Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a32303a3a2f34382d3438203d3e203631383332.roa
File:                     323830343a316130343a32303a3a2f34382d3438203d3e203631383332.roa (raw, json)
Hash identifier:          pJa8TkmrxUKLe2SxSNFRMKoCpnSOdJJPVzZEhKcyYkY=
Subject key identifier:   01:39:0E:05:93:D2:C9:FD:69:05:3D:49:45:07:37:E9:01:0D:D8:C3
Certificate issuer:       /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial:       68596CF80F86ABFC63092235203E62059BB32052
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a32303a3a2f34382d3438203d3e203631383332.roa
Signing time:             Wed 07 Jun 2023 16:37:21 +0000
ROA not before:           Wed 07 Jun 2023 16:32:21 +0000
ROA not after:            Wed 05 Jun 2024 16:37:21 +0000
asID:                     61832
IP address blocks:        2804:1a04:20::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:59:6c:f8:0f:86:ab:fc:63:09:22:35:20:3e:62:05:9b:b3:20:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
        Validity
            Not Before: Jun  7 16:32:21 2023 GMT
            Not After : Jun  5 16:37:21 2024 GMT
        Subject: CN=01390E0593D2C9FD69053D49450737E9010DD8C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b1:3d:f4:92:01:95:d8:57:75:ea:57:12:df:
                    af:c1:b3:b0:70:1a:a9:0c:f7:34:bf:8b:3c:cd:13:
                    90:a5:c4:88:b8:c5:a3:84:c7:73:75:6a:06:7a:68:
                    bb:e2:d2:36:1b:50:f0:47:f6:bc:35:a5:50:c2:eb:
                    9c:e2:03:fd:55:ad:f0:62:17:0b:a4:fd:1d:70:cc:
                    42:a5:cd:c1:97:6b:50:3f:02:f4:eb:9f:26:c3:4f:
                    5a:e2:78:ca:d8:a9:3a:e0:0e:3d:d8:a6:36:f2:b1:
                    65:62:75:ad:f2:95:b1:b7:a8:9a:55:47:7f:be:bc:
                    8e:3d:56:55:f5:e0:12:2b:fd:68:bb:3a:22:78:65:
                    12:0e:dc:be:ba:33:11:79:4e:92:10:38:97:44:3b:
                    87:ed:22:05:01:0c:a7:8a:5a:a9:2b:5a:b3:a1:8d:
                    ee:4e:26:2e:72:0c:87:6e:9c:2a:2f:03:4c:c1:91:
                    01:bb:74:f4:c9:76:f4:3c:ef:9c:06:02:a4:6f:61:
                    67:07:92:05:80:8d:2c:bc:be:f5:17:c0:a1:ec:fa:
                    74:bb:d8:c7:2b:82:3b:8a:9e:46:b7:c6:57:49:02:
                    75:92:fa:7d:7e:03:9c:d5:a1:c1:81:c0:2d:ad:07:
                    57:e6:c3:52:9c:9c:1a:19:ce:e5:8d:8d:92:7e:0b:
                    8b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:39:0E:05:93:D2:C9:FD:69:05:3D:49:45:07:37:E9:01:0D:D8:C3
            X509v3 Authority Key Identifier:
                keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a32303a3a2f34382d3438203d3e203631383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a04:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:63:62:47:e0:02:f9:f3:36:8d:9d:ed:7b:98:c9:f5:d2:e5:
         f1:3e:52:c6:b1:dc:59:79:a9:cc:0e:5e:8a:3a:37:72:3b:68:
         60:36:82:6e:e1:c0:59:af:8b:ad:ed:d5:28:b2:a9:1a:8e:10:
         90:0f:a7:5e:37:88:85:8a:7c:b5:fe:72:f3:6a:aa:1c:af:3b:
         ca:90:af:ea:38:2f:ba:d7:49:53:2c:5d:be:19:a0:45:eb:2f:
         c1:cf:27:df:fe:17:08:6f:39:5e:b5:b7:f3:c0:b2:ec:54:5b:
         54:65:2a:88:aa:e4:1e:44:da:bb:db:a9:5b:89:94:2d:ac:03:
         54:e1:62:8d:c2:2b:df:24:70:a6:06:e1:e2:0a:9b:5f:0a:36:
         ac:04:3d:cf:b6:58:ce:94:72:5e:8a:f5:c7:48:aa:1a:bd:78:
         15:55:c7:fc:bb:f1:29:bc:f5:2d:a3:a8:81:4e:77:48:6d:9b:
         5d:da:48:ce:9e:6f:d0:3e:77:a2:1f:7a:c8:98:a3:d1:53:c9:
         c0:e5:5e:ad:ce:ae:4e:37:94:fc:c9:ba:d4:b0:7a:20:2e:42:
         57:e5:cd:fb:42:39:de:3e:c2:45:73:27:b8:75:73:27:7c:08:
         fd:c5:52:a1:21:36:e1:bf:d7:49:a6:e9:30:0b:3a:1e:87:1a:
         71:c5:ec:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org