Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/323830343a356366633a633030303a3a2f33342d3334203d3e20323638393434.roa
File:                     323830343a356366633a633030303a3a2f33342d3334203d3e20323638393434.roa (raw, json)
Hash identifier:          jAlp1GRanGlWkZBHFfuXlbbuXu+fcMVqZTQQc9iNw9o=
Subject key identifier:   85:8B:E2:20:23:27:DC:6E:E2:08:54:C8:C6:A4:A2:45:5C:D5:A7:E4
Certificate issuer:       /CN=D1DA329465F62BCE99280EB16F4260FB32AE9DED
Certificate serial:       3450DA7390D8C4FEC638DD835FC1E81E2F276E40
Authority key identifier: D1:DA:32:94:65:F6:2B:CE:99:28:0E:B1:6F:42:60:FB:32:AE:9D:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1DA329465F62BCE99280EB16F4260FB32AE9DED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/323830343a356366633a633030303a3a2f33342d3334203d3e20323638393434.roa
Signing time:             Mon 22 May 2023 18:46:11 +0000
ROA not before:           Mon 22 May 2023 18:41:11 +0000
ROA not after:            Mon 20 May 2024 18:46:11 +0000
asID:                     268944
IP address blocks:        2804:5cfc:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:50:da:73:90:d8:c4:fe:c6:38:dd:83:5f:c1:e8:1e:2f:27:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1DA329465F62BCE99280EB16F4260FB32AE9DED
        Validity
            Not Before: May 22 18:41:11 2023 GMT
            Not After : May 20 18:46:11 2024 GMT
        Subject: CN=858BE2202327DC6EE20854C8C6A4A2455CD5A7E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5e:ef:cc:99:15:2e:67:43:52:a4:e3:b4:f9:
                    cf:64:3b:46:d7:a1:0e:47:eb:43:13:c5:8f:b0:8b:
                    63:0f:fd:dc:eb:38:ed:c4:cb:5b:d5:cd:f9:73:c0:
                    07:30:47:ff:0b:65:1a:e8:01:2e:ab:66:4d:b5:2d:
                    51:a5:72:c5:18:bb:90:16:17:95:29:49:09:31:38:
                    99:b7:fa:a6:c3:0b:10:86:7e:34:63:ca:94:4b:1f:
                    be:7d:83:91:38:a9:9b:2a:64:40:44:59:2f:66:93:
                    8f:ed:ab:17:4b:ff:c7:20:2c:cb:61:ec:6d:32:c1:
                    3c:79:e6:e9:4d:6f:03:87:77:1b:ac:87:8c:1b:dc:
                    2b:67:b8:b0:17:08:74:c2:c8:06:9f:12:86:31:fc:
                    09:ba:ad:44:cf:f7:31:b2:1c:7c:af:90:dc:d0:b2:
                    73:46:36:bd:de:25:1f:7f:bf:e0:d1:37:36:66:40:
                    97:21:6d:3b:e4:ed:78:d3:61:8f:92:2a:62:27:1c:
                    b7:64:63:09:93:e2:bc:2e:e1:bd:73:66:43:f0:c9:
                    9b:b0:65:3b:54:7a:10:a4:43:45:48:4e:d6:95:b2:
                    13:19:d1:5e:90:27:2c:a6:07:39:fd:5b:e9:28:cf:
                    23:69:e5:9c:82:0e:20:d8:63:dd:82:ad:c8:5a:a4:
                    3b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:8B:E2:20:23:27:DC:6E:E2:08:54:C8:C6:A4:A2:45:5C:D5:A7:E4
            X509v3 Authority Key Identifier:
                keyid:D1:DA:32:94:65:F6:2B:CE:99:28:0E:B1:6F:42:60:FB:32:AE:9D:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/D1DA329465F62BCE99280EB16F4260FB32AE9DED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1DA329465F62BCE99280EB16F4260FB32AE9DED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/323830343a356366633a633030303a3a2f33342d3334203d3e20323638393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5cfc:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         33:4e:2c:10:be:a6:4a:db:33:c4:97:ad:24:16:07:7e:a2:7c:
         16:44:b7:28:a7:1f:ac:fa:ff:84:03:71:27:c8:6d:ee:79:1a:
         61:01:42:ee:c8:57:80:34:d0:8e:1d:ce:82:87:7a:fa:fd:0d:
         a1:0d:21:0d:d1:f6:a8:3c:22:9d:ae:34:fa:21:1d:14:37:9d:
         5a:26:58:f5:b7:b2:a2:f5:10:a1:64:eb:c0:bd:d5:7c:52:1e:
         00:f4:ea:5e:07:5a:19:bf:de:25:47:e9:82:d5:49:b3:62:00:
         b7:99:08:dd:cc:8a:31:5b:00:63:7f:8f:38:00:bf:51:b3:7e:
         dd:63:27:b6:b8:9e:33:fa:0f:4c:2e:a0:c4:52:3d:08:cf:a0:
         3a:86:72:15:e7:83:9d:96:b3:61:ad:24:72:d9:ba:f7:9c:3c:
         93:12:94:1c:3d:39:b1:dd:bc:24:bd:9d:32:3f:df:4a:17:74:
         b9:8d:4c:6e:d8:0f:dc:11:14:3e:76:b4:fc:22:68:20:3b:1f:
         dc:0d:31:d8:82:45:da:95:66:59:48:b6:1b:11:8f:87:9a:66:
         cb:49:29:de:c4:93:29:f7:10:f2:b7:f1:9c:5d:bf:2d:a6:35:
         2b:b3:35:76:e5:dd:bd:62:08:3c:66:9c:c2:71:98:1a:8b:05:
         25:bd:ef:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org