Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/1/323830343a366238383a3a2f33342d3334203d3e20323730343036.roa
File:                     323830343a366238383a3a2f33342d3334203d3e20323730343036.roa (raw, json)
Hash identifier:          wlz8DHIQQh2Bri68EPnJHTHnSbJZss3BKf95IO5L2bc=
Subject key identifier:   4D:A2:C8:24:B3:C2:E3:02:B5:B6:84:A2:56:51:08:BD:7A:88:44:F1
Certificate issuer:       /CN=558F5EA6605670CFCCE5E212457DC4ABF929F3DB
Certificate serial:       5B8421BB077E3A0869AFFA92BA316A1FC1444EC8
Authority key identifier: 55:8F:5E:A6:60:56:70:CF:CC:E5:E2:12:45:7D:C4:AB:F9:29:F3:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/558F5EA6605670CFCCE5E212457DC4ABF929F3DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/1/323830343a366238383a3a2f33342d3334203d3e20323730343036.roa
Signing time:             Wed 03 Apr 2024 20:33:52 +0000
ROA not before:           Wed 03 Apr 2024 20:28:52 +0000
ROA not after:            Wed 02 Apr 2025 20:33:52 +0000
asID:                     270406
IP address blocks:        2804:6b88::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:84:21:bb:07:7e:3a:08:69:af:fa:92:ba:31:6a:1f:c1:44:4e:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558F5EA6605670CFCCE5E212457DC4ABF929F3DB
        Validity
            Not Before: Apr  3 20:28:52 2024 GMT
            Not After : Apr  2 20:33:52 2025 GMT
        Subject: CN=4DA2C824B3C2E302B5B684A2565108BD7A8844F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:60:86:7a:48:b3:4a:bc:cd:5d:ac:a7:e9:3d:
                    07:bc:7f:14:63:5d:97:de:a4:1c:a0:58:2b:62:22:
                    b6:29:e8:05:15:37:cd:ab:ea:bf:f5:69:95:3d:a7:
                    24:94:de:2d:d1:0c:b6:b7:af:a0:1d:aa:f0:37:05:
                    10:73:e8:2b:67:86:68:81:cf:2e:e9:56:71:f6:23:
                    11:7d:70:35:e1:af:a0:d0:a4:42:4d:13:c7:a0:7e:
                    e3:86:66:5a:a6:dc:1c:14:0b:8e:ba:6c:bc:20:07:
                    f5:a7:52:a7:0e:d1:df:7d:76:5f:b5:01:18:19:f1:
                    1d:17:52:d7:2f:03:16:2f:9c:51:61:ff:e3:c7:95:
                    0a:d3:9c:95:3d:ec:37:18:cf:53:01:3f:11:94:19:
                    ec:75:ba:7c:05:5c:2f:56:74:fa:b9:21:55:27:ea:
                    73:7c:97:79:6c:06:2a:02:99:3f:a9:e6:f7:df:32:
                    a5:6a:a5:10:5b:b7:d9:4b:36:24:41:5c:19:18:94:
                    07:8d:58:9a:ab:a1:1b:0d:01:7a:d4:1f:50:8d:b6:
                    7a:c8:20:db:55:f5:0c:ef:cc:6d:4d:9f:82:0b:7f:
                    b3:be:7b:55:39:78:4a:f2:e9:f0:21:1b:93:d8:4d:
                    39:56:ee:23:38:9c:fc:6c:cd:a1:52:a1:fa:00:c9:
                    aa:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A2:C8:24:B3:C2:E3:02:B5:B6:84:A2:56:51:08:BD:7A:88:44:F1
            X509v3 Authority Key Identifier:
                keyid:55:8F:5E:A6:60:56:70:CF:CC:E5:E2:12:45:7D:C4:AB:F9:29:F3:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/1/558F5EA6605670CFCCE5E212457DC4ABF929F3DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/558F5EA6605670CFCCE5E212457DC4ABF929F3DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/1/323830343a366238383a3a2f33342d3334203d3e20323730343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b88::/34

    Signature Algorithm: sha256WithRSAEncryption
         10:78:67:85:cf:07:c7:4c:5b:f8:9d:d5:b1:32:a3:fc:48:6e:
         46:f0:64:ef:cc:76:b6:af:ed:5f:1a:30:fd:27:4f:36:cd:3c:
         6d:0c:31:45:37:f7:7c:09:fe:6d:6d:9f:e5:06:33:a0:78:3d:
         b8:00:80:49:85:6a:d0:89:4a:fb:ae:04:3b:2b:a9:fd:a1:8b:
         1c:0d:34:cd:c8:ea:48:b2:9b:d1:40:a8:b4:82:7c:d1:ad:41:
         44:a2:70:66:58:17:4f:9d:32:23:a0:55:1b:8a:26:4f:44:68:
         8e:7a:84:92:9c:ea:8c:9b:6a:e4:53:a8:39:e0:0d:c6:e0:77:
         ee:62:e0:a7:a3:0d:15:5e:20:fe:15:b9:65:6f:b9:9d:19:4a:
         5e:53:ab:d1:b0:23:cd:a1:ba:73:30:8a:39:19:d8:2c:1b:76:
         0f:ed:dd:bf:73:5f:db:00:85:40:b8:fc:e4:20:f5:69:05:2d:
         f6:a3:42:56:17:20:ac:a8:18:f4:34:17:02:21:90:3a:ce:61:
         b0:7e:25:e9:70:5f:7b:99:34:98:04:3b:f2:d3:6e:2b:9a:37:
         64:be:a8:f0:e8:fb:34:7b:05:ef:f1:da:a3:89:21:f6:bc:df:
         0e:44:4d:03:43:d5:d0:10:24:42:2a:f2:16:95:2b:f2:fa:5c:
         90:4e:a5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org