Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/1/323830343a3562303a383030303a3a2f33332d3333203d3e20323636313831.roa
File:                     323830343a3562303a383030303a3a2f33332d3333203d3e20323636313831.roa (raw, json)
Hash identifier:          +2htlEPzXKq/ffyv15H5+vQBA+/3yJwYZh1xPzQUGzA=
Subject key identifier:   C9:28:A5:5A:E9:8D:5A:99:60:38:46:E5:3A:12:2D:00:A0:07:7D:80
Certificate issuer:       /CN=ED3E39FA4408538D2B9D76E372D1662D7778B8B9
Certificate serial:       22F42DE55F43BBD275AADECEC2453D60706FFC74
Authority key identifier: ED:3E:39:FA:44:08:53:8D:2B:9D:76:E3:72:D1:66:2D:77:78:B8:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ED3E39FA4408538D2B9D76E372D1662D7778B8B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/1/323830343a3562303a383030303a3a2f33332d3333203d3e20323636313831.roa
Signing time:             Wed 16 Nov 2022 16:00:03 +0000
ROA not before:           Wed 16 Nov 2022 15:55:03 +0000
ROA not after:            Wed 15 Nov 2023 16:00:03 +0000
asID:                     266181
IP address blocks:        2804:5b0:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f4:2d:e5:5f:43:bb:d2:75:aa:de:ce:c2:45:3d:60:70:6f:fc:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED3E39FA4408538D2B9D76E372D1662D7778B8B9
        Validity
            Not Before: Nov 16 15:55:03 2022 GMT
            Not After : Nov 15 16:00:03 2023 GMT
        Subject: CN=C928A55AE98D5A99603846E53A122D00A0077D80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e3:b3:47:c4:b8:06:35:8d:f6:c2:c6:0a:ae:
                    0c:a7:f7:7b:6f:8a:31:8d:2c:44:ec:79:ac:93:17:
                    5c:d0:d1:34:5e:98:57:52:95:04:95:07:3e:81:e0:
                    70:c3:bc:46:5f:0e:e4:be:d4:ea:66:de:66:34:2a:
                    55:24:48:f4:c7:8d:51:e8:d9:37:c4:d3:17:4f:ce:
                    33:58:3c:a3:0f:d7:67:4a:83:bc:60:d6:9a:e8:3f:
                    2c:a7:7b:f0:ff:d4:d7:8d:77:62:96:a3:f8:f2:d5:
                    95:a7:f5:be:16:ae:34:c0:45:da:76:8a:34:cb:ef:
                    0f:7b:a7:0f:ac:f1:5e:39:94:67:db:95:d1:68:e0:
                    42:92:5a:5f:30:68:47:de:66:b7:cc:11:5e:8e:5d:
                    69:53:ef:e5:94:7f:5b:ba:07:bf:1f:e8:a0:af:26:
                    07:92:22:0d:93:9f:69:0d:65:a4:de:17:84:94:20:
                    5d:96:1b:82:8c:b0:c1:0e:22:36:a7:b8:1c:9c:a7:
                    83:a6:40:75:4d:67:90:a1:a8:6f:ff:bc:4c:55:14:
                    e5:07:58:ee:97:43:5a:27:e8:20:c5:13:3c:84:4e:
                    47:ae:7b:1b:2b:50:83:61:bd:f3:0f:5f:b2:b2:30:
                    a9:5f:1d:76:c3:9f:8a:66:95:fd:9e:21:4d:37:39:
                    38:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:28:A5:5A:E9:8D:5A:99:60:38:46:E5:3A:12:2D:00:A0:07:7D:80
            X509v3 Authority Key Identifier:
                keyid:ED:3E:39:FA:44:08:53:8D:2B:9D:76:E3:72:D1:66:2D:77:78:B8:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/1/ED3E39FA4408538D2B9D76E372D1662D7778B8B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ED3E39FA4408538D2B9D76E372D1662D7778B8B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/1/323830343a3562303a383030303a3a2f33332d3333203d3e20323636313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         61:53:e6:a0:d2:c1:fa:05:7e:c4:b9:ce:f1:82:a6:75:81:4d:
         73:27:c3:99:e9:93:3e:85:a8:e3:f6:84:c6:74:20:9a:e5:2d:
         5d:27:43:6e:7e:e4:f3:b4:9e:ef:c5:bc:da:ec:0c:de:db:cf:
         2a:84:87:fd:78:69:e8:87:b8:93:b1:fd:08:36:50:f7:30:5e:
         54:b6:c1:7a:f6:dd:32:39:c0:ba:a3:ec:a3:65:45:d8:dd:ab:
         ba:20:16:30:4c:fa:ce:49:8d:2d:9c:04:6b:d9:30:bb:a0:3a:
         32:85:6d:67:18:58:c8:8f:6c:43:09:84:7a:19:c1:85:da:c1:
         a6:c3:68:a3:98:d4:16:ab:7b:67:7f:23:3c:09:25:16:b5:5e:
         6d:87:93:07:83:e5:1e:2f:cb:79:f3:eb:95:6d:5e:2a:3b:d7:
         52:b5:f3:73:28:45:d9:4c:e0:29:8f:00:b4:23:98:bc:7a:05:
         c9:f0:63:16:ae:2e:ca:b7:f1:5e:85:70:d0:7f:64:8c:3e:be:
         62:d2:70:65:b5:f8:02:b8:70:22:dd:6a:e8:28:72:5e:7a:3d:
         49:5d:4c:d5:23:9e:ac:2b:5b:26:cc:70:e7:99:f4:67:e5:f9:
         49:77:76:94:8d:b0:a6:2c:4a:3b:34:23:cc:23:be:97:3d:a6:
         4d:17:91:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org