Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6KmmNQ8b3VjAreTG2w2HyZqS5JXwGb3MGVGCqNmvvKNE/0/323830343a353335633a3a2f33322d313238203d3e20323638353739.roa
File:                     323830343a353335633a3a2f33322d313238203d3e20323638353739.roa (raw, json)
Hash identifier:          E6YUG5+jwl4qc5nZkPycR3EH8MCAfVFcj+zviNTkGrc=
Subject key identifier:   29:E9:BF:B2:E3:58:7C:CB:B6:0C:08:D7:23:A4:D4:82:91:59:59:41
Certificate issuer:       /CN=B29CA4CD70D7BE078CD5850A3D7A14B2DC089AB0
Certificate serial:       5E84DA0C6A8F333AB24FB9AFDDDF35449D7002E0
Authority key identifier: B2:9C:A4:CD:70:D7:BE:07:8C:D5:85:0A:3D:7A:14:B2:DC:08:9A:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B29CA4CD70D7BE078CD5850A3D7A14B2DC089AB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6KmmNQ8b3VjAreTG2w2HyZqS5JXwGb3MGVGCqNmvvKNE/0/323830343a353335633a3a2f33322d313238203d3e20323638353739.roa
Signing time:             Wed 08 Nov 2023 18:28:15 +0000
ROA not before:           Wed 08 Nov 2023 18:23:15 +0000
ROA not after:            Wed 06 Nov 2024 18:28:15 +0000
asID:                     268579
IP address blocks:        2804:535c::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:84:da:0c:6a:8f:33:3a:b2:4f:b9:af:dd:df:35:44:9d:70:02:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B29CA4CD70D7BE078CD5850A3D7A14B2DC089AB0
        Validity
            Not Before: Nov  8 18:23:15 2023 GMT
            Not After : Nov  6 18:28:15 2024 GMT
        Subject: CN=29E9BFB2E3587CCBB60C08D723A4D48291595941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:7e:0c:50:b2:50:d1:d4:f4:a7:16:df:3e:f9:
                    a4:69:8b:bd:96:9a:7c:cb:67:1c:bd:24:37:14:e7:
                    2b:2a:ac:39:0b:fd:fb:55:6a:c1:f0:bc:bd:c5:6a:
                    49:4a:73:8b:64:c4:37:f0:d6:c0:51:54:2e:15:a8:
                    da:09:80:82:52:93:84:28:f7:e0:a8:58:71:fb:62:
                    a0:8c:3a:2a:46:c9:86:f0:87:62:65:d4:0e:e1:e0:
                    df:ee:ab:d5:a7:f3:46:8a:83:54:84:b7:ed:c1:83:
                    1d:6f:78:25:f0:65:35:70:5b:e7:05:9a:35:52:ce:
                    fd:1b:2e:e1:e0:99:cc:ad:88:4d:a8:e3:67:56:c7:
                    26:82:e9:7a:37:f6:cd:e4:d2:49:e3:a3:fc:a5:16:
                    78:44:b9:1b:37:75:05:6a:87:27:40:59:ac:ff:58:
                    f0:bb:69:fd:e1:36:0c:8b:35:5f:a3:9a:eb:73:b0:
                    bf:33:bd:b3:09:78:f7:b4:68:69:2d:67:73:b5:7a:
                    ac:58:da:b5:e0:e6:d8:bb:d7:fd:ea:24:2f:a5:15:
                    2a:d4:77:ea:30:9e:bb:63:9b:a8:d8:ab:27:73:3f:
                    77:70:b8:98:dd:b3:21:79:0a:f2:99:d1:51:52:38:
                    cc:35:57:aa:f4:65:f0:49:08:1f:a9:76:59:49:ea:
                    b0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E9:BF:B2:E3:58:7C:CB:B6:0C:08:D7:23:A4:D4:82:91:59:59:41
            X509v3 Authority Key Identifier:
                keyid:B2:9C:A4:CD:70:D7:BE:07:8C:D5:85:0A:3D:7A:14:B2:DC:08:9A:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6KmmNQ8b3VjAreTG2w2HyZqS5JXwGb3MGVGCqNmvvKNE/0/B29CA4CD70D7BE078CD5850A3D7A14B2DC089AB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B29CA4CD70D7BE078CD5850A3D7A14B2DC089AB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6KmmNQ8b3VjAreTG2w2HyZqS5JXwGb3MGVGCqNmvvKNE/0/323830343a353335633a3a2f33322d313238203d3e20323638353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:535c::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:a4:58:71:ca:e5:86:ff:87:c9:54:96:37:b7:5e:ee:ef:41:
         69:bc:40:84:32:a0:5c:c1:10:b4:37:d0:a1:25:05:57:16:87:
         5e:00:6c:8b:4a:8b:80:e5:bb:23:dc:b1:ed:8f:05:c7:e6:b5:
         d6:22:07:78:bf:dc:b1:f5:96:43:2e:b5:7e:32:be:86:20:0e:
         de:37:16:b9:ef:84:ee:0d:ea:ec:94:14:8c:3c:bc:a5:bb:45:
         eb:0b:1f:ec:c0:c2:e8:5b:cf:a2:a6:c7:e0:01:3c:52:f2:90:
         86:5f:c3:b2:89:3d:6a:ba:24:3c:e6:e3:7b:9a:6d:5c:51:f2:
         92:42:26:13:67:23:ce:e3:59:43:21:af:0f:9e:34:f9:59:92:
         85:3b:d1:ba:af:7c:24:6e:8f:aa:8c:87:0a:30:fa:b4:36:0b:
         62:a2:ab:f5:d8:a3:38:16:b6:7c:f7:fd:8f:b4:cd:d6:6b:bd:
         bc:4f:7d:59:77:1b:38:50:7d:2a:92:6d:29:7f:af:9d:2e:b5:
         f2:a1:d6:f1:cd:39:c7:01:95:3f:be:99:c7:a4:10:71:a0:97:
         dd:15:70:b5:47:c2:ad:51:7d:97:3a:cc:0e:a6:ce:f9:bf:e5:
         41:3d:93:fd:d8:5a:e6:36:e5:d8:c0:1d:d2:15:92:5d:d7:3c:
         0c:79:a7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org