Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwU4DDHLNcqper4v9yxamLtnw2Tq9NXCaNitJXCA42Y9/0/323830313a38303a3535303a3a2f34382d3438203d3e203238323135.roa
File:                     323830313a38303a3535303a3a2f34382d3438203d3e203238323135.roa (raw, json)
Hash identifier:          dL/Yw7ysWqb15SIViQR8oAdXIVOHnAbcUq2iaTG1LqA=
Subject key identifier:   D0:D9:47:7B:D0:AA:0D:8C:1F:90:70:37:91:B8:BE:00:9B:9B:65:E0
Certificate issuer:       /CN=4F92F3EF9C1CA1783859927A4E4549F44CF595C7
Certificate serial:       18EBFD7A8F65A475DE09AFF5E22373020726AD51
Authority key identifier: 4F:92:F3:EF:9C:1C:A1:78:38:59:92:7A:4E:45:49:F4:4C:F5:95:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F92F3EF9C1CA1783859927A4E4549F44CF595C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwU4DDHLNcqper4v9yxamLtnw2Tq9NXCaNitJXCA42Y9/0/323830313a38303a3535303a3a2f34382d3438203d3e203238323135.roa
Signing time:             Sat 14 Oct 2023 14:09:19 +0000
ROA not before:           Sat 14 Oct 2023 14:04:19 +0000
ROA not after:            Sat 12 Oct 2024 14:09:19 +0000
asID:                     28215
IP address blocks:        2801:80:550::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:eb:fd:7a:8f:65:a4:75:de:09:af:f5:e2:23:73:02:07:26:ad:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F92F3EF9C1CA1783859927A4E4549F44CF595C7
        Validity
            Not Before: Oct 14 14:04:19 2023 GMT
            Not After : Oct 12 14:09:19 2024 GMT
        Subject: CN=D0D9477BD0AA0D8C1F90703791B8BE009B9B65E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8d:a1:2f:89:4d:eb:50:43:69:ba:12:75:8e:
                    80:d6:e5:f1:c7:26:5d:14:21:34:28:40:04:52:05:
                    73:b8:47:de:01:ee:49:8a:d3:f8:34:a9:e1:e7:5d:
                    b1:5e:35:c8:3e:23:d9:6f:86:79:9c:fe:60:8a:00:
                    ee:58:8d:09:39:f6:3a:d7:d6:cd:8c:90:b9:c9:19:
                    a7:83:4a:7b:6b:8d:10:d7:ab:05:12:d4:97:f2:5d:
                    c4:ba:8b:bf:f7:00:75:4a:71:50:a5:a3:93:04:bd:
                    7c:bd:69:9d:5d:26:0b:55:c3:82:76:30:8d:a8:e3:
                    d7:f7:f9:b1:13:b6:af:88:81:fc:70:e9:8a:6c:05:
                    b3:21:18:51:bc:10:51:6f:2e:86:32:60:60:3c:9c:
                    6b:f8:5e:9b:c1:71:fc:f9:49:91:2d:f0:9f:b6:ab:
                    2f:36:ba:74:0b:45:ee:ea:76:51:83:2f:d0:29:74:
                    ef:fc:28:d3:25:6d:0f:87:6f:26:2a:85:f7:0d:4b:
                    06:c5:5c:6f:39:42:c5:94:68:0c:79:cb:96:92:78:
                    72:2e:91:de:01:2a:e9:bf:ba:72:cb:40:0f:b6:a2:
                    5b:19:69:df:dc:43:d4:97:71:f9:a7:f5:88:16:46:
                    01:54:08:bc:96:16:fd:d3:63:65:77:db:de:7d:36:
                    db:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D9:47:7B:D0:AA:0D:8C:1F:90:70:37:91:B8:BE:00:9B:9B:65:E0
            X509v3 Authority Key Identifier:
                keyid:4F:92:F3:EF:9C:1C:A1:78:38:59:92:7A:4E:45:49:F4:4C:F5:95:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwU4DDHLNcqper4v9yxamLtnw2Tq9NXCaNitJXCA42Y9/0/4F92F3EF9C1CA1783859927A4E4549F44CF595C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F92F3EF9C1CA1783859927A4E4549F44CF595C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwU4DDHLNcqper4v9yxamLtnw2Tq9NXCaNitJXCA42Y9/0/323830313a38303a3535303a3a2f34382d3438203d3e203238323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:550::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:0b:6d:d6:be:76:ec:4d:51:06:e3:30:a1:12:7b:8a:5c:6c:
         e2:5d:82:bf:47:ae:b4:16:3e:8d:6c:27:12:f2:ff:e5:6e:d9:
         92:e6:57:07:27:44:e7:b4:5a:8e:d1:df:33:47:c2:ba:bc:ce:
         d3:62:90:8a:10:e0:84:dd:8d:d9:55:db:14:5b:24:43:76:3b:
         51:e5:87:23:6e:c8:77:95:3c:3e:60:1d:ee:32:ae:39:b7:f8:
         bb:73:cb:ec:27:ac:70:68:a4:19:7c:4b:e1:2c:c3:20:86:66:
         33:49:2b:bb:dc:0d:c6:c2:bf:26:52:ab:42:84:94:06:a6:86:
         c6:12:2c:5d:68:a1:11:7b:c3:7e:0d:4f:9f:62:38:ed:a3:da:
         b9:4a:48:b2:9a:53:95:f9:3c:33:0a:4c:2f:79:c9:e1:e6:99:
         b4:64:98:9f:d2:61:02:0a:72:c4:66:86:30:00:05:37:3a:70:
         bb:6f:82:3f:fa:fe:09:0f:e1:79:9f:3a:6e:69:2d:2b:f3:f4:
         65:45:ee:c6:30:45:33:19:f2:50:16:7b:32:f8:d1:61:59:9b:
         21:da:79:57:5a:7d:f7:66:c7:70:2e:d8:d9:e6:8d:56:4a:c3:
         0b:c0:24:ef:bb:9b:d0:8d:e3:c1:23:78:3e:37:e4:fb:11:26:
         8f:30:13:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org