Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0/323830343a363062383a626666653a3a2f34382d3438203d3e20323639313836.roa
File:                     323830343a363062383a626666653a3a2f34382d3438203d3e20323639313836.roa (raw, json)
Hash identifier:          lR9kMNRBzN+sXvY80J80FGR6VIangu1y588kGgCHiiY=
Subject key identifier:   01:58:92:E3:09:C7:BC:5D:33:F7:E7:DC:69:63:5C:42:EE:45:AF:FB
Certificate issuer:       /CN=D0998FAE469DED8160607801B7CD43BC61CB0B2E
Certificate serial:       547868526BFB596643D5226C9B15EB5E52138F98
Authority key identifier: D0:99:8F:AE:46:9D:ED:81:60:60:78:01:B7:CD:43:BC:61:CB:0B:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0998FAE469DED8160607801B7CD43BC61CB0B2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0/323830343a363062383a626666653a3a2f34382d3438203d3e20323639313836.roa
Signing time:             Wed 28 Dec 2022 12:32:54 +0000
ROA not before:           Wed 28 Dec 2022 12:27:54 +0000
ROA not after:            Wed 27 Dec 2023 12:32:54 +0000
asID:                     269186
IP address blocks:        2804:60b8:bffe::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:78:68:52:6b:fb:59:66:43:d5:22:6c:9b:15:eb:5e:52:13:8f:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0998FAE469DED8160607801B7CD43BC61CB0B2E
        Validity
            Not Before: Dec 28 12:27:54 2022 GMT
            Not After : Dec 27 12:32:54 2023 GMT
        Subject: CN=015892E309C7BC5D33F7E7DC69635C42EE45AFFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b6:c9:77:5f:29:e5:55:ce:e3:63:77:2f:5e:
                    cf:64:89:b3:4b:32:6e:08:45:53:de:d2:25:85:6f:
                    5a:e9:79:ae:4e:4d:f8:40:2e:ff:69:b8:dc:4f:82:
                    f0:0d:16:7a:3b:52:e4:99:c3:17:53:0d:ae:f7:55:
                    f6:d3:17:cd:02:ee:bc:30:b5:2d:59:9c:13:cb:a9:
                    87:47:af:c0:10:1d:eb:ba:a8:d6:fc:3d:e0:2c:b4:
                    1a:cd:fa:42:b3:6f:7c:fe:aa:fd:d5:b8:56:04:2d:
                    2d:d6:e6:cf:da:3f:57:66:19:c9:47:b5:b7:3e:24:
                    2c:44:f5:ca:56:ac:4f:48:81:53:a1:7e:9d:ca:44:
                    c0:e3:e3:d1:87:0b:88:44:bd:b7:23:66:32:31:80:
                    fc:8e:88:b6:b7:ed:57:b6:fa:d0:dd:cd:29:52:ff:
                    ad:dc:e8:42:ac:4a:dc:e2:87:52:d3:55:a5:80:ab:
                    d1:bf:ba:2c:ba:3a:fd:fe:e5:82:57:96:78:64:6d:
                    d3:35:20:c9:59:ab:dc:a6:d7:e6:d6:f5:b2:89:78:
                    0b:c6:a1:c1:99:f0:17:3f:1b:f5:c3:60:52:13:99:
                    ef:c2:0f:54:b9:2a:9d:5d:4b:67:d7:60:eb:26:37:
                    40:81:1c:07:4b:b5:d7:89:2f:e1:34:30:61:e4:90:
                    02:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:58:92:E3:09:C7:BC:5D:33:F7:E7:DC:69:63:5C:42:EE:45:AF:FB
            X509v3 Authority Key Identifier:
                keyid:D0:99:8F:AE:46:9D:ED:81:60:60:78:01:B7:CD:43:BC:61:CB:0B:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0/D0998FAE469DED8160607801B7CD43BC61CB0B2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0998FAE469DED8160607801B7CD43BC61CB0B2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0/323830343a363062383a626666653a3a2f34382d3438203d3e20323639313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60b8:bffe::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:a9:02:d6:c2:c3:76:08:3c:ea:a4:65:f7:01:4c:30:4b:9f:
         42:60:00:3e:b4:65:6e:5c:ec:34:a8:8d:f8:3c:8b:62:8f:d5:
         2a:8e:28:c7:e2:1c:82:ab:b2:1b:d4:36:79:ba:88:aa:f7:88:
         14:f1:29:ca:f4:aa:c9:18:10:3f:ec:01:21:aa:77:55:8d:c8:
         26:e0:f7:25:69:40:b8:30:7d:99:e1:a4:db:cb:47:75:0b:6c:
         df:48:de:66:10:3f:18:5b:f9:f3:9b:fe:61:6e:b2:9c:4b:79:
         88:b0:6c:3b:90:20:6c:1c:0d:e2:5c:bc:95:48:54:1c:48:83:
         37:44:dd:2b:ac:9f:b5:13:24:4c:6a:83:f3:3c:22:8f:8e:55:
         03:ee:8a:5c:4b:c9:cd:a7:35:8a:a3:60:48:ac:a2:46:d3:3f:
         7a:f1:0a:9c:e3:31:23:ac:d8:53:e4:91:3e:5a:93:cd:59:12:
         5b:7c:61:da:e3:d1:0b:12:dd:ff:f6:f0:c7:69:b7:f1:ee:7b:
         53:7d:10:bc:4b:3f:b3:b6:a6:ca:67:31:b2:ce:0d:e7:a6:e6:
         5f:e7:ce:1e:09:90:7e:13:30:1c:d3:e1:f5:49:fe:70:e7:bb:
         d6:0f:78:1f:60:b5:b4:a0:61:a5:d1:9b:9b:6d:08:37:9f:a3:
         c6:f4:01:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org