Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bu4qPQGJoe1TPHwwkS6upjyiqChWR3YceFZ9H23xJCih/0/323830343a373264383a383030303a3a2f33332d3333203d3e20323730383739.roa
File:                     323830343a373264383a383030303a3a2f33332d3333203d3e20323730383739.roa (raw, json)
Hash identifier:          10Jnq2ULEh+8ikwLQP1GBkXO4eXJg7oFmbkD4KJJQ2I=
Subject key identifier:   14:DE:F5:58:EF:CC:54:39:DA:ED:B1:B4:4A:F3:3C:33:81:1C:8D:19
Certificate issuer:       /CN=55BEC9CC86C3DD5C4EC25A993E9A575CCAD0CFB3
Certificate serial:       4B03F4338AD5331A9D3E5F1941AE67A298F24077
Authority key identifier: 55:BE:C9:CC:86:C3:DD:5C:4E:C2:5A:99:3E:9A:57:5C:CA:D0:CF:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/55BEC9CC86C3DD5C4EC25A993E9A575CCAD0CFB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bu4qPQGJoe1TPHwwkS6upjyiqChWR3YceFZ9H23xJCih/0/323830343a373264383a383030303a3a2f33332d3333203d3e20323730383739.roa
Signing time:             Thu 25 May 2023 18:02:36 +0000
ROA not before:           Thu 25 May 2023 17:57:36 +0000
ROA not after:            Thu 23 May 2024 18:02:36 +0000
asID:                     270879
IP address blocks:        2804:72d8:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:03:f4:33:8a:d5:33:1a:9d:3e:5f:19:41:ae:67:a2:98:f2:40:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55BEC9CC86C3DD5C4EC25A993E9A575CCAD0CFB3
        Validity
            Not Before: May 25 17:57:36 2023 GMT
            Not After : May 23 18:02:36 2024 GMT
        Subject: CN=14DEF558EFCC5439DAEDB1B44AF33C33811C8D19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:19:ba:03:cb:d8:23:75:f5:40:15:48:3d:39:
                    d9:f4:74:d3:81:e3:87:31:b6:df:15:df:ec:c2:ec:
                    cb:dd:d8:cd:b4:50:4e:97:e0:3f:d5:fa:f4:ee:55:
                    b3:00:36:f8:02:bc:4e:37:c4:4a:99:55:51:b7:5b:
                    2f:bc:14:9b:92:5e:42:db:f0:ee:c2:43:fc:10:34:
                    0a:72:b4:04:46:63:e1:54:13:d4:76:47:48:62:fb:
                    77:34:df:d6:06:db:d2:a2:c3:76:29:91:9d:51:9b:
                    ef:33:9f:fb:8f:e1:8f:33:80:e4:3b:e0:05:44:6b:
                    c3:3d:14:3a:08:4e:56:e7:47:19:1c:72:7e:b4:66:
                    a6:3b:a9:f2:1f:7e:ea:fc:5a:62:e6:ef:06:e6:ad:
                    fc:e5:06:ff:bf:ec:e8:95:e2:05:5e:8f:20:48:be:
                    bb:7c:bb:94:16:dc:30:60:ee:2c:5d:a7:ab:dc:ce:
                    63:f9:87:56:90:a6:00:14:dc:14:e1:4a:11:e4:50:
                    42:34:77:a1:1d:23:9e:74:b9:13:5f:fb:3a:13:95:
                    4c:50:a5:38:41:80:35:cc:92:98:24:66:27:b0:2e:
                    37:a7:f5:ad:7b:51:63:b4:99:fe:3a:f6:cc:99:f3:
                    6a:eb:b7:b4:4d:d7:e6:0b:88:50:dd:26:91:c0:89:
                    dc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:DE:F5:58:EF:CC:54:39:DA:ED:B1:B4:4A:F3:3C:33:81:1C:8D:19
            X509v3 Authority Key Identifier:
                keyid:55:BE:C9:CC:86:C3:DD:5C:4E:C2:5A:99:3E:9A:57:5C:CA:D0:CF:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bu4qPQGJoe1TPHwwkS6upjyiqChWR3YceFZ9H23xJCih/0/55BEC9CC86C3DD5C4EC25A993E9A575CCAD0CFB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/55BEC9CC86C3DD5C4EC25A993E9A575CCAD0CFB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bu4qPQGJoe1TPHwwkS6upjyiqChWR3YceFZ9H23xJCih/0/323830343a373264383a383030303a3a2f33332d3333203d3e20323730383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72d8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         26:13:18:34:82:6c:ed:77:18:32:66:8b:a3:62:51:c6:4f:6d:
         69:31:b9:78:b3:5f:e6:6f:78:82:cf:f3:f2:58:ef:d2:10:3e:
         d9:f2:f1:ff:c0:ce:ad:7f:43:62:1e:42:6e:8b:32:da:7f:f2:
         29:2f:a6:81:74:46:2a:22:f7:d1:5d:0a:b3:ec:29:15:c9:b3:
         4f:0b:bc:7e:47:54:2d:c4:10:6d:5a:f7:29:da:b7:16:6f:28:
         cf:93:2e:51:22:95:9b:64:96:09:cc:8c:36:c9:6f:71:c3:87:
         f6:a0:d2:60:13:f8:bd:2f:69:a4:c8:1e:ea:84:43:0b:c3:b7:
         0d:a0:02:d1:c8:c1:07:fe:ce:ae:06:60:da:d5:42:7d:52:64:
         41:cb:6e:07:46:61:55:22:29:95:c3:26:9b:cb:1d:61:a8:06:
         fd:be:73:8f:91:31:53:e5:64:c4:22:27:ec:6f:5c:6d:db:e3:
         e3:2e:0d:13:bd:6a:bb:b2:ce:3b:96:3a:26:f5:c8:e2:0e:fb:
         52:cc:ab:51:a3:cf:2c:61:ec:60:7d:9e:2d:3e:b8:b3:fc:75:
         61:53:26:b0:8f:5f:c3:a8:ce:a6:ae:a1:5d:3e:cf:67:68:09:
         ae:16:60:56:bf:aa:08:77:cb:bd:f5:66:bf:c7:8e:4c:b4:6b:
         20:2a:14:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org