Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/323830343a333163633a3a2f33332d3333203d3e20323635303338.roa
File:                     323830343a333163633a3a2f33332d3333203d3e20323635303338.roa (raw, json)
Hash identifier:          G7hkbMS2kDz1928SGUq0lgl8EHkeMKTMnSQqaHFEzfw=
Subject key identifier:   DC:40:60:9C:20:74:45:53:4D:9F:27:25:FB:02:D2:D1:B3:B5:98:0B
Certificate issuer:       /CN=5D2F505068C7CAB71DCCC3F48DB65874FC79E6A8
Certificate serial:       21E448BB6CE023521E5C4A02560D3390F205A5C5
Authority key identifier: 5D:2F:50:50:68:C7:CA:B7:1D:CC:C3:F4:8D:B6:58:74:FC:79:E6:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D2F505068C7CAB71DCCC3F48DB65874FC79E6A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/323830343a333163633a3a2f33332d3333203d3e20323635303338.roa
Signing time:             Tue 05 Mar 2024 19:26:01 +0000
ROA not before:           Tue 05 Mar 2024 19:21:01 +0000
ROA not after:            Tue 04 Mar 2025 19:26:01 +0000
asID:                     265038
IP address blocks:        2804:31cc::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:e4:48:bb:6c:e0:23:52:1e:5c:4a:02:56:0d:33:90:f2:05:a5:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D2F505068C7CAB71DCCC3F48DB65874FC79E6A8
        Validity
            Not Before: Mar  5 19:21:01 2024 GMT
            Not After : Mar  4 19:26:01 2025 GMT
        Subject: CN=DC40609C207445534D9F2725FB02D2D1B3B5980B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f1:fb:dd:75:4a:09:9f:28:85:a1:83:0f:9c:
                    2c:50:51:e6:83:f4:37:18:be:a2:41:9b:6b:1e:9f:
                    fd:f0:0c:53:f6:48:86:c9:a1:be:a1:ac:59:e4:45:
                    b7:9a:1c:d8:26:d3:0e:7d:00:6e:f8:ea:ea:8e:e4:
                    60:60:71:3c:9e:f2:1d:fe:43:73:1b:dd:ce:83:4f:
                    b4:88:4e:7a:bd:a1:0f:12:43:ec:ec:73:ef:c7:88:
                    97:e4:e0:4e:d5:eb:19:7f:0d:14:f0:b7:c9:56:61:
                    b7:0a:be:46:39:b1:2c:ac:00:26:0c:9a:ac:60:7b:
                    a5:26:77:13:d4:74:f7:5e:6b:f4:91:a4:23:14:12:
                    32:0e:d8:fb:ad:b1:f2:7e:95:8a:5f:44:78:df:95:
                    b3:91:5b:29:b5:b2:6f:d8:d9:43:74:a6:ea:da:f5:
                    d6:f9:84:e6:d2:dd:83:9d:9e:65:46:d1:5c:7b:31:
                    16:66:8d:1a:57:9a:1a:92:1e:c5:48:90:9f:74:02:
                    0b:52:4c:12:ef:58:ff:7f:08:75:3e:ad:fd:02:ac:
                    82:8c:66:1c:ac:e9:50:7f:cb:32:13:ca:a1:0b:ca:
                    f8:b7:7c:12:f8:d7:44:36:61:c2:3e:82:93:f9:ee:
                    56:99:9f:f6:1e:f3:b5:15:f3:2f:52:91:e9:4c:1b:
                    26:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:40:60:9C:20:74:45:53:4D:9F:27:25:FB:02:D2:D1:B3:B5:98:0B
            X509v3 Authority Key Identifier:
                keyid:5D:2F:50:50:68:C7:CA:B7:1D:CC:C3:F4:8D:B6:58:74:FC:79:E6:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/5D2F505068C7CAB71DCCC3F48DB65874FC79E6A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D2F505068C7CAB71DCCC3F48DB65874FC79E6A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/323830343a333163633a3a2f33332d3333203d3e20323635303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:31cc::/33

    Signature Algorithm: sha256WithRSAEncryption
         0a:27:5d:07:5d:ba:b3:93:9a:18:84:3d:2c:ec:6c:cc:e0:d1:
         d8:ed:05:83:bf:3d:ff:44:08:59:c8:ab:cd:76:28:60:39:69:
         59:f4:bd:a2:d6:72:ae:c1:17:89:5f:2f:15:11:ca:6a:82:31:
         3d:c1:6e:a9:8e:ce:95:af:0d:1f:3d:5e:01:e2:89:93:81:e4:
         f7:cf:96:e5:4a:65:a4:7e:a9:e1:80:3b:7d:f5:f4:b4:36:e7:
         08:d9:94:73:a3:b1:78:63:ef:42:37:67:fc:ec:48:cc:b0:d9:
         b4:79:71:a4:96:9f:b1:f5:7a:77:5e:ad:0f:6f:1d:21:39:4a:
         a8:db:c8:72:0a:cb:bb:cd:f0:ad:6f:5d:b8:0a:83:a9:41:36:
         6f:c0:7d:5c:8b:af:bf:a6:2f:9d:a3:7e:85:8b:49:7b:8f:6c:
         45:55:37:b6:57:d9:b4:f4:19:8a:dd:c0:d3:56:ef:50:d1:07:
         d9:f4:7f:68:8f:fc:9f:dc:55:93:34:39:53:af:2c:92:97:e8:
         88:f0:2d:e5:8a:55:50:8a:81:d2:fb:49:11:fd:b6:15:24:fc:
         39:d6:81:c5:47:cf:ad:8a:e8:d7:7f:b6:d2:ad:0f:2e:da:e9:
         5e:cd:4a:5a:95:1e:78:79:1c:0e:dc:24:a1:6f:b0:93:55:d7:
         39:d6:36:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:56 2024 by rpki-client on console-fra.rpki-client.org