Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/1/323830343a353732383a633030303a3a2f33342d3334203d3e20323638303438.roa
File:                     323830343a353732383a633030303a3a2f33342d3334203d3e20323638303438.roa (raw, json)
Hash identifier:          +bVONROJekYTtwPgOGtSEK5nNm8Dp93QD+YwVJT0bFM=
Subject key identifier:   51:99:F3:D8:84:BE:4C:7D:82:44:10:40:EA:CC:8F:D2:22:05:B8:D9
Certificate issuer:       /CN=3058D72DCDB85A7DB947F5E98A1FBC6C475AA757
Certificate serial:       4353F8F6B9A7600FA900B8A9C2582D5472866770
Authority key identifier: 30:58:D7:2D:CD:B8:5A:7D:B9:47:F5:E9:8A:1F:BC:6C:47:5A:A7:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3058D72DCDB85A7DB947F5E98A1FBC6C475AA757.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/1/323830343a353732383a633030303a3a2f33342d3334203d3e20323638303438.roa
Signing time:             Sat 20 May 2023 19:12:05 +0000
ROA not before:           Sat 20 May 2023 19:07:05 +0000
ROA not after:            Sat 18 May 2024 19:12:05 +0000
asID:                     268048
IP address blocks:        2804:5728:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:53:f8:f6:b9:a7:60:0f:a9:00:b8:a9:c2:58:2d:54:72:86:67:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3058D72DCDB85A7DB947F5E98A1FBC6C475AA757
        Validity
            Not Before: May 20 19:07:05 2023 GMT
            Not After : May 18 19:12:05 2024 GMT
        Subject: CN=5199F3D884BE4C7D82441040EACC8FD22205B8D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4b:9f:bc:02:28:98:59:9c:02:d5:bf:f1:19:
                    98:f0:bb:ad:8d:f4:74:b8:01:82:1d:3d:69:92:16:
                    0d:80:cd:4e:cb:f1:83:27:b6:21:6d:fd:f3:bc:fc:
                    79:4f:3d:70:29:54:da:75:42:48:00:b5:d2:77:a2:
                    d2:f7:54:e5:44:01:2f:fc:51:45:36:4e:27:ce:ae:
                    40:20:d8:5b:4a:5b:54:9f:a9:99:7f:8f:01:c8:6d:
                    c7:f3:5a:b9:c7:d7:f4:ec:57:d0:12:f2:91:7c:53:
                    b5:d6:8d:c3:eb:13:86:e1:87:36:c5:ce:46:1b:4a:
                    ee:d6:62:a9:fd:6b:1b:e4:d9:a9:7d:c3:f3:d2:07:
                    eb:fd:c1:3a:39:c6:28:98:06:1a:07:82:0f:4d:b4:
                    4c:fd:b4:50:85:85:51:3b:7c:90:5a:d6:6f:7b:bd:
                    8b:ed:1c:60:09:2c:17:ea:73:0c:d4:da:bf:4a:d4:
                    d7:ce:05:b7:8a:83:80:cc:3a:6f:02:3a:a3:a7:07:
                    e5:61:c9:e2:32:03:1f:4e:b1:19:5c:3c:7b:75:b9:
                    66:59:1b:16:3f:ad:83:38:6b:54:82:29:8d:35:58:
                    28:ac:e3:cd:f0:fa:f2:cd:75:8f:14:96:a6:66:0c:
                    13:46:8c:11:0d:b5:ca:15:0e:ca:d2:8b:b4:2c:73:
                    7f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:99:F3:D8:84:BE:4C:7D:82:44:10:40:EA:CC:8F:D2:22:05:B8:D9
            X509v3 Authority Key Identifier:
                keyid:30:58:D7:2D:CD:B8:5A:7D:B9:47:F5:E9:8A:1F:BC:6C:47:5A:A7:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/1/3058D72DCDB85A7DB947F5E98A1FBC6C475AA757.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3058D72DCDB85A7DB947F5E98A1FBC6C475AA757.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/1/323830343a353732383a633030303a3a2f33342d3334203d3e20323638303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5728:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         ca:a4:a2:c1:c8:28:8b:8b:20:cb:4c:63:cf:36:af:a9:73:b2:
         9d:6b:a0:1d:38:c9:54:60:e4:58:1c:2b:67:dc:ed:19:45:43:
         96:ef:5e:1c:bf:a6:f2:4f:88:d5:79:ac:80:d4:84:31:18:f2:
         cd:36:a9:e9:89:b7:77:a0:3b:2b:35:9c:99:33:ca:01:d0:28:
         fd:28:9a:11:a5:50:15:ff:6e:25:a3:68:5d:1d:98:72:a8:53:
         b1:f7:af:2c:1b:05:64:7d:d2:00:65:07:d1:14:68:68:01:63:
         2a:19:0f:b7:33:47:8f:b4:2f:84:ca:02:f8:1c:ea:e8:a7:7d:
         e4:71:8c:b5:39:b9:d1:32:2b:12:55:ec:56:08:b7:88:86:74:
         7f:19:2e:ef:8e:27:69:3a:64:a4:18:6b:85:6f:1b:49:58:51:
         88:27:28:c4:5d:00:f1:d7:55:74:58:96:8b:6e:0a:62:e6:8e:
         53:51:b2:6b:82:29:05:65:14:b3:0c:b4:09:94:15:2c:e0:8d:
         89:d4:37:de:fe:35:26:56:75:40:69:eb:72:a7:10:f8:34:e2:
         ec:53:11:ce:eb:41:52:cc:14:bd:eb:a8:cd:13:0b:6f:92:ba:
         df:f5:30:a0:7d:e4:d8:14:72:f2:71:b3:37:29:a0:8f:d1:9f:
         31:e4:d1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org