Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/323830343a343135303a343030303a3a2f33342d3334203d3e20323637343236.roa
File:                     323830343a343135303a343030303a3a2f33342d3334203d3e20323637343236.roa (raw, json)
Hash identifier:          LBhSn3faMMdYTVrZYqq+7z6OlH3zm2N4KEoGND/FCDg=
Subject key identifier:   52:58:F3:FD:CC:8A:E5:C2:AF:A4:D6:B4:22:6A:6F:29:27:9A:90:1C
Certificate issuer:       /CN=959F004623105A3C7B4F85C41B8104B26D38122E
Certificate serial:       714093464B506AFC92CDB1D7947DD6290D3E4825
Authority key identifier: 95:9F:00:46:23:10:5A:3C:7B:4F:85:C4:1B:81:04:B2:6D:38:12:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/959F004623105A3C7B4F85C41B8104B26D38122E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/323830343a343135303a343030303a3a2f33342d3334203d3e20323637343236.roa
Signing time:             Wed 28 Dec 2022 21:26:38 +0000
ROA not before:           Wed 28 Dec 2022 21:21:38 +0000
ROA not after:            Wed 27 Dec 2023 21:26:38 +0000
asID:                     267426
IP address blocks:        2804:4150:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:40:93:46:4b:50:6a:fc:92:cd:b1:d7:94:7d:d6:29:0d:3e:48:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=959F004623105A3C7B4F85C41B8104B26D38122E
        Validity
            Not Before: Dec 28 21:21:38 2022 GMT
            Not After : Dec 27 21:26:38 2023 GMT
        Subject: CN=5258F3FDCC8AE5C2AFA4D6B4226A6F29279A901C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4b:7b:c8:d6:35:a3:fa:0b:b6:f0:96:2a:66:
                    c2:e2:4b:33:8d:d5:43:8d:10:b5:51:75:c7:fd:4b:
                    05:56:3f:27:a6:36:6c:15:b2:67:04:f3:d6:df:de:
                    a1:39:81:d3:11:cd:ab:2b:03:91:0a:92:73:3c:53:
                    c7:54:ff:98:be:f7:d3:7d:89:cd:67:d8:f5:da:9e:
                    ab:b7:94:3d:a9:c5:80:58:5d:09:f9:d3:31:06:65:
                    18:35:cf:40:4d:a7:f9:16:5e:6c:c9:aa:1c:f0:04:
                    e0:ac:e3:55:2c:ae:74:a6:d9:ce:1f:f4:f2:18:af:
                    6e:3e:27:86:bf:33:3a:cb:93:98:ac:3c:1d:6a:1a:
                    cc:0f:b5:9c:d8:a9:63:b2:75:a6:63:74:78:02:cd:
                    d1:95:d0:c0:8d:83:27:87:a9:50:6b:b1:2b:9e:45:
                    f1:9d:47:18:15:e4:52:47:7b:86:10:24:7d:c5:e5:
                    31:5b:f3:80:b9:cd:43:96:d3:32:17:7a:1a:0f:8a:
                    86:99:ca:4f:c7:d7:b1:43:9c:6d:21:d7:89:63:18:
                    f3:65:15:2c:c2:3a:c3:2c:9a:83:7b:d0:d7:37:c3:
                    88:8d:1e:4b:97:75:a2:5a:00:64:92:66:b7:47:49:
                    bd:8e:7f:a3:0c:07:25:aa:b2:6f:9c:35:2e:08:cd:
                    75:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:58:F3:FD:CC:8A:E5:C2:AF:A4:D6:B4:22:6A:6F:29:27:9A:90:1C
            X509v3 Authority Key Identifier:
                keyid:95:9F:00:46:23:10:5A:3C:7B:4F:85:C4:1B:81:04:B2:6D:38:12:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/959F004623105A3C7B4F85C41B8104B26D38122E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/959F004623105A3C7B4F85C41B8104B26D38122E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/323830343a343135303a343030303a3a2f33342d3334203d3e20323637343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4150:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a0:11:fe:c6:1a:42:7b:22:10:bb:d4:82:4f:69:1a:72:7b:24:
         86:6d:24:12:05:93:ae:bc:3e:ff:be:34:4d:3e:f5:2c:1d:10:
         7c:f7:6c:8a:29:55:ac:73:aa:dd:3e:58:bc:2e:ff:ae:a5:48:
         0c:c4:06:48:a3:57:87:c1:b4:5e:20:dc:f5:88:fc:cd:ab:e6:
         80:69:dd:a0:92:a6:a9:c9:22:53:ba:dd:05:e4:2b:60:65:d0:
         63:99:09:09:cf:2f:cd:bd:51:3b:f7:1e:d7:66:d7:7f:b4:c9:
         b9:c5:b5:a0:e8:00:f2:9f:18:21:5a:c3:00:bf:69:1d:b9:2d:
         89:b4:6a:43:c3:48:1b:b3:0b:ac:e7:9a:3c:c8:4a:83:52:e4:
         e3:1d:a5:f3:27:9e:0d:d2:52:44:43:36:86:75:e4:22:3c:fd:
         95:f6:f4:de:81:0b:10:f6:e7:6a:0e:29:6b:32:60:a0:a9:31:
         57:78:30:2d:46:af:64:3f:24:d6:8e:08:5e:12:9c:eb:a5:17:
         c5:27:78:37:5b:7d:9f:4d:77:4f:c1:62:7d:b6:a6:83:85:94:
         7a:61:f0:4b:a3:2e:5e:33:3f:c7:a1:64:ec:46:df:99:b0:81:
         cf:a4:dc:57:b9:30:f4:e0:4b:bd:3c:45:5d:90:76:be:47:27:
         ec:a8:71:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:11 2024 by rpki-client on console-ams.rpki-client.org