Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/323830343a356231383a633030303a3a2f33342d3334203d3e20323638383138.roa
File:                     323830343a356231383a633030303a3a2f33342d3334203d3e20323638383138.roa (raw, json)
Hash identifier:          T7NIZEFkoSqoMZivC2qp35F3mkznjexas1Yl0nFgnFA=
Subject key identifier:   27:B0:12:F4:D3:C5:F3:6B:03:06:2B:21:44:15:82:C8:24:F1:A9:C3
Certificate issuer:       /CN=CD373054F4E940F0F376E77705D6B8AF5E8A5659
Certificate serial:       504924E16BC115F3DE0E3BB318EE377B4C9B8BF6
Authority key identifier: CD:37:30:54:F4:E9:40:F0:F3:76:E7:77:05:D6:B8:AF:5E:8A:56:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD373054F4E940F0F376E77705D6B8AF5E8A5659.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/323830343a356231383a633030303a3a2f33342d3334203d3e20323638383138.roa
Signing time:             Fri 06 Oct 2023 13:20:27 +0000
ROA not before:           Fri 06 Oct 2023 13:15:27 +0000
ROA not after:            Fri 04 Oct 2024 13:20:27 +0000
asID:                     268818
IP address blocks:        2804:5b18:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:49:24:e1:6b:c1:15:f3:de:0e:3b:b3:18:ee:37:7b:4c:9b:8b:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD373054F4E940F0F376E77705D6B8AF5E8A5659
        Validity
            Not Before: Oct  6 13:15:27 2023 GMT
            Not After : Oct  4 13:20:27 2024 GMT
        Subject: CN=27B012F4D3C5F36B03062B21441582C824F1A9C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:93:52:cf:bf:5b:68:e0:25:9f:1a:72:db:a0:
                    69:0a:bf:d0:c3:41:a5:5e:f1:12:78:fc:30:c4:bc:
                    3b:e2:bc:23:96:7e:eb:e5:ed:d4:80:b3:f7:f9:81:
                    6c:c1:5c:b6:c9:12:98:4a:bf:90:d2:38:c2:a3:b3:
                    29:46:0d:d7:39:01:37:01:e5:34:9b:c9:35:72:18:
                    23:9b:bd:c1:62:8d:88:42:bc:e8:90:e8:79:57:46:
                    84:0c:52:32:9b:8e:ca:0f:81:b9:91:10:a5:96:d1:
                    48:6f:01:bc:3a:c0:7f:6d:43:9b:ea:01:7a:af:f9:
                    50:9d:90:51:c5:b3:90:1d:69:41:27:85:4b:ce:34:
                    d8:cc:19:da:69:b8:41:12:1f:5a:27:66:63:6c:f1:
                    6c:9d:cb:54:07:a6:61:ea:df:72:0e:ce:51:ff:d9:
                    af:30:be:70:2c:6f:f8:11:d0:ac:fb:fe:f3:fe:d7:
                    79:51:a0:b7:07:96:8a:87:d9:06:f7:a8:6c:54:be:
                    bf:24:3f:dc:d9:e5:30:05:41:c9:7a:4d:f5:7c:68:
                    ba:bf:e0:06:99:e9:4d:af:96:7a:fc:3e:59:88:83:
                    5e:3d:e5:d5:51:49:0b:e5:f7:1a:0f:03:c2:c3:b0:
                    ea:af:9d:85:be:eb:32:11:42:94:3b:8f:61:5d:c2:
                    69:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B0:12:F4:D3:C5:F3:6B:03:06:2B:21:44:15:82:C8:24:F1:A9:C3
            X509v3 Authority Key Identifier:
                keyid:CD:37:30:54:F4:E9:40:F0:F3:76:E7:77:05:D6:B8:AF:5E:8A:56:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/CD373054F4E940F0F376E77705D6B8AF5E8A5659.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD373054F4E940F0F376E77705D6B8AF5E8A5659.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/323830343a356231383a633030303a3a2f33342d3334203d3e20323638383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b18:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         ad:0c:fa:b6:50:4c:12:a6:52:46:8e:05:57:7f:a0:b3:53:10:
         7d:32:48:18:7e:b2:97:a0:bb:d7:95:8e:b2:bf:d2:31:9e:14:
         d1:a8:dc:5c:81:36:bc:bf:0b:ec:45:62:dc:34:2b:ca:8d:2c:
         d1:9f:88:bd:47:b4:a6:46:87:f5:e9:e7:e0:53:b2:da:da:a4:
         1b:93:b9:53:f5:d9:ff:07:43:27:38:ac:14:04:cd:fc:33:41:
         5f:a9:fe:79:b9:50:cc:21:e8:92:fb:c0:9b:4f:f1:aa:b8:0f:
         16:ff:9e:28:92:ee:54:81:9a:5b:1a:8a:44:0d:d7:88:86:12:
         b8:ca:94:c7:77:24:46:22:69:24:19:2b:21:a5:27:d0:f3:e7:
         25:56:9d:64:f1:02:1a:58:bc:28:b8:11:28:23:d6:d1:28:e5:
         36:9e:df:1c:18:70:35:66:68:5d:76:64:dd:f0:14:02:c0:50:
         19:7b:7f:98:79:eb:d1:46:b9:81:55:fa:46:df:89:bd:a9:81:
         bf:17:a4:bb:7b:f3:50:d6:f3:7b:07:2d:26:c9:ef:f7:57:11:
         5c:cf:a5:d8:ff:fe:42:cf:c7:0d:f9:11:bc:d9:04:8b:ab:40:
         bc:3b:d0:d9:39:4a:5f:21:18:fa:dd:d2:97:aa:2a:62:2e:fc:
         c3:c9:31:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org