Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/323830343a3535383a3a2f33322d3332203d3e20323632353039.roa
File:                     323830343a3535383a3a2f33322d3332203d3e20323632353039.roa (raw, json)
Hash identifier:          liMvxIvaneyuT6YxvpZHICXf/IgtZZKDkEV14z9x/NU=
Subject key identifier:   73:50:4C:80:51:7E:8B:CF:1E:09:C9:CC:94:AD:43:69:FD:0F:CC:FF
Certificate issuer:       /CN=D25FB7A3641FB6992609C3E87677747FD5176120
Certificate serial:       1BF177E5F4D33658E2C495CAD26282AA13FF879C
Authority key identifier: D2:5F:B7:A3:64:1F:B6:99:26:09:C3:E8:76:77:74:7F:D5:17:61:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D25FB7A3641FB6992609C3E87677747FD5176120.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/323830343a3535383a3a2f33322d3332203d3e20323632353039.roa
Signing time:             Thu 06 Oct 2022 17:39:56 +0000
ROA not before:           Thu 06 Oct 2022 17:34:56 +0000
ROA not after:            Thu 05 Oct 2023 17:39:56 +0000
asID:                     262509
IP address blocks:        2804:558::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:f1:77:e5:f4:d3:36:58:e2:c4:95:ca:d2:62:82:aa:13:ff:87:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D25FB7A3641FB6992609C3E87677747FD5176120
        Validity
            Not Before: Oct  6 17:34:56 2022 GMT
            Not After : Oct  5 17:39:56 2023 GMT
        Subject: CN=73504C80517E8BCF1E09C9CC94AD4369FD0FCCFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:85:3d:99:4a:2d:56:3c:cc:69:21:66:3e:e4:
                    0c:6a:33:dc:08:aa:89:d4:a5:f3:ee:ca:4c:84:56:
                    f2:e2:4f:64:2c:80:ff:27:fd:19:f2:8b:bc:57:79:
                    f6:fa:75:ca:7b:ee:2b:ec:84:38:39:fc:ac:57:0a:
                    50:38:4a:a8:91:3c:6f:d6:a8:03:f0:6a:9e:6b:26:
                    8a:11:06:7c:6b:ef:66:40:06:13:80:01:1a:77:3c:
                    78:38:74:d9:65:f0:f4:65:ad:2c:0b:68:c4:0e:7d:
                    40:8d:ba:24:f1:65:a3:1b:e0:e4:53:63:e0:d1:68:
                    cf:64:72:10:5b:fc:5f:49:9c:93:ea:8b:5f:fb:69:
                    1b:fb:d9:2b:23:84:2e:e6:fe:9e:ef:cd:28:45:e4:
                    01:fb:6e:90:e2:0e:e2:b8:da:d1:fd:2d:0c:95:13:
                    be:34:43:b6:0c:83:82:70:1d:45:35:cc:97:98:b0:
                    26:b0:60:4c:b5:bd:b0:a7:82:d7:43:a9:89:aa:b7:
                    4c:30:97:f2:3a:a7:12:0d:6a:72:3a:87:63:d4:eb:
                    4d:89:0d:d9:b9:03:66:4d:84:e0:b3:04:a0:10:51:
                    3f:45:52:4a:87:ec:3b:3b:a0:76:d7:a2:73:20:01:
                    3a:83:5d:d4:99:09:c1:58:56:ad:4d:7a:01:8c:07:
                    56:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:50:4C:80:51:7E:8B:CF:1E:09:C9:CC:94:AD:43:69:FD:0F:CC:FF
            X509v3 Authority Key Identifier:
                keyid:D2:5F:B7:A3:64:1F:B6:99:26:09:C3:E8:76:77:74:7F:D5:17:61:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/D25FB7A3641FB6992609C3E87677747FD5176120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D25FB7A3641FB6992609C3E87677747FD5176120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/323830343a3535383a3a2f33322d3332203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:558::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:1a:55:fc:f6:b5:a2:d8:35:46:8d:f8:d5:1c:70:4e:07:1d:
         90:74:da:8e:eb:90:69:37:07:58:c5:18:1a:b8:13:a5:8c:dd:
         1b:c0:ed:a3:f4:25:f7:95:1c:1d:b2:ff:7f:a1:6b:73:3d:c5:
         70:b8:52:8c:3f:95:91:ce:c4:c6:ef:3a:a7:86:45:51:a0:a4:
         71:4e:22:a4:8f:5c:43:05:04:00:5b:31:9d:a2:f1:eb:6a:5c:
         fd:4f:0d:1e:0a:45:65:05:b1:6b:0a:99:9b:0e:5a:b2:d7:a9:
         d1:67:a3:72:70:82:26:bf:e5:d5:d8:f4:86:6e:38:dc:48:d5:
         31:26:5b:f9:fc:c5:aa:f5:9b:50:98:d6:75:26:48:97:a8:79:
         59:eb:87:23:c3:a0:b3:9e:f0:20:f7:48:ab:cf:4f:f8:2f:c9:
         b0:34:78:74:a1:3f:89:d6:ea:fe:20:a9:f0:16:e2:e8:df:d2:
         1c:8a:17:75:e2:2d:98:a6:06:9b:e9:db:de:26:ea:9d:7d:69:
         ac:d8:bb:79:40:e0:e8:94:a0:f2:03:90:12:f3:d2:10:31:1b:
         e9:d1:0a:a2:17:9c:ef:3c:d2:9b:07:0c:6a:7e:6b:2b:6b:a4:
         8e:5f:cb:50:21:71:87:16:32:f0:81:b9:7a:73:68:de:c3:83:
         78:ae:d9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org