Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/1/323830343a366238383a633030303a3a2f33342d3334203d3e20323730343036.roa
File:                     323830343a366238383a633030303a3a2f33342d3334203d3e20323730343036.roa (raw, json)
Hash identifier:          1HMQS0PmJrPnMr6yG7jtDppFC7IpQkLo3cAtaKZ4HX0=
Subject key identifier:   CA:C8:EA:46:E9:56:6D:A8:9D:ED:9B:63:1A:BA:A4:DC:B3:29:6F:73
Certificate issuer:       /CN=558F5EA6605670CFCCE5E212457DC4ABF929F3DB
Certificate serial:       1FB3D1967C08F7329748CE8DBA9CC5D3C6E1D5B8
Authority key identifier: 55:8F:5E:A6:60:56:70:CF:CC:E5:E2:12:45:7D:C4:AB:F9:29:F3:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/558F5EA6605670CFCCE5E212457DC4ABF929F3DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/1/323830343a366238383a633030303a3a2f33342d3334203d3e20323730343036.roa
Signing time:             Wed 03 Apr 2024 20:33:51 +0000
ROA not before:           Wed 03 Apr 2024 20:28:51 +0000
ROA not after:            Wed 02 Apr 2025 20:33:51 +0000
asID:                     270406
IP address blocks:        2804:6b88:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:b3:d1:96:7c:08:f7:32:97:48:ce:8d:ba:9c:c5:d3:c6:e1:d5:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558F5EA6605670CFCCE5E212457DC4ABF929F3DB
        Validity
            Not Before: Apr  3 20:28:51 2024 GMT
            Not After : Apr  2 20:33:51 2025 GMT
        Subject: CN=CAC8EA46E9566DA89DED9B631ABAA4DCB3296F73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a4:d9:ec:60:cb:cc:67:cb:35:bd:e8:40:52:
                    b0:73:ca:34:ed:2e:a8:0e:ff:b8:9b:48:32:1f:5a:
                    a7:b5:f0:fb:7e:04:1f:4a:38:a6:1a:32:09:9a:52:
                    69:91:8b:5f:04:ee:c0:40:09:b0:f3:01:df:b3:65:
                    b6:b9:fd:48:61:75:aa:9c:e5:fc:f8:7d:55:64:45:
                    04:ce:63:11:00:50:1f:eb:3d:4d:55:89:5b:11:f7:
                    07:c5:0d:98:cb:dd:b6:c9:e1:1c:f5:8e:3c:45:2a:
                    55:e7:b2:f7:86:07:90:41:2f:20:e6:93:55:70:87:
                    3b:9f:a1:40:09:68:6c:1d:a8:5a:76:b9:3f:86:7f:
                    e9:6a:06:b4:8c:de:04:ab:cf:a2:8b:b7:5d:fe:b8:
                    5a:d7:64:8e:72:9e:7d:e7:4d:9a:d1:49:60:da:46:
                    42:e3:9d:14:7a:45:ca:7a:d9:f3:a7:09:7a:9d:df:
                    76:3b:92:5b:d6:87:44:33:18:69:25:87:f4:72:e3:
                    d2:ec:a6:b2:eb:cd:5c:1f:c2:46:aa:12:c6:f1:46:
                    fe:f1:06:7d:57:71:13:aa:3d:19:41:f6:2c:e4:e1:
                    e4:cb:cb:11:b0:b2:3c:f9:d4:2e:c4:12:c6:e1:00:
                    7b:85:d7:b2:4d:17:7a:e8:b1:08:77:75:94:89:40:
                    4a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C8:EA:46:E9:56:6D:A8:9D:ED:9B:63:1A:BA:A4:DC:B3:29:6F:73
            X509v3 Authority Key Identifier:
                keyid:55:8F:5E:A6:60:56:70:CF:CC:E5:E2:12:45:7D:C4:AB:F9:29:F3:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/1/558F5EA6605670CFCCE5E212457DC4ABF929F3DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/558F5EA6605670CFCCE5E212457DC4ABF929F3DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/1/323830343a366238383a633030303a3a2f33342d3334203d3e20323730343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b88:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         39:d6:3f:d0:d5:b3:0b:97:c8:d7:5e:fe:41:9c:2d:b9:fc:3f:
         55:0d:95:8f:45:ef:ff:5a:f6:33:c4:00:8f:32:a2:bb:1f:a1:
         d4:7f:16:32:6d:7c:8e:c5:64:3c:cd:7a:d9:46:d4:f8:99:68:
         e3:af:64:dc:1d:88:5c:40:df:02:f9:b2:dd:9a:be:1a:c0:b4:
         14:73:b6:b8:c7:fa:7d:89:a1:00:d0:de:f7:c2:4c:6e:ad:78:
         b3:9b:c0:18:e3:b2:30:7a:6c:79:0f:73:3b:b5:97:97:e0:4d:
         37:0e:9d:9c:b4:6e:4d:9a:90:68:8e:94:8e:0a:44:ba:38:11:
         50:71:93:1b:b0:ba:c9:3a:46:82:3c:19:30:83:1e:01:be:4f:
         84:5a:2d:e6:08:7b:48:30:3e:d7:e4:ff:2e:d4:69:ba:6d:e4:
         30:0a:4c:94:9d:41:bf:a6:0b:02:1b:1c:94:01:ce:e5:5e:94:
         09:0c:76:e9:a2:3c:d6:ee:db:37:06:92:4e:1f:9d:7a:68:38:
         d6:9a:79:cd:53:39:c0:3b:ec:7c:15:ef:5c:84:b7:47:30:5e:
         43:ee:03:66:01:a0:59:21:d0:df:9c:40:7a:6a:3c:f4:3f:05:
         82:38:2e:06:e6:a5:c8:54:95:27:8b:4b:74:9b:88:43:f1:4a:
         fe:da:2e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org