Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/323830343a323136343a633030303a3a2f33342d3334203d3e20323634353532.roa
File:                     323830343a323136343a633030303a3a2f33342d3334203d3e20323634353532.roa (raw, json)
Hash identifier:          g3EjM55kEmWjWg2fuAMAuLX1+1ro45gqKVcbbL2TydY=
Subject key identifier:   5F:C1:89:47:D3:4A:7D:E0:5E:49:14:FD:5A:2E:8C:66:9F:70:80:54
Certificate issuer:       /CN=2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23
Certificate serial:       56D8F7EB676709D3F9ED67EDCAFBDBC57422E029
Authority key identifier: 2D:57:91:AB:CD:F8:9E:4D:D6:E3:B3:B0:E1:BC:61:A1:4A:14:7C:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/323830343a323136343a633030303a3a2f33342d3334203d3e20323634353532.roa
Signing time:             Thu 23 Mar 2023 13:23:58 +0000
ROA not before:           Thu 23 Mar 2023 13:18:58 +0000
ROA not after:            Thu 21 Mar 2024 13:23:58 +0000
asID:                     264552
IP address blocks:        2804:2164:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:d8:f7:eb:67:67:09:d3:f9:ed:67:ed:ca:fb:db:c5:74:22:e0:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23
        Validity
            Not Before: Mar 23 13:18:58 2023 GMT
            Not After : Mar 21 13:23:58 2024 GMT
        Subject: CN=5FC18947D34A7DE05E4914FD5A2E8C669F708054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:60:9d:1c:4f:e0:af:31:04:fa:c9:28:7c:e5:
                    ec:39:47:8c:0f:ce:72:fb:1f:45:b7:43:de:1c:d8:
                    e0:7e:f5:12:11:19:65:d2:52:fb:54:c0:55:c6:0c:
                    2a:ab:30:72:54:b0:54:5d:de:23:51:71:fe:75:96:
                    24:55:0c:ce:25:78:64:40:3e:97:e2:54:2e:9c:f5:
                    d7:57:8e:d3:cc:38:33:4e:65:2e:ef:1b:6a:4c:ea:
                    e0:32:e7:c9:a9:84:76:e3:ba:f9:9f:e8:90:97:3d:
                    90:e3:46:4e:e0:6a:d0:5a:97:1d:bb:21:b9:57:5a:
                    df:4f:58:e3:1f:fa:75:72:61:a3:85:65:74:73:8e:
                    86:04:ea:a9:50:01:f8:44:22:8e:34:c2:9c:ac:ad:
                    c6:d2:52:84:71:20:83:9b:17:30:fd:38:3d:4a:a5:
                    dd:3f:87:fe:5f:c3:32:55:af:9e:14:05:a4:99:3f:
                    18:1b:07:db:6e:c6:3c:a1:f8:31:3e:a2:6a:d9:64:
                    c6:d5:70:fb:c5:cb:be:70:e9:79:06:c0:61:85:f3:
                    3c:f4:c3:c2:24:10:23:27:42:35:c3:7b:7d:45:03:
                    fc:84:7f:1a:9c:65:e0:d2:59:36:57:80:a2:69:3c:
                    f4:e7:f3:49:de:d4:5d:52:a4:11:57:13:65:b2:18:
                    81:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C1:89:47:D3:4A:7D:E0:5E:49:14:FD:5A:2E:8C:66:9F:70:80:54
            X509v3 Authority Key Identifier:
                keyid:2D:57:91:AB:CD:F8:9E:4D:D6:E3:B3:B0:E1:BC:61:A1:4A:14:7C:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/323830343a323136343a633030303a3a2f33342d3334203d3e20323634353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2164:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1a:29:c4:ef:b7:df:c8:b9:96:56:50:74:4c:cd:90:79:3d:79:
         a5:e2:07:d1:5c:96:ab:ab:2a:24:c5:50:9a:fd:29:85:d9:46:
         f7:1e:8c:42:bf:b9:71:06:0d:f2:50:7d:8e:4d:71:d7:5a:42:
         6f:10:cd:46:a6:17:f1:aa:55:9f:5b:3d:8c:bc:92:c4:b4:32:
         f7:69:97:6e:a3:d0:89:c2:04:8e:3a:81:15:67:e3:2e:cf:ca:
         05:e8:04:b4:87:fd:60:6b:9e:0d:c4:f4:4b:e7:49:84:bc:38:
         9f:9e:e5:fc:df:9b:26:f6:9f:d4:c2:99:a9:94:d3:04:e1:08:
         4e:77:c1:20:2a:98:e1:bf:d6:a7:78:3e:fc:a1:06:6d:19:d9:
         fa:ae:aa:c6:d9:ff:b1:5a:40:19:57:27:0d:91:9a:8c:75:d3:
         0b:90:d6:80:c7:31:66:b4:2e:f3:f0:a4:51:9f:dd:d7:fe:49:
         0c:3a:0e:30:ff:d3:d4:65:52:9a:bc:7f:af:b5:83:ed:d4:56:
         f4:8f:d7:eb:65:ba:63:1d:36:b1:13:41:75:a7:2d:a5:71:4c:
         8c:75:3d:b3:e5:cf:6c:c7:5b:90:86:67:59:7d:93:2e:63:12:
         96:78:94:73:79:a9:1a:19:56:ab:8f:4f:08:02:cb:d1:c5:0e:
         da:e4:aa:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org