Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/1/323830343a353732383a3a2f33332d3333203d3e20323638303438.roa
File:                     323830343a353732383a3a2f33332d3333203d3e20323638303438.roa (raw, json)
Hash identifier:          5r85EeJFXJfJNEiumE7sNJVV09mk8vHqgOuzLjuQoAw=
Subject key identifier:   D2:ED:A7:3C:28:55:45:0B:3B:9B:D2:89:00:F4:23:27:67:95:48:5F
Certificate issuer:       /CN=3058D72DCDB85A7DB947F5E98A1FBC6C475AA757
Certificate serial:       1A7AC6FE736441C8BF89ABB70C16D908EC1AA549
Authority key identifier: 30:58:D7:2D:CD:B8:5A:7D:B9:47:F5:E9:8A:1F:BC:6C:47:5A:A7:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3058D72DCDB85A7DB947F5E98A1FBC6C475AA757.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/1/323830343a353732383a3a2f33332d3333203d3e20323638303438.roa
Signing time:             Tue 30 May 2023 16:09:12 +0000
ROA not before:           Tue 30 May 2023 16:04:12 +0000
ROA not after:            Tue 28 May 2024 16:09:12 +0000
asID:                     268048
IP address blocks:        2804:5728::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:7a:c6:fe:73:64:41:c8:bf:89:ab:b7:0c:16:d9:08:ec:1a:a5:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3058D72DCDB85A7DB947F5E98A1FBC6C475AA757
        Validity
            Not Before: May 30 16:04:12 2023 GMT
            Not After : May 28 16:09:12 2024 GMT
        Subject: CN=D2EDA73C2855450B3B9BD28900F423276795485F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:73:24:3b:6d:42:87:d4:dd:58:c7:bf:e2:bc:
                    00:40:45:08:97:0f:66:c8:13:a9:41:8f:dc:1b:1d:
                    93:f4:14:d6:31:2a:50:ca:50:4b:d8:d3:4b:2c:69:
                    3b:94:b7:c1:70:4c:79:3b:c4:ab:65:c9:af:7b:c5:
                    b8:31:12:c0:06:f5:7a:ff:97:23:73:0c:3e:b0:d0:
                    fe:7b:3f:5a:94:d7:70:f5:f2:f2:b8:12:c6:eb:e0:
                    43:5d:d2:24:40:59:81:c1:3e:f8:a7:ef:6e:19:ff:
                    b4:15:7a:72:85:55:a4:de:00:ac:c3:33:bc:04:23:
                    b7:32:95:32:42:52:f8:71:a8:2f:21:ec:8b:bc:5d:
                    0d:97:a8:05:fd:58:80:f6:60:49:6c:83:5c:d8:98:
                    41:7d:7a:cf:4e:46:6b:4c:31:b3:95:48:3f:86:a1:
                    ec:2f:b1:6e:21:7d:31:97:f3:53:b9:2e:e6:9c:73:
                    80:30:b1:42:73:ce:d1:e9:a1:41:94:35:d0:24:8f:
                    ba:77:0b:76:2c:24:47:3f:f9:a0:1b:ca:6e:5d:6b:
                    5b:3d:53:24:28:d8:59:2a:98:e6:65:8c:b4:26:eb:
                    59:4b:ed:3b:64:36:54:e0:88:df:8a:4d:ce:55:4a:
                    0b:09:38:d5:ec:66:c5:be:23:56:4b:98:f6:dc:02:
                    8b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:ED:A7:3C:28:55:45:0B:3B:9B:D2:89:00:F4:23:27:67:95:48:5F
            X509v3 Authority Key Identifier:
                keyid:30:58:D7:2D:CD:B8:5A:7D:B9:47:F5:E9:8A:1F:BC:6C:47:5A:A7:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/1/3058D72DCDB85A7DB947F5E98A1FBC6C475AA757.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3058D72DCDB85A7DB947F5E98A1FBC6C475AA757.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/1/323830343a353732383a3a2f33332d3333203d3e20323638303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5728::/33

    Signature Algorithm: sha256WithRSAEncryption
         aa:29:9a:75:b0:77:fc:78:54:e7:83:37:aa:ea:a6:cc:b6:13:
         4b:01:5d:90:21:1a:ae:e6:9c:ae:24:b6:dc:30:e2:21:6f:25:
         7d:84:3c:b7:70:ba:d3:5c:59:74:a7:b8:65:61:0b:06:6f:e2:
         b6:8b:cf:a9:1d:ce:40:d3:6f:59:f2:4b:0a:f1:83:ac:29:b6:
         fc:9a:d7:bd:7d:7d:72:32:18:35:db:e1:c9:db:66:c3:8c:42:
         c7:3f:e8:87:c2:b8:dc:77:5c:90:f2:ad:e7:2f:f7:01:58:36:
         88:a6:3f:56:b1:fe:ee:be:42:22:f7:0a:20:76:3e:f3:1e:8e:
         7c:04:20:8e:9d:01:4f:bc:ad:86:61:35:08:a4:1c:a7:89:9a:
         16:f7:d7:6a:e6:0e:73:62:60:1b:ad:f0:4a:f4:60:2c:75:33:
         08:aa:ae:05:12:76:1b:6b:92:b6:0b:54:66:23:27:ef:6c:fc:
         9a:70:4b:42:b9:b5:0d:8e:e7:ce:e6:f6:0e:56:02:3d:82:a3:
         4e:94:62:75:4f:f7:21:09:74:e8:e2:61:9f:77:78:b7:27:de:
         4d:8d:50:14:ba:1d:74:21:f7:be:e1:8e:50:39:01:75:d4:0e:
         b0:97:d7:14:c6:ed:c3:74:1a:27:71:79:d9:36:93:d7:4d:eb:
         ee:9c:d5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org