Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/93gYpDzS69L7rE9KxiqCg7PiSbyYsxZq5nW2ocFYAHXR/0/323830343a323839383a3a2f33322d3438203d3e203238333035.roa
File:                     323830343a323839383a3a2f33322d3438203d3e203238333035.roa (raw, json)
Hash identifier:          CLcmD7cpWcZd5G6EnceT2sf6pShezrFVVq5Ad5A8Y4o=
Subject key identifier:   27:52:E7:04:36:FF:D8:D5:D4:40:25:51:34:4A:3B:C2:BC:27:17:31
Certificate issuer:       /CN=9C1B636737328489B2BBC1E208AF52B99A524C4A
Certificate serial:       5F5FCE0704A7106ED7648E08F718AAEEC42E1953
Authority key identifier: 9C:1B:63:67:37:32:84:89:B2:BB:C1:E2:08:AF:52:B9:9A:52:4C:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C1B636737328489B2BBC1E208AF52B99A524C4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93gYpDzS69L7rE9KxiqCg7PiSbyYsxZq5nW2ocFYAHXR/0/323830343a323839383a3a2f33322d3438203d3e203238333035.roa
Signing time:             Wed 01 Feb 2023 21:00:00 +0000
ROA not before:           Wed 01 Feb 2023 20:55:00 +0000
ROA not after:            Wed 31 Jan 2024 21:00:00 +0000
asID:                     28305
IP address blocks:        2804:2898::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:5f:ce:07:04:a7:10:6e:d7:64:8e:08:f7:18:aa:ee:c4:2e:19:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C1B636737328489B2BBC1E208AF52B99A524C4A
        Validity
            Not Before: Feb  1 20:55:00 2023 GMT
            Not After : Jan 31 21:00:00 2024 GMT
        Subject: CN=2752E70436FFD8D5D4402551344A3BC2BC271731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1b:9e:0a:96:39:72:dd:b9:10:ea:d3:a1:91:
                    c4:cb:81:a8:f5:67:d9:3d:5c:a6:bb:4c:12:62:f7:
                    cc:71:1d:1a:db:82:c9:e1:08:1c:9f:20:1e:7d:0e:
                    b7:3d:d8:7c:4f:b7:3a:8c:a3:d3:1e:e5:fb:59:d3:
                    8c:b6:c9:4c:00:2b:0e:19:be:c2:c2:37:85:b6:28:
                    8a:94:3b:1a:c7:01:d7:b4:0d:77:1e:1c:fa:94:bc:
                    cc:a1:13:9e:4b:ce:8e:cf:67:72:d5:ff:4a:46:c8:
                    e6:63:82:de:ca:0c:7d:e3:5d:82:d5:eb:6f:7b:7f:
                    7a:89:ae:db:a8:52:22:bb:ab:64:8b:f9:77:64:3b:
                    d7:5f:94:0d:dc:52:c2:47:e7:28:a6:49:96:1f:15:
                    d0:bc:43:e8:64:82:ed:3b:2f:67:77:fa:56:d9:29:
                    1b:01:b4:a3:f7:c0:9c:1b:3e:01:87:5f:eb:ec:bc:
                    88:19:ab:4e:8d:61:cb:88:00:50:82:07:19:ed:74:
                    42:74:14:a2:e8:58:03:3a:af:06:44:58:2a:54:4d:
                    94:c8:85:a0:72:1b:bb:38:7c:3d:90:de:fb:e2:24:
                    2e:65:bf:0d:94:07:78:f1:35:c2:64:f0:84:cf:fc:
                    38:b0:3a:8c:5a:1c:69:b6:98:3a:c8:3d:f1:c1:13:
                    b1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:52:E7:04:36:FF:D8:D5:D4:40:25:51:34:4A:3B:C2:BC:27:17:31
            X509v3 Authority Key Identifier:
                keyid:9C:1B:63:67:37:32:84:89:B2:BB:C1:E2:08:AF:52:B9:9A:52:4C:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93gYpDzS69L7rE9KxiqCg7PiSbyYsxZq5nW2ocFYAHXR/0/9C1B636737328489B2BBC1E208AF52B99A524C4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C1B636737328489B2BBC1E208AF52B99A524C4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93gYpDzS69L7rE9KxiqCg7PiSbyYsxZq5nW2ocFYAHXR/0/323830343a323839383a3a2f33322d3438203d3e203238333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2898::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:25:93:c8:2d:37:8b:21:08:7a:bb:a9:0d:11:48:b3:31:01:
         7a:d5:91:6c:d5:6e:7f:bf:8c:a0:f3:de:a1:42:75:91:c0:4f:
         eb:4e:05:0b:3d:d7:42:f3:2f:ef:78:b4:cc:ba:93:33:2e:69:
         90:e9:49:b3:fc:d9:9d:77:65:68:ce:f4:a8:81:f0:2e:69:ea:
         2a:6f:b7:af:32:e5:fc:7f:34:8e:18:90:07:e5:a7:d8:7d:f7:
         76:65:4d:21:65:e4:9e:38:44:24:55:1a:32:48:0a:6b:57:4c:
         7f:3b:10:21:f1:7d:fd:45:d2:89:ff:ab:88:56:f6:65:2e:be:
         16:37:45:c9:8c:f6:32:20:6b:83:a7:4a:76:f5:73:a9:1b:c4:
         16:a9:2c:78:58:8b:7b:47:dd:6a:8e:3a:fc:4a:3b:49:16:59:
         98:a2:03:34:4f:ae:13:d5:6e:d5:92:44:ac:7e:3c:44:dd:b5:
         f2:a9:9e:07:b5:a3:39:d3:b6:91:8f:1e:be:5b:96:0b:8f:d1:
         2f:43:dd:40:f0:1b:18:eb:44:b0:e8:03:ab:b8:1e:d8:17:8f:
         0b:a1:ef:98:ae:36:52:c5:ca:35:19:88:bf:52:87:f7:c5:1f:
         1e:c5:6f:21:d6:a3:31:07:28:41:ff:64:2a:4e:61:b1:fa:73:
         82:69:e1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org