Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CD9y4WrxR5Z8ABqDAfLrTXgwN3dSnZJDtpd1nPAeAprx/0/323830343a366266633a3a2f33332d3333203d3e20323730343338.roa
File:                     323830343a366266633a3a2f33332d3333203d3e20323730343338.roa (raw, json)
Hash identifier:          Q5gFfJOUlkY/YOY69qE3yhFrirHhSF0HT6kgJxDt4kg=
Subject key identifier:   26:75:7D:72:55:24:14:69:72:CB:BA:E4:70:72:ED:EE:0B:BD:FB:9D
Certificate issuer:       /CN=555670031340B5D31FA9E93EFAB4F49D5A553B33
Certificate serial:       5F8878EDC74C1EE869EAA3F94EEADEDE37FC6D3F
Authority key identifier: 55:56:70:03:13:40:B5:D3:1F:A9:E9:3E:FA:B4:F4:9D:5A:55:3B:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/555670031340B5D31FA9E93EFAB4F49D5A553B33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CD9y4WrxR5Z8ABqDAfLrTXgwN3dSnZJDtpd1nPAeAprx/0/323830343a366266633a3a2f33332d3333203d3e20323730343338.roa
Signing time:             Wed 01 Nov 2023 18:24:03 +0000
ROA not before:           Wed 01 Nov 2023 18:19:03 +0000
ROA not after:            Wed 30 Oct 2024 18:24:03 +0000
asID:                     270438
IP address blocks:        2804:6bfc::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:88:78:ed:c7:4c:1e:e8:69:ea:a3:f9:4e:ea:de:de:37:fc:6d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=555670031340B5D31FA9E93EFAB4F49D5A553B33
        Validity
            Not Before: Nov  1 18:19:03 2023 GMT
            Not After : Oct 30 18:24:03 2024 GMT
        Subject: CN=26757D725524146972CBBAE47072EDEE0BBDFB9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:64:26:39:ca:af:3c:b5:70:86:b3:76:ce:38:
                    80:6f:f6:b8:e6:ec:fc:fb:36:8a:e7:dc:d0:6a:7c:
                    9b:64:e8:52:55:ff:08:0f:67:70:2a:dc:ce:43:ac:
                    96:05:6d:15:0a:b5:a6:7b:0e:66:fc:1a:6d:8c:be:
                    ab:f9:6d:8f:c7:20:34:50:1f:5c:c0:d1:2e:e4:f2:
                    0f:68:81:51:81:77:42:ee:83:6b:84:42:09:41:cc:
                    e3:25:d2:69:cc:c6:d9:8a:3c:cf:22:c9:1d:a6:04:
                    26:11:a1:56:7d:4c:82:b1:cd:3e:f0:4d:45:a2:64:
                    84:1d:c6:bc:8e:a4:52:62:5a:a5:6c:46:94:fa:2d:
                    a9:d7:77:8d:ad:63:e9:aa:92:94:7b:2b:78:f8:2b:
                    0d:8a:c5:59:a6:d2:31:dd:22:98:c9:ed:d4:38:4c:
                    1c:30:a5:e1:5e:dd:03:c1:af:66:76:1e:c0:f0:6a:
                    e2:0f:71:c9:e6:f1:8f:5e:24:98:2d:9e:54:19:09:
                    1f:9a:cb:22:cb:fd:2c:d1:a4:ca:f8:cf:4f:39:53:
                    8f:1a:42:5d:4f:d8:86:61:45:3b:c3:79:63:e6:e4:
                    a5:58:6e:a2:08:c2:ce:cf:87:59:0f:57:0e:08:be:
                    74:a2:a9:b6:aa:9c:ac:72:06:af:c6:84:a9:75:12:
                    0e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:75:7D:72:55:24:14:69:72:CB:BA:E4:70:72:ED:EE:0B:BD:FB:9D
            X509v3 Authority Key Identifier:
                keyid:55:56:70:03:13:40:B5:D3:1F:A9:E9:3E:FA:B4:F4:9D:5A:55:3B:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CD9y4WrxR5Z8ABqDAfLrTXgwN3dSnZJDtpd1nPAeAprx/0/555670031340B5D31FA9E93EFAB4F49D5A553B33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/555670031340B5D31FA9E93EFAB4F49D5A553B33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CD9y4WrxR5Z8ABqDAfLrTXgwN3dSnZJDtpd1nPAeAprx/0/323830343a366266633a3a2f33332d3333203d3e20323730343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6bfc::/33

    Signature Algorithm: sha256WithRSAEncryption
         2c:13:35:b0:e7:5c:5b:3a:da:66:ce:fd:1d:67:65:a6:c8:c3:
         6b:cd:79:1a:52:83:78:f3:5c:51:f2:e5:e9:67:29:40:57:38:
         a4:a9:87:ef:f2:aa:30:70:09:4a:eb:14:8d:69:39:a8:a3:dd:
         55:61:79:c4:79:3a:4a:01:38:6d:0a:e3:06:e9:ab:25:6b:f6:
         cd:25:d8:02:ef:d2:7c:73:5f:84:2c:57:7f:a8:a2:74:26:71:
         7e:d3:4c:0a:08:34:39:57:ef:81:2c:5a:39:23:a0:68:cd:49:
         46:7b:da:13:9c:02:0f:84:9b:52:6d:3c:ee:c1:92:af:f9:61:
         fc:bb:4c:2e:1e:54:0d:7e:98:10:1d:71:08:ae:6b:9a:ea:fb:
         4b:73:78:c7:ab:de:17:a5:d0:84:80:57:b9:6f:ab:7f:19:58:
         88:74:48:9f:da:33:af:a9:a9:d8:98:e1:12:6b:8d:e9:09:91:
         c4:a0:98:f6:5f:9b:67:21:d3:a1:9e:61:9f:85:7b:50:35:6c:
         8f:10:ed:47:e9:b2:7d:9d:9b:e8:cb:8e:8a:b8:1f:34:76:6c:
         ac:22:a2:3c:6d:9f:38:b8:4a:1f:a7:95:00:5c:7c:71:02:7d:
         9c:ef:db:cb:e4:f1:8a:70:49:94:f0:8d:27:7a:92:80:8c:52:
         a8:77:f9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org