Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/323830343a326338343a383030303a3a2f33332d3333203d3e20323635323234.roa
File:                     323830343a326338343a383030303a3a2f33332d3333203d3e20323635323234.roa (raw, json)
Hash identifier:          od1N2C/OtfWk2rCOz1P3dKEQ7IYu0cxDoeXz3VI68pE=
Subject key identifier:   7F:6B:DB:12:01:21:34:3D:29:D1:6C:01:E2:1F:C1:39:64:69:42:04
Certificate issuer:       /CN=44BCB0CBD8B6995E115D021F5565C1A25FBF52AF
Certificate serial:       4432BD7BE58CCCC309928E55843D00ACC61A31A6
Authority key identifier: 44:BC:B0:CB:D8:B6:99:5E:11:5D:02:1F:55:65:C1:A2:5F:BF:52:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44BCB0CBD8B6995E115D021F5565C1A25FBF52AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/323830343a326338343a383030303a3a2f33332d3333203d3e20323635323234.roa
Signing time:             Fri 18 Feb 2022 12:28:34 +0000
ROA not before:           Fri 18 Feb 2022 12:23:34 +0000
ROA not after:            Fri 17 Feb 2023 12:28:34 +0000
asID:                     265224
IP address blocks:        2804:2c84:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:32:bd:7b:e5:8c:cc:c3:09:92:8e:55:84:3d:00:ac:c6:1a:31:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BCB0CBD8B6995E115D021F5565C1A25FBF52AF
        Validity
            Not Before: Feb 18 12:23:34 2022 GMT
            Not After : Feb 17 12:28:34 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:35:0b:22:05:6e:6a:73:bf:fc:1d:fb:c3:43:
                    c8:9e:13:c4:0d:86:9f:98:5d:e2:63:32:b7:57:a3:
                    79:88:d7:80:d7:73:28:93:da:e9:a9:c9:ba:50:11:
                    aa:47:b0:fb:ed:f6:5e:ba:78:56:94:2b:c3:27:20:
                    7a:34:f4:2f:62:e0:a3:58:e4:4f:1d:15:8d:c1:18:
                    87:75:53:3a:cd:5e:d6:3d:76:bc:d1:25:06:39:7b:
                    17:ce:8d:ae:67:28:52:4c:e0:aa:b1:7a:f4:87:fd:
                    19:65:cc:d3:28:2e:24:ff:ba:be:25:98:25:ab:6c:
                    4d:2b:c8:bd:17:b1:52:03:41:ce:63:60:59:20:8b:
                    c7:6c:e8:0d:ae:69:16:4f:96:2d:1c:d1:c9:0c:2a:
                    35:3d:fd:a8:08:1e:21:9e:f1:4d:6e:f9:c4:02:67:
                    58:54:6e:12:af:19:f5:9e:c5:0c:69:34:c5:70:15:
                    28:a7:d3:0d:7e:08:8f:ee:11:e6:e8:db:1e:bb:77:
                    b5:0e:b5:89:41:9d:0b:30:e1:77:83:69:a9:01:2f:
                    8f:5d:43:2e:7e:9b:6b:62:d7:f5:d4:59:bb:fa:5c:
                    f9:93:3d:26:2e:05:48:5c:16:25:03:a3:6f:8c:06:
                    8a:1d:c6:af:0d:44:b1:24:ef:3c:b9:e0:e4:c9:bd:
                    b9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:6B:DB:12:01:21:34:3D:29:D1:6C:01:E2:1F:C1:39:64:69:42:04
            X509v3 Authority Key Identifier:
                keyid:44:BC:B0:CB:D8:B6:99:5E:11:5D:02:1F:55:65:C1:A2:5F:BF:52:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/44BCB0CBD8B6995E115D021F5565C1A25FBF52AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44BCB0CBD8B6995E115D021F5565C1A25FBF52AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/323830343a326338343a383030303a3a2f33332d3333203d3e20323635323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c84:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         cf:32:a4:29:9e:6d:26:fe:9a:d5:17:39:8c:29:f3:0e:8e:f5:
         f7:36:e1:58:0f:91:30:66:8f:63:ea:5d:d3:b9:b4:df:98:a9:
         46:ff:6c:66:fb:a2:9a:11:8f:64:26:02:45:58:44:a9:6d:df:
         ba:36:84:89:eb:71:d8:0a:e4:2b:ce:ec:b2:34:36:39:df:ff:
         9e:e1:4c:4e:fd:7a:6f:a3:1d:d2:51:82:f4:75:dc:85:5e:fb:
         a8:52:e1:9f:da:66:71:0b:00:85:cb:99:26:55:3f:a5:fe:9a:
         df:bb:e8:bb:8f:f7:75:1f:73:73:f6:5a:c2:58:6e:ea:11:77:
         64:cf:ba:c7:3f:de:31:76:ec:e6:fc:9c:20:41:b4:30:13:25:
         a0:d7:16:68:b7:2d:e5:58:2d:b5:1b:97:d3:4a:3a:ee:cd:0a:
         21:a5:f4:c7:76:ab:c9:f7:b2:76:2c:90:a7:b5:00:ee:c3:f3:
         16:1c:d1:48:c5:77:ee:35:b6:e5:33:b9:a6:cd:e3:72:ab:8b:
         a8:b7:8c:c8:db:0d:6a:c5:ad:48:ed:f4:5f:c8:a9:a1:b9:97:
         87:b7:b8:98:90:d2:7a:bf:34:2c:1b:a8:57:fa:92:62:54:cb:
         e3:0a:82:19:93:5b:0d:de:53:75:0d:3c:9f:11:5b:a4:65:4e:
         e5:5c:ba:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org