Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AhaukSqkapzky7aab58ZkZYtr3zTfddkFjUBuYXvZTrv/0/323830343a6532383a3a2f33322d3438203d3e203532353437.roa
File:                     323830343a6532383a3a2f33322d3438203d3e203532353437.roa (raw, json)
Hash identifier:          iSX+k0wUZQioaYKZ9LAb14pCUD4142WWTCm4QkRV87Q=
Subject key identifier:   13:EC:40:43:48:89:5B:FF:9D:0E:83:CD:8B:4C:78:F0:8B:58:F7:D3
Certificate issuer:       /CN=20EB5865E20D53A7E08BD066F5A704ECA29EEAC8
Certificate serial:       2D558C9D8D4B73B93348007CAF538FFBBFE77A30
Authority key identifier: 20:EB:58:65:E2:0D:53:A7:E0:8B:D0:66:F5:A7:04:EC:A2:9E:EA:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20EB5865E20D53A7E08BD066F5A704ECA29EEAC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AhaukSqkapzky7aab58ZkZYtr3zTfddkFjUBuYXvZTrv/0/323830343a6532383a3a2f33322d3438203d3e203532353437.roa
Signing time:             Tue 10 Oct 2023 19:23:52 +0000
ROA not before:           Tue 10 Oct 2023 19:18:52 +0000
ROA not after:            Tue 08 Oct 2024 19:23:52 +0000
asID:                     52547
IP address blocks:        2804:e28::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:55:8c:9d:8d:4b:73:b9:33:48:00:7c:af:53:8f:fb:bf:e7:7a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20EB5865E20D53A7E08BD066F5A704ECA29EEAC8
        Validity
            Not Before: Oct 10 19:18:52 2023 GMT
            Not After : Oct  8 19:23:52 2024 GMT
        Subject: CN=13EC404348895BFF9D0E83CD8B4C78F08B58F7D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:75:9d:9c:89:d6:f7:59:ae:30:af:cc:71:0f:
                    f8:16:37:d2:d0:35:b5:91:89:dc:bb:60:73:53:b4:
                    39:c4:a5:54:5e:93:13:ec:43:c4:9b:fa:d1:3c:b1:
                    2e:8a:b5:aa:18:a1:70:86:a4:57:f5:04:ac:5b:fa:
                    cf:c3:55:7b:a5:32:0e:58:8d:0b:23:bd:9d:57:4a:
                    65:54:35:1f:68:c7:36:c2:15:a2:10:2f:04:84:f4:
                    0e:71:20:ab:01:05:33:98:28:ae:e8:1d:96:78:92:
                    1d:9e:6d:0b:ab:5a:bd:89:ba:00:2f:d8:08:b1:18:
                    0a:9f:04:2a:41:c2:85:7e:98:3c:09:0a:7f:8d:46:
                    9d:ea:73:93:3b:e9:8c:44:d2:54:86:13:46:2a:d9:
                    56:32:bb:84:5b:81:44:56:e7:de:43:49:49:42:e8:
                    6c:4e:0c:22:83:80:e7:60:f0:7f:fe:7f:17:05:3f:
                    fb:61:08:c9:1b:03:b1:7d:49:68:3a:a3:7a:55:4f:
                    b1:fb:63:60:0c:67:97:c6:28:b5:23:c9:79:6c:df:
                    5a:f7:89:c2:ef:20:c0:19:e6:1f:b2:07:96:97:7d:
                    7d:b1:87:8e:b8:36:ec:e6:7f:92:19:43:6e:f5:e9:
                    04:72:f8:33:b1:01:d3:63:07:56:7a:bd:11:ba:06:
                    e6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:EC:40:43:48:89:5B:FF:9D:0E:83:CD:8B:4C:78:F0:8B:58:F7:D3
            X509v3 Authority Key Identifier:
                keyid:20:EB:58:65:E2:0D:53:A7:E0:8B:D0:66:F5:A7:04:EC:A2:9E:EA:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AhaukSqkapzky7aab58ZkZYtr3zTfddkFjUBuYXvZTrv/0/20EB5865E20D53A7E08BD066F5A704ECA29EEAC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20EB5865E20D53A7E08BD066F5A704ECA29EEAC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AhaukSqkapzky7aab58ZkZYtr3zTfddkFjUBuYXvZTrv/0/323830343a6532383a3a2f33322d3438203d3e203532353437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e28::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:81:de:c9:d8:a0:a1:76:d8:4e:21:ab:67:ca:15:7c:ab:c9:
         ab:f4:7c:a9:a2:cd:9c:39:5b:d7:3b:92:92:19:1a:67:4a:48:
         be:21:ec:ef:63:da:91:f3:59:24:dc:e0:4a:f8:f4:82:96:18:
         29:f2:92:07:6d:90:04:bb:30:d2:66:5d:ac:e8:4b:a5:89:13:
         b5:94:b3:df:81:4b:4e:d5:c1:d6:05:6f:1c:4f:db:8a:96:dd:
         bd:9c:10:20:62:c0:04:0f:f1:be:c2:10:5e:24:c4:50:fd:74:
         50:61:fd:c3:54:af:f4:15:a8:62:3a:36:86:fd:94:4f:cc:f0:
         3d:ae:86:c1:0b:58:e7:35:ec:d8:42:64:a2:84:70:d9:82:b4:
         c2:dc:b3:2f:72:bf:a0:3d:6a:7d:9e:ba:46:fb:25:fa:14:fb:
         a4:91:b2:99:ae:95:8c:80:e4:33:c7:ca:3d:34:4c:0a:69:65:
         81:7d:43:48:72:89:19:33:05:cc:af:f8:71:8e:cc:2f:eb:b9:
         4e:d1:df:e0:5b:f0:6b:31:ad:b4:2b:b8:88:fb:aa:b6:24:34:
         ff:88:c7:0f:7b:65:3c:13:af:3a:fe:60:69:66:1a:0f:74:a6:
         12:42:e6:eb:ce:03:94:c2:2f:be:6e:4a:85:f9:a7:df:a5:f2:
         fa:cc:a4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org