Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/323830343a333730383a3a2f33322d3438203d3e20323636333835.roa
File:                     323830343a333730383a3a2f33322d3438203d3e20323636333835.roa (raw, json)
Hash identifier:          OhoUoIfuaMcWGrF6ObaatlCfoqKK2e6dPa/wbvgfn9s=
Subject key identifier:   2D:66:BE:11:70:4B:DF:96:14:87:51:5A:D9:65:3C:77:12:9A:29:93
Certificate issuer:       /CN=D4340BBCF3511E7FF0C0D979030DCC8553E16676
Certificate serial:       7D1DB43039C4577F6FC98B921A08FF55A62EDC37
Authority key identifier: D4:34:0B:BC:F3:51:1E:7F:F0:C0:D9:79:03:0D:CC:85:53:E1:66:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4340BBCF3511E7FF0C0D979030DCC8553E16676.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/323830343a333730383a3a2f33322d3438203d3e20323636333835.roa
Signing time:             Fri 21 Oct 2022 15:26:29 +0000
ROA not before:           Fri 21 Oct 2022 15:21:29 +0000
ROA not after:            Fri 20 Oct 2023 15:26:29 +0000
asID:                     266385
IP address blocks:        2804:3708::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:1d:b4:30:39:c4:57:7f:6f:c9:8b:92:1a:08:ff:55:a6:2e:dc:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4340BBCF3511E7FF0C0D979030DCC8553E16676
        Validity
            Not Before: Oct 21 15:21:29 2022 GMT
            Not After : Oct 20 15:26:29 2023 GMT
        Subject: CN=2D66BE11704BDF961487515AD9653C77129A2993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:92:07:7f:02:ed:ed:68:26:e3:d1:d6:63:c8:
                    8b:af:79:57:31:81:d1:1d:2d:31:73:63:2e:ae:51:
                    a0:a9:d2:60:57:e2:58:ee:88:90:58:43:88:fb:b9:
                    52:80:c6:87:d3:3d:df:09:be:80:9c:a1:ae:7a:ef:
                    3f:40:5c:73:88:10:7f:b8:56:6f:12:f2:4b:a7:ed:
                    95:ac:e3:36:67:fe:1c:ba:fb:e0:51:eb:d4:da:66:
                    2d:df:3f:1b:83:e3:16:6a:3f:9d:bc:18:90:90:d6:
                    32:0a:75:b1:e5:33:29:62:8b:45:97:b1:fd:d0:36:
                    14:8d:54:67:89:16:fb:41:bc:ed:9a:48:18:92:0a:
                    a2:39:08:f9:4a:db:08:02:23:ad:71:4d:88:5a:eb:
                    b7:e4:20:eb:31:a7:f6:ba:85:ad:85:29:14:6c:ab:
                    08:1f:c1:92:81:63:aa:28:e4:6f:b1:a1:d4:09:57:
                    83:4f:b3:d0:65:9f:94:64:4e:dc:2a:de:fc:f3:c1:
                    7c:ff:88:f7:f4:a6:45:5e:c2:f0:52:74:d9:8f:8e:
                    b5:5d:2c:ea:a4:44:46:dd:ef:05:10:06:a1:6b:e9:
                    c8:24:af:eb:5b:df:8e:57:b4:69:61:07:7a:0c:f5:
                    61:b6:9b:8c:89:81:80:f0:ed:1c:ed:df:c2:ef:25:
                    59:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:66:BE:11:70:4B:DF:96:14:87:51:5A:D9:65:3C:77:12:9A:29:93
            X509v3 Authority Key Identifier:
                keyid:D4:34:0B:BC:F3:51:1E:7F:F0:C0:D9:79:03:0D:CC:85:53:E1:66:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/D4340BBCF3511E7FF0C0D979030DCC8553E16676.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4340BBCF3511E7FF0C0D979030DCC8553E16676.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/323830343a333730383a3a2f33322d3438203d3e20323636333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3708::/32

    Signature Algorithm: sha256WithRSAEncryption
         db:31:da:ee:0e:f2:d5:c0:b3:70:df:0f:74:14:e1:45:80:98:
         1e:4a:b1:50:80:35:bd:65:6c:2a:be:5b:f7:93:dc:ca:6d:a6:
         d9:2f:6c:de:3b:64:1c:46:5a:22:8e:90:fc:31:13:e3:cc:34:
         15:6b:fc:db:3d:e5:16:90:9b:79:9d:ef:d5:64:a4:4d:5b:86:
         fa:ff:de:7d:bc:9b:70:0c:0b:8b:2c:4b:00:3e:4b:10:7e:9c:
         49:f3:b5:c0:87:cc:2d:78:89:3b:cc:3c:35:f8:ca:e5:71:f1:
         2f:5c:15:ed:b5:0e:30:43:48:2c:dd:f5:1b:69:d3:7e:0f:37:
         4e:c8:6a:28:e6:62:0b:a9:20:de:20:4f:27:af:c2:4c:48:5b:
         e6:4a:6e:46:87:a0:3f:97:d2:94:bc:4e:5b:03:49:85:d7:09:
         27:5c:9e:e8:c5:1d:00:a2:f6:2c:68:57:0f:9b:5b:65:6a:61:
         85:8a:4d:7f:f1:f5:f9:56:a5:3c:e6:5a:1c:2d:07:7d:d8:d4:
         8f:6d:d7:91:02:77:07:2c:2a:04:8b:e7:eb:26:b6:5c:2b:5d:
         54:7f:40:61:26:93:e0:e2:70:94:3d:26:12:ba:8d:f6:61:83:
         a5:bb:c0:05:ec:e7:77:64:fd:e9:60:54:15:2d:fe:54:b8:d8:
         4f:2e:5a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org