Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/323830343a356366633a3a2f33332d3333203d3e20323638393434.roa
File:                     323830343a356366633a3a2f33332d3333203d3e20323638393434.roa (raw, json)
Hash identifier:          1AuvOn8UCVoe1xpOEG9mRkNfOKBo23y5L1BJKTnuVI8=
Subject key identifier:   A1:08:26:BE:C0:7A:98:5C:D3:A0:D6:EB:CD:67:3E:18:D2:8C:F4:94
Certificate issuer:       /CN=D1DA329465F62BCE99280EB16F4260FB32AE9DED
Certificate serial:       60564038A37B8BD0ED4270ACD9FCC83724B235AE
Authority key identifier: D1:DA:32:94:65:F6:2B:CE:99:28:0E:B1:6F:42:60:FB:32:AE:9D:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1DA329465F62BCE99280EB16F4260FB32AE9DED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/323830343a356366633a3a2f33332d3333203d3e20323638393434.roa
Signing time:             Mon 22 May 2023 18:45:06 +0000
ROA not before:           Mon 22 May 2023 18:40:06 +0000
ROA not after:            Mon 20 May 2024 18:45:06 +0000
asID:                     268944
IP address blocks:        2804:5cfc::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:56:40:38:a3:7b:8b:d0:ed:42:70:ac:d9:fc:c8:37:24:b2:35:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1DA329465F62BCE99280EB16F4260FB32AE9DED
        Validity
            Not Before: May 22 18:40:06 2023 GMT
            Not After : May 20 18:45:06 2024 GMT
        Subject: CN=A10826BEC07A985CD3A0D6EBCD673E18D28CF494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ff:3e:81:d5:da:e8:3f:74:26:24:df:60:b8:
                    dd:c4:bc:9a:07:0d:cf:5b:ca:37:d2:2c:03:b9:c6:
                    f2:e5:56:d2:1f:26:18:00:43:2f:c9:06:27:21:c8:
                    f8:63:4b:ba:01:a2:74:10:ca:e9:90:aa:3c:1c:47:
                    45:2c:7e:d1:c0:dc:5e:a0:34:0d:83:1f:3d:2f:64:
                    5f:14:17:04:99:78:a6:2e:eb:8a:a0:6a:d1:16:e9:
                    f9:91:08:f2:2f:1f:45:10:22:a6:d9:93:b8:be:e9:
                    44:11:0e:9c:50:12:4d:1a:a5:a7:aa:11:a2:f1:cb:
                    ba:cd:87:36:2a:e3:a8:2b:e4:ba:53:76:e6:dd:00:
                    bd:18:62:a2:e2:8b:94:ee:d1:cc:58:77:2b:c1:6c:
                    26:89:d2:bc:13:b8:1f:a8:6c:6c:a3:31:0a:83:6e:
                    78:05:12:41:70:94:fc:ff:d2:c3:96:a1:f0:e0:e5:
                    ba:05:bc:85:18:be:3f:33:37:ca:f9:72:a7:66:d2:
                    5d:cf:a4:d0:a0:c7:38:16:f6:fa:ff:00:a2:47:35:
                    19:5e:73:cd:88:b9:dd:09:d8:9c:e1:cc:7f:b3:d0:
                    77:86:d4:c6:9a:59:26:76:9c:a7:82:7d:51:65:53:
                    b5:83:5d:51:9d:69:fb:e4:4c:f1:81:50:37:2b:1e:
                    a2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:08:26:BE:C0:7A:98:5C:D3:A0:D6:EB:CD:67:3E:18:D2:8C:F4:94
            X509v3 Authority Key Identifier:
                keyid:D1:DA:32:94:65:F6:2B:CE:99:28:0E:B1:6F:42:60:FB:32:AE:9D:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/D1DA329465F62BCE99280EB16F4260FB32AE9DED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1DA329465F62BCE99280EB16F4260FB32AE9DED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/323830343a356366633a3a2f33332d3333203d3e20323638393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5cfc::/33

    Signature Algorithm: sha256WithRSAEncryption
         73:ad:ac:14:7b:d2:4f:cc:57:a5:04:4b:69:95:68:2c:bb:b2:
         a1:1e:6c:b7:d2:5d:e7:61:44:2b:48:69:53:f2:b0:c2:aa:a2:
         91:c6:98:60:21:e0:60:f2:fd:ba:ab:86:2c:b7:65:95:b3:d2:
         ff:d2:88:e4:35:d4:79:39:bb:50:d6:ca:40:72:e7:9d:04:ee:
         1b:31:98:3c:5f:81:30:2d:ff:f9:c2:57:90:61:fe:67:98:79:
         d4:33:5d:a2:ba:69:98:af:26:a0:d3:16:0b:cf:be:92:30:79:
         b8:7a:82:d1:0b:a8:bb:c6:a9:1d:e0:1b:c0:35:ca:41:73:18:
         6d:92:68:52:dc:78:28:cf:7a:57:af:7a:36:56:ca:43:8a:30:
         f4:c0:dc:f5:8e:f0:13:33:ea:73:ee:3c:07:fb:5c:89:79:e4:
         c8:83:96:d4:31:ed:f6:1a:d3:44:1c:19:82:ab:65:0b:35:ea:
         b7:ea:ed:fa:41:c9:9f:6c:39:0f:81:41:fe:20:d7:7e:04:23:
         79:49:d3:b4:ea:6e:d6:8f:95:be:fd:cc:4a:ed:87:11:10:f5:
         62:98:66:91:40:30:24:31:d8:cf:a7:57:68:b7:84:b4:f7:87:
         03:d5:a9:b8:22:fc:0e:59:3e:77:27:ec:d5:f3:11:b6:b7:cb:
         6b:93:4e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org