Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/1/323830343a353732383a383030303a3a2f33342d3334203d3e20323638303438.roa
File:                     323830343a353732383a383030303a3a2f33342d3334203d3e20323638303438.roa (raw, json)
Hash identifier:          R+n2kBlV921zfGBfa4X3mi7lte0kplFZxVSsQ+1MY9s=
Subject key identifier:   CA:67:25:CA:82:7C:F5:FD:4B:B6:C7:9E:F4:BF:87:63:3D:1F:8D:71
Certificate issuer:       /CN=3058D72DCDB85A7DB947F5E98A1FBC6C475AA757
Certificate serial:       7852D31594B492CC6A653AE5180BB10A6E2A72A6
Authority key identifier: 30:58:D7:2D:CD:B8:5A:7D:B9:47:F5:E9:8A:1F:BC:6C:47:5A:A7:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3058D72DCDB85A7DB947F5E98A1FBC6C475AA757.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/1/323830343a353732383a383030303a3a2f33342d3334203d3e20323638303438.roa
Signing time:             Sat 20 May 2023 19:11:43 +0000
ROA not before:           Sat 20 May 2023 19:06:43 +0000
ROA not after:            Sat 18 May 2024 19:11:43 +0000
asID:                     268048
IP address blocks:        2804:5728:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:52:d3:15:94:b4:92:cc:6a:65:3a:e5:18:0b:b1:0a:6e:2a:72:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3058D72DCDB85A7DB947F5E98A1FBC6C475AA757
        Validity
            Not Before: May 20 19:06:43 2023 GMT
            Not After : May 18 19:11:43 2024 GMT
        Subject: CN=CA6725CA827CF5FD4BB6C79EF4BF87633D1F8D71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ed:90:ea:67:a1:02:94:71:28:d9:ca:86:9d:
                    60:21:99:1f:9c:92:fa:ae:13:65:f6:3c:18:26:92:
                    dd:c9:78:ba:81:84:b0:2b:c5:cf:77:ba:8d:04:18:
                    10:7f:bf:27:0e:6c:6e:fa:f3:38:d0:5a:dc:37:6a:
                    f2:38:7a:4c:82:db:2f:d8:99:a4:8a:38:9d:36:cf:
                    0b:ab:ea:86:94:b9:f7:b1:d3:fd:fc:25:a7:52:ac:
                    52:8e:76:f2:d9:89:b8:5a:29:ab:70:67:7e:be:8e:
                    b4:ab:8e:96:0e:2f:0e:fd:a7:68:bf:ea:28:a3:bc:
                    99:f7:3f:12:18:c7:39:41:95:18:bb:12:d7:c4:11:
                    16:67:88:0d:f0:b1:1a:78:f9:d1:bb:71:a0:b5:33:
                    d5:50:89:49:d8:a3:a4:bb:de:8e:5b:1c:d4:ec:ea:
                    24:96:d7:78:3a:f2:e2:60:bf:1c:7a:af:6c:b4:89:
                    ab:29:10:72:db:42:37:1c:0d:e3:e1:50:ef:62:4b:
                    4c:a6:68:99:d4:43:2e:42:80:f5:f0:4e:bb:c5:ae:
                    59:12:2a:08:45:0f:48:74:53:35:7a:74:7c:4a:c8:
                    ea:4e:90:c5:8b:28:8a:17:8f:b9:96:84:39:86:e3:
                    c3:23:b1:40:0e:37:09:75:21:9d:31:9d:87:47:65:
                    5c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:67:25:CA:82:7C:F5:FD:4B:B6:C7:9E:F4:BF:87:63:3D:1F:8D:71
            X509v3 Authority Key Identifier:
                keyid:30:58:D7:2D:CD:B8:5A:7D:B9:47:F5:E9:8A:1F:BC:6C:47:5A:A7:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/1/3058D72DCDB85A7DB947F5E98A1FBC6C475AA757.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3058D72DCDB85A7DB947F5E98A1FBC6C475AA757.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/1/323830343a353732383a383030303a3a2f33342d3334203d3e20323638303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5728:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7d:c0:c9:59:4c:64:fa:90:e5:c3:6d:e6:40:db:bd:46:6d:bd:
         3a:79:df:1d:7b:65:c8:37:e3:f8:e0:34:98:42:90:e9:c6:4b:
         c6:11:45:b0:e5:43:ca:b5:0d:bd:31:32:68:9a:2f:49:6f:55:
         08:ce:86:a5:e1:8e:0a:19:30:0d:69:d3:83:8c:79:1f:c8:89:
         ff:3c:59:30:6d:81:17:63:e8:30:73:90:34:9d:3a:e6:38:c5:
         64:f7:15:c4:a0:75:49:68:99:6f:6f:53:ef:b7:3b:d5:0d:86:
         42:c5:14:b4:8a:b7:d5:3b:29:47:99:93:7f:2c:7e:8d:6c:2a:
         37:0d:30:9b:82:19:ad:66:74:9d:02:1f:68:c1:22:c0:34:dc:
         2c:fa:41:8a:4f:64:6c:22:a7:1b:e8:22:b8:ae:9a:f6:28:34:
         f2:f2:9d:dd:85:2f:5f:ba:2f:f1:92:c7:da:e9:06:a2:d3:ef:
         fc:e7:ac:e6:63:e1:f6:00:12:86:c3:c5:46:b3:e8:bc:a8:f9:
         b8:53:d0:16:35:26:5a:e2:db:32:26:89:1d:ab:85:b1:37:a6:
         c1:28:df:65:4a:46:a8:7e:8f:80:72:e9:5c:74:11:cb:ed:96:
         11:85:5d:fe:48:ad:e3:7c:b6:cf:22:8b:2c:25:57:fb:fd:7f:
         f7:8e:20:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org