:ea:64:d1:39:45:
         d7:64:15:2e:f0:04:51:9c:a8:29:88:f7:46:0f:37:d8:09:25:
         7a:05:a1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org