Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0/323830343a363062383a376666653a3a2f34382d3438203d3e20323639313836.roa
File:                     323830343a363062383a376666653a3a2f34382d3438203d3e20323639313836.roa (raw, json)
Hash identifier:          pgPy8I7I4R6zXcEdnOVzvMe59rbJLkQZTbEiZU1haaA=
Subject key identifier:   9D:58:2A:84:D9:B9:33:AE:8F:63:82:D2:99:BA:AE:2A:8F:C8:9C:16
Certificate issuer:       /CN=D0998FAE469DED8160607801B7CD43BC61CB0B2E
Certificate serial:       2D7A95E65B603D642F0C0C495EB888039CB2C6FD
Authority key identifier: D0:99:8F:AE:46:9D:ED:81:60:60:78:01:B7:CD:43:BC:61:CB:0B:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0998FAE469DED8160607801B7CD43BC61CB0B2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0/323830343a363062383a376666653a3a2f34382d3438203d3e20323639313836.roa
Signing time:             Wed 28 Dec 2022 12:32:50 +0000
ROA not before:           Wed 28 Dec 2022 12:27:50 +0000
ROA not after:            Wed 27 Dec 2023 12:32:50 +0000
asID:                     269186
IP address blocks:        2804:60b8:7ffe::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:7a:95:e6:5b:60:3d:64:2f:0c:0c:49:5e:b8:88:03:9c:b2:c6:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0998FAE469DED8160607801B7CD43BC61CB0B2E
        Validity
            Not Before: Dec 28 12:27:50 2022 GMT
            Not After : Dec 27 12:32:50 2023 GMT
        Subject: CN=9D582A84D9B933AE8F6382D299BAAE2A8FC89C16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:04:91:aa:5c:2d:ba:4c:95:48:74:2b:a9:8a:
                    26:7d:b5:81:22:21:56:8a:3b:d1:19:4e:c2:bf:83:
                    95:2d:83:7e:f2:f6:c9:06:41:68:fc:99:8b:09:ca:
                    e1:94:d7:62:0c:a9:f4:18:a0:7a:5f:75:9a:5d:d4:
                    92:e5:02:c0:7d:27:36:68:a4:7f:e1:04:36:35:28:
                    b1:52:29:0b:d4:e4:4e:b9:ea:ac:32:97:b2:ad:de:
                    12:06:00:76:1e:61:c9:77:05:10:66:e1:ad:34:82:
                    5c:b6:4f:bc:73:38:f0:01:44:90:e3:ba:bc:df:98:
                    b7:4c:b6:4c:33:49:d9:43:80:db:ec:25:cc:a3:96:
                    f8:9a:0f:73:83:2b:a4:8b:b3:4e:8d:9f:b3:33:64:
                    61:07:28:ba:fd:ec:31:d0:54:3a:03:d0:81:03:48:
                    b5:63:76:55:55:e3:44:33:0f:cc:b8:fe:15:3b:63:
                    cd:bb:7c:b1:2b:27:f2:c9:db:bf:f7:c1:2c:7b:85:
                    62:08:0f:4b:1a:90:98:30:22:5b:de:2f:07:89:ff:
                    44:d5:53:cb:09:3e:c2:a5:2c:9e:3d:54:02:f3:55:
                    03:3c:a4:07:db:9a:94:87:4e:ce:9c:d3:de:65:58:
                    51:3a:c1:76:81:8e:40:0f:b0:be:a4:2b:a3:d8:dc:
                    d9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:58:2A:84:D9:B9:33:AE:8F:63:82:D2:99:BA:AE:2A:8F:C8:9C:16
            X509v3 Authority Key Identifier:
                keyid:D0:99:8F:AE:46:9D:ED:81:60:60:78:01:B7:CD:43:BC:61:CB:0B:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0/D0998FAE469DED8160607801B7CD43BC61CB0B2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0998FAE469DED8160607801B7CD43BC61CB0B2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0/323830343a363062383a376666653a3a2f34382d3438203d3e20323639313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60b8:7ffe::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:ed:87:d3:86:f1:e4:72:11:4f:7b:e5:29:ee:71:df:f7:3f:
         b8:9c:e6:72:d7:01:31:af:5f:6f:0e:d6:73:73:be:d2:bc:8e:
         31:7a:e1:b5:e4:95:75:c9:91:84:a4:6d:3d:e2:62:da:e5:6d:
         47:9e:12:e4:78:12:0e:90:af:eb:9a:eb:a2:f2:92:93:5f:6b:
         70:e4:0d:d0:63:d6:3c:a6:c3:39:47:3d:1c:d3:73:f5:b7:af:
         1d:25:c5:f7:bc:65:56:cf:3f:d0:cb:a9:19:6f:fb:0f:ae:e9:
         29:f8:da:b6:88:66:ef:31:77:ea:72:2a:e1:b6:f5:de:95:1b:
         6c:19:c0:5a:37:a8:0a:38:67:40:20:e7:81:3f:40:3f:72:d8:
         02:d8:0c:4c:eb:b3:65:54:1b:c9:9c:62:96:88:64:13:95:83:
         88:22:39:e4:8d:36:f9:01:92:c7:3d:95:2c:8b:88:a9:fa:ba:
         26:64:a1:5c:0f:6e:63:f8:76:36:d4:9f:85:65:44:27:f7:65:
         bf:b9:40:81:e5:09:af:82:2e:d2:92:f1:de:74:4d:58:af:a4:
         ee:9e:b2:a5:8a:31:10:37:fc:5c:88:21:da:b9:46:1b:f8:0e:
         b9:c4:8e:1a:dc:2c:0c:fe:9f:a8:85:f4:7e:29:98:a8:8c:62:
         4b:46:31:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org