Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/323830343a353966383a3a2f33322d313238203d3e20323638373337.roa
File:                     323830343a353966383a3a2f33322d313238203d3e20323638373337.roa (raw, json)
Hash identifier:          hasjE0xbZpWRxzKLYYbGWYBXF3j2IUFX/wl+c7ZQKfE=
Subject key identifier:   1E:34:71:04:B1:98:3A:FE:D1:22:4F:B8:D4:0B:60:38:E2:B6:B2:0E
Certificate issuer:       /CN=5D769FC7E464206BDC49F515B2AF36E50925868C
Certificate serial:       2C35E1C9EB0BDBF5EB0BEF6EF064F9BE57A86DE7
Authority key identifier: 5D:76:9F:C7:E4:64:20:6B:DC:49:F5:15:B2:AF:36:E5:09:25:86:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D769FC7E464206BDC49F515B2AF36E50925868C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/323830343a353966383a3a2f33322d313238203d3e20323638373337.roa
Signing time:             Wed 12 Apr 2023 11:33:34 +0000
ROA not before:           Wed 12 Apr 2023 11:28:34 +0000
ROA not after:            Wed 10 Apr 2024 11:33:34 +0000
asID:                     268737
IP address blocks:        2804:59f8::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:35:e1:c9:eb:0b:db:f5:eb:0b:ef:6e:f0:64:f9:be:57:a8:6d:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D769FC7E464206BDC49F515B2AF36E50925868C
        Validity
            Not Before: Apr 12 11:28:34 2023 GMT
            Not After : Apr 10 11:33:34 2024 GMT
        Subject: CN=1E347104B1983AFED1224FB8D40B6038E2B6B20E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9d:1a:8d:b2:40:df:cc:b0:b3:22:b0:57:4b:
                    8f:9c:71:d3:b2:dd:bc:38:ac:03:e4:9a:9a:52:c6:
                    5e:62:33:68:af:c2:bf:73:80:e9:11:12:8f:45:2a:
                    3f:e9:06:7e:3b:4e:d5:e4:62:8a:ef:cc:08:79:08:
                    f7:6c:20:ad:94:12:4a:0a:ad:47:f8:a6:07:0e:6e:
                    0e:12:26:3d:42:e1:d6:a9:bb:3f:a6:48:9e:f2:9a:
                    ac:b1:b1:e0:60:52:43:9f:05:31:10:4b:5b:80:48:
                    87:eb:7d:e3:06:5d:26:46:6d:80:b7:59:e2:5b:f5:
                    77:00:68:2c:18:0c:d3:d3:6f:c3:63:9b:8c:55:7a:
                    72:cc:38:04:52:14:f3:c7:f2:57:13:e7:9b:1e:31:
                    0e:a3:dc:6f:e4:d5:a8:be:7a:61:48:f5:1b:5b:b7:
                    c1:10:d4:f0:2f:0f:2c:41:f5:72:b5:f0:9d:e7:91:
                    12:b5:40:eb:b0:1b:c3:d7:5d:6a:49:3b:b7:0a:36:
                    dc:e6:85:e7:d9:2a:27:eb:5c:df:cd:99:96:ca:0d:
                    9f:05:66:7d:ff:2d:7e:57:a7:7f:ea:57:1a:78:6a:
                    94:46:73:a5:95:25:2c:28:93:67:1e:a2:06:ee:14:
                    66:8f:d1:5f:04:7a:c6:e1:98:da:13:6a:17:e8:18:
                    68:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:34:71:04:B1:98:3A:FE:D1:22:4F:B8:D4:0B:60:38:E2:B6:B2:0E
            X509v3 Authority Key Identifier:
                keyid:5D:76:9F:C7:E4:64:20:6B:DC:49:F5:15:B2:AF:36:E5:09:25:86:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/5D769FC7E464206BDC49F515B2AF36E50925868C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D769FC7E464206BDC49F515B2AF36E50925868C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/323830343a353966383a3a2f33322d313238203d3e20323638373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:32:41:9a:f0:5e:ba:62:c8:84:be:f9:c4:8f:43:f5:4b:df:
         29:61:e0:97:34:b3:02:1f:fb:f4:a7:02:db:29:a5:ee:6a:b2:
         0e:62:fa:99:f9:f6:a4:62:a6:be:e3:d8:02:2b:a1:24:9d:c9:
         ca:84:e4:84:01:64:3e:f8:e8:0e:87:63:46:83:43:b3:54:cc:
         03:04:3f:11:f3:72:f9:d5:d7:96:df:03:f2:5a:cb:8b:8c:26:
         a5:f9:20:f7:1f:cd:20:72:d0:e3:a8:05:d4:58:6b:62:d3:99:
         6d:4b:46:ff:fe:b8:8e:5f:bd:6d:d4:28:7e:1b:fa:34:07:17:
         cf:33:a2:92:a6:32:64:5c:db:85:99:6f:ab:87:a3:0f:76:c4:
         67:d4:89:f2:ee:e5:66:3d:87:b8:d9:b8:64:c5:6e:9c:d1:ef:
         34:9e:e6:2a:e8:61:ba:1c:c4:ba:05:85:8e:cc:ef:f0:ce:3e:
         6f:cd:2b:be:47:72:54:20:8f:76:45:5d:00:1a:a5:22:e0:68:
         e5:61:55:23:54:f7:d5:39:55:f5:6c:53:19:be:76:70:62:08:
         d6:3b:fb:fc:5f:d0:4b:64:84:71:8b:a5:34:83:9d:ca:dc:ba:
         5d:79:27:08:1e:bf:ad:be:6d:71:28:ca:97:d8:35:4a:c2:9c:
         39:86:2f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:58 2024 by rpki-client on console-fra.rpki-client.org