Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/323830343a3663633a3a2f33322d3332203d3e20323632363037.roa
File:                     323830343a3663633a3a2f33322d3332203d3e20323632363037.roa (raw, json)
Hash identifier:          9TpBVfG0JjYYQ6fBgiV1rOrRFa9mtvMlPoFBIpBUOKc=
Subject key identifier:   71:8D:1E:90:B6:D4:1E:8B:0E:E6:7C:90:37:DB:51:14:AF:64:F4:5F
Certificate issuer:       /CN=56D9A1201889650DCAB74085B3A0433357A372C2
Certificate serial:       01E790DF4936CB75800CCA9EBCB9300F1E050845
Authority key identifier: 56:D9:A1:20:18:89:65:0D:CA:B7:40:85:B3:A0:43:33:57:A3:72:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56D9A1201889650DCAB74085B3A0433357A372C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/323830343a3663633a3a2f33322d3332203d3e20323632363037.roa
Signing time:             Thu 06 Oct 2022 15:16:58 +0000
ROA not before:           Thu 06 Oct 2022 15:11:58 +0000
ROA not after:            Thu 05 Oct 2023 15:16:58 +0000
asID:                     262607
IP address blocks:        2804:6cc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:e7:90:df:49:36:cb:75:80:0c:ca:9e:bc:b9:30:0f:1e:05:08:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56D9A1201889650DCAB74085B3A0433357A372C2
        Validity
            Not Before: Oct  6 15:11:58 2022 GMT
            Not After : Oct  5 15:16:58 2023 GMT
        Subject: CN=718D1E90B6D41E8B0EE67C9037DB5114AF64F45F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a4:34:2a:5b:1b:de:6b:7f:36:2b:1d:f8:8d:
                    b8:3c:25:8c:4a:6f:92:e4:dd:36:3a:6c:6a:47:08:
                    c8:35:9f:f5:5b:2b:fc:66:d2:d3:92:45:4c:3d:23:
                    af:ba:74:16:d5:f3:16:32:07:9c:b4:45:71:3b:55:
                    c1:f1:6d:70:ad:f8:80:a8:bf:8d:ad:43:79:4e:b9:
                    53:3d:fe:60:78:93:45:53:17:3e:1e:3d:97:87:0c:
                    6f:45:85:f7:f3:e1:7c:fb:4e:42:81:ab:5d:45:93:
                    f6:ea:e1:7f:98:95:96:e1:04:02:cd:27:af:93:44:
                    9c:4c:46:ec:ef:a7:46:e2:46:35:05:6d:a6:75:a4:
                    82:f5:0d:e2:1d:c2:85:0d:16:58:66:38:cd:6d:50:
                    68:59:ab:37:b5:1e:7c:7f:37:af:26:90:eb:23:1e:
                    0b:2c:9d:b8:5c:62:a8:2d:7a:25:e4:29:15:58:e0:
                    c3:59:75:31:15:b9:10:fe:e9:5c:aa:4a:b0:41:d2:
                    84:cf:79:94:ce:a4:0f:a6:57:33:fe:ef:22:62:f1:
                    d4:ea:6c:99:20:50:e7:6b:71:eb:67:6f:98:0d:f0:
                    2a:76:e8:04:43:fd:23:43:3f:1c:86:eb:ff:99:71:
                    23:13:5e:4e:09:a1:52:f3:03:d1:b8:33:95:e9:bc:
                    df:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:8D:1E:90:B6:D4:1E:8B:0E:E6:7C:90:37:DB:51:14:AF:64:F4:5F
            X509v3 Authority Key Identifier:
                keyid:56:D9:A1:20:18:89:65:0D:CA:B7:40:85:B3:A0:43:33:57:A3:72:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/56D9A1201889650DCAB74085B3A0433357A372C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56D9A1201889650DCAB74085B3A0433357A372C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/323830343a3663633a3a2f33322d3332203d3e20323632363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:5b:d2:26:ec:21:1b:51:40:f3:a8:f6:87:16:ed:27:49:0f:
         04:09:55:d8:6f:c3:28:82:41:ba:7c:5c:ba:be:fa:96:50:c0:
         8b:ef:50:f8:4d:c8:36:df:77:c8:5e:18:c8:da:3f:3d:f0:35:
         bb:d2:4c:c8:ca:1f:68:bb:d7:e2:fb:58:cc:c7:6c:04:c8:86:
         56:0f:5b:2f:14:d5:67:b2:83:d7:4a:3a:67:de:82:23:c8:40:
         af:db:60:3d:41:38:90:b1:77:36:ef:57:ee:a8:8d:0c:3d:d5:
         d3:23:e2:2a:b6:f4:28:13:04:d4:09:6f:37:6c:8e:3f:e0:89:
         e3:a4:f4:a2:de:e1:d4:a9:2f:e5:48:1d:69:9a:ef:45:15:13:
         57:31:73:23:b1:ca:bd:b1:c7:e0:02:68:99:86:73:9f:4e:57:
         a1:0a:61:59:37:12:83:4c:0e:57:34:dd:65:83:ab:74:9c:b3:
         6e:43:5c:74:24:af:49:3d:fe:63:c5:08:87:86:33:8c:0a:11:
         94:f1:04:b5:35:b6:b8:73:ac:45:6c:e4:48:4b:1c:c3:f9:24:
         b2:0a:52:c6:5e:a2:42:8d:40:cc:f2:13:5e:c0:1a:55:d0:ad:
         77:13:25:24:43:87:e8:0b:8b:c2:36:e9:99:f7:f3:5c:dd:ad:
         6d:ff:e1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org