Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/323830343a6635383a3a2f33322d3438203d3e203238333433.roa
File:                     323830343a6635383a3a2f33322d3438203d3e203238333433.roa (raw, json)
Hash identifier:          6RwVL8oUN74N2dh1kb7ZAgLnK+VesSncgVBTzTQLDnM=
Subject key identifier:   C2:FE:70:D3:31:34:B4:F4:05:9A:29:31:76:08:BE:DB:C0:67:FC:89
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       200EA3467A9463497E0F6C44C4C4F37BC0C6517B
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/323830343a6635383a3a2f33322d3438203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:19 +0000
ROA not before:           Thu 28 Apr 2022 13:24:19 +0000
ROA not after:            Thu 27 Apr 2023 13:29:19 +0000
asID:                     28343
IP address blocks:        2804:f58::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:0e:a3:46:7a:94:63:49:7e:0f:6c:44:c4:c4:f3:7b:c0:c6:51:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:19 2022 GMT
            Not After : Apr 27 13:29:19 2023 GMT
        Subject: CN=3082010A0282010100DB53DCB649AB3B58CA40CC25ED252160AF4B64D148B2FB73AA99B551F0EC18363FA61532EBAB0BD427961B33394424C0E45B7946C227505731EA7B6C805C5A0276403DD579DCAABE744E32C062895EB5B7B3CF341F1D4A6440F5A915D3C0290B202975673943C71895AA935659A2C66C2FC92BC92A3CB824F8F80A69B449A52F7AD3B8CEA923881358C80AE52DA5D59E27D277776E009D6685DC0AF34AFC826F07F2CB28097B2166AB3C58CB6686487BF901E14CC314896426D816D2382A2E054DF46EE76CAFB301C29CD90A697C64E5E0D08534568BB3DFE3B8E408C0B38143F569EC4CF2C1774803F03B216127F66D098F9B376405E67F9DE2FD81F88E73830203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:53:dc:b6:49:ab:3b:58:ca:40:cc:25:ed:25:
                    21:60:af:4b:64:d1:48:b2:fb:73:aa:99:b5:51:f0:
                    ec:18:36:3f:a6:15:32:eb:ab:0b:d4:27:96:1b:33:
                    39:44:24:c0:e4:5b:79:46:c2:27:50:57:31:ea:7b:
                    6c:80:5c:5a:02:76:40:3d:d5:79:dc:aa:be:74:4e:
                    32:c0:62:89:5e:b5:b7:b3:cf:34:1f:1d:4a:64:40:
                    f5:a9:15:d3:c0:29:0b:20:29:75:67:39:43:c7:18:
                    95:aa:93:56:59:a2:c6:6c:2f:c9:2b:c9:2a:3c:b8:
                    24:f8:f8:0a:69:b4:49:a5:2f:7a:d3:b8:ce:a9:23:
                    88:13:58:c8:0a:e5:2d:a5:d5:9e:27:d2:77:77:6e:
                    00:9d:66:85:dc:0a:f3:4a:fc:82:6f:07:f2:cb:28:
                    09:7b:21:66:ab:3c:58:cb:66:86:48:7b:f9:01:e1:
                    4c:c3:14:89:64:26:d8:16:d2:38:2a:2e:05:4d:f4:
                    6e:e7:6c:af:b3:01:c2:9c:d9:0a:69:7c:64:e5:e0:
                    d0:85:34:56:8b:b3:df:e3:b8:e4:08:c0:b3:81:43:
                    f5:69:ec:4c:f2:c1:77:48:03:f0:3b:21:61:27:f6:
                    6d:09:8f:9b:37:64:05:e6:7f:9d:e2:fd:81:f8:8e:
                    73:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FE:70:D3:31:34:B4:F4:05:9A:29:31:76:08:BE:DB:C0:67:FC:89
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/323830343a6635383a3a2f33322d3438203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f58::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:7f:b5:59:4a:36:db:ef:76:cf:b9:a7:b3:51:36:2c:a6:13:
         89:a0:69:e5:b9:0e:78:b8:51:0a:4e:c3:ff:25:95:d0:9c:a1:
         b5:47:fa:22:64:75:16:94:aa:84:95:db:9a:29:51:ac:f9:93:
         2e:61:35:3d:86:a3:2b:0f:dd:48:29:de:3e:7c:75:2e:72:d1:
         53:46:47:83:3f:ca:be:1b:27:31:d8:aa:d4:d7:7a:41:a1:79:
         07:9a:d7:61:9e:0c:e7:31:fa:b1:b7:da:ce:1a:df:d6:df:8b:
         d8:8c:88:77:22:31:f5:2d:1f:6a:50:34:a5:67:df:96:0b:7d:
         10:03:bd:a4:8a:98:59:41:c8:05:18:f8:38:97:81:6a:d4:eb:
         46:c9:03:5f:a9:d7:e2:39:13:4c:20:f6:27:47:34:f7:84:90:
         53:4f:c6:ac:f0:6e:ea:0f:54:8f:c5:45:da:d1:00:50:e0:f2:
         97:0c:f9:62:7e:7c:e9:9e:d2:ae:82:5b:e8:d1:bc:f5:44:45:
         d9:49:2f:73:e4:0c:f3:f2:02:0d:14:a5:6f:66:88:dc:2a:6a:
         72:98:66:2d:6b:ba:17:97:2d:cc:81:e5:17:d2:9c:06:ee:c1:
         fe:8e:72:96:0c:5c:13:50:51:d0:c8:ba:2c:a5:30:b7:3f:42:
         ee:bb:e9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org