Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/323830343a356366633a343030303a3a2f33342d3334203d3e20323638393434.roa
File:                     323830343a356366633a343030303a3a2f33342d3334203d3e20323638393434.roa (raw, json)
Hash identifier:          D4pfNQebYE/3SyfdzolYJbX97HZ0eYMtV2jLhmMo5ZI=
Subject key identifier:   82:F8:DD:41:4A:51:04:2A:F3:1F:31:26:FA:ED:5F:EF:75:51:AE:7F
Certificate issuer:       /CN=D1DA329465F62BCE99280EB16F4260FB32AE9DED
Certificate serial:       34D9372F3AE3F86B4B0EEFA76DDA80858CB03FF9
Authority key identifier: D1:DA:32:94:65:F6:2B:CE:99:28:0E:B1:6F:42:60:FB:32:AE:9D:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1DA329465F62BCE99280EB16F4260FB32AE9DED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/323830343a356366633a343030303a3a2f33342d3334203d3e20323638393434.roa
Signing time:             Mon 22 May 2023 18:45:35 +0000
ROA not before:           Mon 22 May 2023 18:40:35 +0000
ROA not after:            Mon 20 May 2024 18:45:35 +0000
asID:                     268944
IP address blocks:        2804:5cfc:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:d9:37:2f:3a:e3:f8:6b:4b:0e:ef:a7:6d:da:80:85:8c:b0:3f:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1DA329465F62BCE99280EB16F4260FB32AE9DED
        Validity
            Not Before: May 22 18:40:35 2023 GMT
            Not After : May 20 18:45:35 2024 GMT
        Subject: CN=82F8DD414A51042AF31F3126FAED5FEF7551AE7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ab:2e:c1:29:ce:9d:1c:e0:c8:0c:62:f8:6f:
                    7f:46:9d:28:0f:b5:00:7d:f1:1f:1f:bd:8e:e7:28:
                    9a:81:07:af:92:c8:5b:27:12:ae:72:9f:71:2b:fb:
                    bc:73:05:80:10:7a:7f:89:bb:d7:43:d8:7a:59:61:
                    df:35:ea:3c:43:35:8c:52:00:ea:0a:d6:23:2c:76:
                    7e:14:d7:44:c7:ff:29:93:99:6b:f3:2e:96:0b:66:
                    70:91:98:eb:b1:a4:9f:8b:36:48:b4:95:56:9d:9b:
                    9e:01:e2:3b:36:70:84:6f:0a:3c:5e:10:20:7e:84:
                    45:19:d5:77:e3:81:a1:88:a6:d8:11:bb:f9:27:8a:
                    84:b6:ac:47:e5:60:d0:4c:db:70:e5:8e:b2:64:0c:
                    c2:5b:21:63:f5:cb:5b:c6:39:c5:48:be:d0:6b:0e:
                    36:01:85:d5:94:ef:ca:d0:9e:62:40:23:c5:9e:6d:
                    1d:8a:fb:44:ea:c0:2a:ae:1e:c3:6a:0e:4f:3d:39:
                    71:73:04:ad:db:38:27:c4:99:70:33:2b:f9:87:b6:
                    1e:03:b2:8a:25:11:ee:d2:6f:fb:e5:59:b1:1d:27:
                    d0:24:d0:5c:61:c8:14:ab:05:fa:14:60:fa:9e:ae:
                    ef:99:38:e9:38:99:4a:fa:10:fc:c6:64:af:fb:48:
                    4b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F8:DD:41:4A:51:04:2A:F3:1F:31:26:FA:ED:5F:EF:75:51:AE:7F
            X509v3 Authority Key Identifier:
                keyid:D1:DA:32:94:65:F6:2B:CE:99:28:0E:B1:6F:42:60:FB:32:AE:9D:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/D1DA329465F62BCE99280EB16F4260FB32AE9DED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1DA329465F62BCE99280EB16F4260FB32AE9DED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/323830343a356366633a343030303a3a2f33342d3334203d3e20323638393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5cfc:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         9c:e9:6c:a7:e2:03:86:6c:0a:1a:d4:93:ff:55:5b:c5:21:77:
         83:61:45:df:0c:2c:b2:b9:00:53:a9:8e:9a:89:29:a6:f0:4d:
         49:25:c6:42:66:a3:7d:34:20:9b:46:75:1b:f3:7a:8d:61:5c:
         47:91:fb:f5:2a:60:ac:26:8d:76:1f:15:82:98:e5:43:5b:2a:
         0d:69:79:c0:20:fc:97:e9:95:32:27:75:7e:29:5b:61:ed:47:
         11:82:d4:6e:dc:9f:ac:07:d6:e8:7d:d7:71:82:e6:03:1f:f4:
         f7:07:c1:ae:a4:9f:d7:33:06:d5:bd:47:df:59:34:fa:75:bf:
         56:9e:ec:ee:28:10:6f:f1:f4:ea:1b:26:76:6e:d0:39:66:be:
         8e:11:44:81:f1:b1:09:6a:3f:11:06:00:07:3a:2b:42:f5:d5:
         47:31:b9:6d:76:42:6b:7f:21:a7:4d:bf:37:fc:80:4b:d8:31:
         65:e4:a3:3f:6d:44:bb:f7:03:6b:fd:5f:23:67:06:02:b0:0e:
         82:37:0e:e5:56:5f:95:9a:1a:79:e7:f6:f9:bf:12:9a:55:b7:
         88:9a:bb:fd:ff:2d:9e:e1:36:b9:6a:54:91:44:4a:ff:6e:c4:
         44:75:3c:f1:51:ad:bd:2f:ea:8b:b0:72:4d:28:e3:b8:b7:03:
         3d:10:b5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org