Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/2/323830343a35383a3a2f33322d3438203d3e20323632363539.roa
File:                     323830343a35383a3a2f33322d3438203d3e20323632363539.roa (raw, json)
Hash identifier:          eDpbgvrmeusMEZWkAbMu39Dn2Nhti6qQBva7ZJFiWsU=
Subject key identifier:   B5:D2:68:2F:18:B5:51:30:DB:65:FA:15:61:86:4B:D0:B0:BE:83:43
Certificate issuer:       /CN=8342F023EFF781F7DDCA9D2FB59E4FAB5B510D93
Certificate serial:       793508CC7900B39BBFC74B7AC99D99A60691D1BB
Authority key identifier: 83:42:F0:23:EF:F7:81:F7:DD:CA:9D:2F:B5:9E:4F:AB:5B:51:0D:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8342F023EFF781F7DDCA9D2FB59E4FAB5B510D93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/2/323830343a35383a3a2f33322d3438203d3e20323632363539.roa
Signing time:             Mon 22 Jul 2024 17:09:32 +0000
ROA not before:           Mon 22 Jul 2024 17:04:32 +0000
ROA not after:            Mon 21 Jul 2025 17:09:32 +0000
asID:                     262659
IP address blocks:        2804:58::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:35:08:cc:79:00:b3:9b:bf:c7:4b:7a:c9:9d:99:a6:06:91:d1:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8342F023EFF781F7DDCA9D2FB59E4FAB5B510D93
        Validity
            Not Before: Jul 22 17:04:32 2024 GMT
            Not After : Jul 21 17:09:32 2025 GMT
        Subject: CN=B5D2682F18B55130DB65FA1561864BD0B0BE8343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bd:3f:54:9e:fd:92:f4:2f:4a:1d:bd:df:4d:
                    93:a2:fc:50:9b:b6:ef:bd:8b:c8:ec:4d:cb:89:05:
                    02:3b:b1:fa:de:ae:a9:f8:ee:b1:aa:0f:89:09:e1:
                    25:2f:7d:e6:e3:06:a9:66:e1:58:d7:c6:0a:33:6d:
                    b8:1e:cf:d0:94:8c:be:53:b9:8a:82:7e:0a:06:4e:
                    10:c4:bc:db:e2:c0:be:64:f8:79:e6:09:4d:7e:15:
                    79:4d:6d:18:fb:ea:0e:9a:1e:15:54:af:61:01:b2:
                    24:02:2e:71:d4:f0:ee:1a:71:7a:c5:9e:4b:25:03:
                    c4:c3:70:af:2c:e2:6f:38:30:47:67:14:36:af:59:
                    52:de:ec:c5:04:fa:be:21:04:5d:e8:d4:f5:e0:74:
                    70:12:6c:93:4f:21:55:85:65:34:cc:bf:a6:66:c4:
                    e6:1a:61:8d:0c:06:76:6d:fe:51:a3:ef:42:4b:59:
                    61:fb:b1:4f:41:1d:2f:ca:7b:f6:b4:43:a3:5e:41:
                    a3:45:ce:9e:da:58:ed:78:aa:97:2c:53:c8:8f:e0:
                    41:71:64:65:f2:f3:21:30:ab:58:2b:f1:b8:37:8f:
                    bc:04:0c:29:b1:95:77:19:a7:84:16:e3:7f:f9:eb:
                    a4:19:f2:86:60:4d:d1:9d:23:00:e6:91:cb:53:3d:
                    c9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D2:68:2F:18:B5:51:30:DB:65:FA:15:61:86:4B:D0:B0:BE:83:43
            X509v3 Authority Key Identifier:
                keyid:83:42:F0:23:EF:F7:81:F7:DD:CA:9D:2F:B5:9E:4F:AB:5B:51:0D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/2/8342F023EFF781F7DDCA9D2FB59E4FAB5B510D93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8342F023EFF781F7DDCA9D2FB59E4FAB5B510D93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/2/323830343a35383a3a2f33322d3438203d3e20323632363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:6a:85:2e:b9:1c:98:f6:b5:74:ef:6b:ca:59:78:22:1f:1b:
         30:d8:4e:a1:b6:10:8b:a6:1c:3a:64:bb:38:54:3e:ae:c2:c1:
         4b:67:10:e7:53:0f:cb:f8:c1:25:9b:ec:78:f0:d1:d3:bb:b0:
         5f:2d:b9:9d:22:bf:ae:b3:7c:d1:08:5b:56:06:b9:db:6c:1f:
         70:bc:7a:0c:20:2c:74:14:3d:eb:c4:42:47:f6:a8:12:4d:4a:
         a8:d8:92:9e:ea:07:fe:24:16:07:65:93:8e:39:05:1f:f9:c4:
         92:fe:b6:06:4f:87:78:47:fb:a5:87:8c:85:39:f3:81:aa:95:
         28:c6:81:cf:ca:a2:dc:4e:ea:18:92:e9:f5:5e:7b:6c:0e:3d:
         11:ab:16:e2:34:20:2d:a3:16:36:01:63:d2:44:bf:ac:66:34:
         72:51:4c:32:b9:53:44:ab:98:9b:b8:bc:77:69:3d:e1:cd:8d:
         47:f8:10:e0:66:43:ca:e4:48:2e:d3:93:65:ee:aa:3b:7c:d2:
         74:e7:ea:15:b1:17:0f:71:69:c9:39:49:c4:5e:9f:39:b1:cc:
         40:64:7e:f7:0b:95:26:0b:35:1f:be:78:43:0f:31:33:39:b7:
         8b:bf:2c:0b:86:9e:49:b1:36:c1:e7:61:f8:c2:b5:2e:69:f3:
         ad:77:66:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 24 16:28:30 2024 by rpki-client on console-fra.rpki-client.org