Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84qQtB9gKeTooNN3Jq223AgQSJ4dt1KMixqrPxnU73tJ/0/323830343a326265633a383030303a3a2f33332d3333203d3e20323637353735.roa
File:                     323830343a326265633a383030303a3a2f33332d3333203d3e20323637353735.roa (raw, json)
Hash identifier:          K4od4m44dgAfspTMJNPRxu0w/B/J3tOcwEdRZ9tGJqo=
Subject key identifier:   BF:D3:45:3C:54:ED:E1:57:03:EE:43:1F:0A:2C:A5:39:20:A7:42:2F
Certificate issuer:       /CN=5B8999B95B472059B9F7165BF2FBA2F7CBC2EC4C
Certificate serial:       6D3BDCFFCA0359E3D4AAB20CBFE8DE65772BBDB0
Authority key identifier: 5B:89:99:B9:5B:47:20:59:B9:F7:16:5B:F2:FB:A2:F7:CB:C2:EC:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B8999B95B472059B9F7165BF2FBA2F7CBC2EC4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84qQtB9gKeTooNN3Jq223AgQSJ4dt1KMixqrPxnU73tJ/0/323830343a326265633a383030303a3a2f33332d3333203d3e20323637353735.roa
Signing time:             Fri 09 Sep 2022 01:27:31 +0000
ROA not before:           Fri 09 Sep 2022 01:22:31 +0000
ROA not after:            Fri 08 Sep 2023 01:27:31 +0000
asID:                     267575
IP address blocks:        2804:2bec:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:3b:dc:ff:ca:03:59:e3:d4:aa:b2:0c:bf:e8:de:65:77:2b:bd:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B8999B95B472059B9F7165BF2FBA2F7CBC2EC4C
        Validity
            Not Before: Sep  9 01:22:31 2022 GMT
            Not After : Sep  8 01:27:31 2023 GMT
        Subject: CN=BFD3453C54EDE15703EE431F0A2CA53920A7422F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5f:d5:07:01:6a:34:0b:30:80:67:6e:65:6f:
                    dd:36:a3:c8:36:d5:2e:8a:d7:98:f8:a8:c1:04:68:
                    a0:80:e4:e1:11:0c:26:c6:29:88:66:b6:5d:ac:93:
                    be:ad:ba:bb:db:ed:2a:30:d8:55:a6:85:df:28:a8:
                    8b:cd:79:ab:9e:0c:02:92:b9:ac:02:a2:1d:ce:9c:
                    c3:fe:e7:e3:5e:33:6c:04:77:e7:15:d4:89:e9:47:
                    4f:74:5f:b2:cd:7b:cc:a8:f7:2c:03:ae:7b:6f:b8:
                    45:22:ba:3c:db:b7:54:e3:51:87:67:83:cf:3a:18:
                    09:2c:e9:a1:01:22:ef:eb:3d:a0:6e:fa:7d:39:f1:
                    eb:68:6a:cc:ce:5a:75:cf:30:81:37:d2:43:6e:4f:
                    07:fa:3e:9f:ce:86:f3:71:de:fc:c4:fb:54:bd:dd:
                    5c:36:4d:8a:d5:a0:53:f2:a8:dc:06:59:2f:33:e3:
                    17:4d:6e:7b:d9:27:e5:4e:f4:fe:4d:78:b5:ea:11:
                    d9:70:94:39:33:6f:4e:7b:dd:a1:3e:ae:58:50:33:
                    ab:cf:b0:76:29:d9:9a:a0:31:e6:a7:39:d8:1a:84:
                    33:76:4c:b5:41:e1:79:21:da:9b:e0:67:87:88:03:
                    f8:ef:7e:ea:d4:7b:e0:59:98:d0:19:2c:d8:8c:56:
                    56:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D3:45:3C:54:ED:E1:57:03:EE:43:1F:0A:2C:A5:39:20:A7:42:2F
            X509v3 Authority Key Identifier:
                keyid:5B:89:99:B9:5B:47:20:59:B9:F7:16:5B:F2:FB:A2:F7:CB:C2:EC:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84qQtB9gKeTooNN3Jq223AgQSJ4dt1KMixqrPxnU73tJ/0/5B8999B95B472059B9F7165BF2FBA2F7CBC2EC4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B8999B95B472059B9F7165BF2FBA2F7CBC2EC4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84qQtB9gKeTooNN3Jq223AgQSJ4dt1KMixqrPxnU73tJ/0/323830343a326265633a383030303a3a2f33332d3333203d3e20323637353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bec:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         6d:ff:d6:1c:60:73:9e:10:91:ea:e6:fa:d4:dc:59:a7:3e:e1:
         24:70:55:3c:73:53:8e:2c:6b:11:1e:e3:7f:76:7e:91:13:f9:
         cb:44:80:15:30:5f:87:6b:ea:ac:3d:0b:f1:12:94:59:50:bb:
         76:e0:a1:08:f7:35:ce:b3:74:dd:c8:ec:d1:de:dd:6f:51:3f:
         ea:4d:6a:4f:fd:6a:26:e0:d0:91:b7:b0:7f:49:c1:a8:dd:d5:
         e5:bf:47:89:72:ba:d9:85:5e:ce:49:74:d6:1c:01:fa:38:12:
         be:fd:54:ff:d9:8b:3b:1b:32:ab:83:5b:67:91:ce:42:87:95:
         28:d5:f4:6f:6a:cb:8b:ff:c3:21:3c:08:83:18:d9:c4:07:9c:
         ab:46:4b:ed:8f:2e:f1:1e:dd:aa:b6:a7:d6:e5:ed:3b:db:9d:
         31:b8:11:81:59:1e:23:c7:54:8f:d3:9c:f3:c3:31:fb:d0:00:
         6c:42:eb:e7:51:8f:70:a2:78:7f:24:80:83:71:6f:ba:3e:49:
         2b:7b:a6:86:a3:7d:08:f2:6a:0a:6c:c8:e6:56:10:13:ff:58:
         2a:92:83:7b:1c:fa:f8:03:da:b5:c3:e1:fd:9e:1f:13:69:28:
         6c:d6:aa:83:86:68:fc:b0:45:06:84:5e:cd:de:89:3e:0b:d9:
         1d:8a:f2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org