Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a32323a3a2f34382d3438203d3e203631383332.roa
File:                     323830343a316130343a32323a3a2f34382d3438203d3e203631383332.roa (raw, json)
Hash identifier:          ayiYzrtJEPM8yGUY02oCoIKhqvuczft0neg4rx2RZrI=
Subject key identifier:   50:76:66:8B:4F:04:5F:49:EB:B8:C6:E4:F1:6F:B7:1E:2D:58:C0:89
Certificate issuer:       /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial:       36333246B4920E8978144832C9857B64C84EA1CB
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a32323a3a2f34382d3438203d3e203631383332.roa
Signing time:             Thu 05 Oct 2023 17:51:46 +0000
ROA not before:           Thu 05 Oct 2023 17:46:46 +0000
ROA not after:            Thu 03 Oct 2024 17:51:46 +0000
asID:                     61832
IP address blocks:        2804:1a04:22::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:33:32:46:b4:92:0e:89:78:14:48:32:c9:85:7b:64:c8:4e:a1:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
        Validity
            Not Before: Oct  5 17:46:46 2023 GMT
            Not After : Oct  3 17:51:46 2024 GMT
        Subject: CN=5076668B4F045F49EBB8C6E4F16FB71E2D58C089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c2:5c:02:49:cc:3f:97:56:95:2e:4e:a5:ac:
                    81:1a:36:19:4f:8e:f0:53:8d:ce:42:3f:e5:e1:1f:
                    dd:44:c1:58:97:96:9b:d1:05:0b:42:20:f0:87:66:
                    48:74:8d:77:79:82:df:91:0f:7b:ee:b2:54:a8:3d:
                    f3:08:6c:70:f1:19:51:69:4c:b2:b4:77:5f:fe:8e:
                    f3:90:49:5f:d8:33:58:9c:17:ca:fc:8f:7f:7c:f4:
                    ec:49:1b:f8:00:27:58:50:fd:62:b9:df:1d:44:0a:
                    d3:25:bd:ea:e2:da:3d:d5:24:0e:fa:c9:3f:d1:31:
                    02:b7:d9:f0:c5:cd:5a:62:b4:d9:01:b4:74:ba:ea:
                    4f:f4:16:ad:e5:13:6b:60:28:ca:5c:d9:4b:e1:49:
                    4f:3d:4e:d3:ea:20:a2:75:36:f2:67:aa:04:12:d4:
                    ad:db:b9:19:9f:4c:d6:51:5d:32:c7:fd:37:cb:db:
                    5e:c3:0f:88:e1:d3:2e:28:f7:aa:4d:3f:c9:f7:19:
                    c9:94:81:7e:9d:cb:d7:ea:16:bb:21:55:2d:a5:37:
                    46:22:f2:56:77:bd:8b:4e:87:cb:0d:de:1f:dc:8a:
                    68:ce:94:c1:fe:b7:76:4c:ad:9d:c7:40:be:2d:c3:
                    3a:62:51:42:ac:f8:dc:1a:1e:98:c9:24:8f:51:1d:
                    ee:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:76:66:8B:4F:04:5F:49:EB:B8:C6:E4:F1:6F:B7:1E:2D:58:C0:89
            X509v3 Authority Key Identifier:
                keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a32323a3a2f34382d3438203d3e203631383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a04:22::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:83:e7:42:83:07:18:f1:4b:5b:b1:f0:a2:c9:d8:39:0f:a3:
         59:07:e1:5f:b0:71:2f:b5:14:37:70:3b:c0:34:25:8f:db:49:
         a6:d9:4a:cc:e5:42:c0:90:30:d9:84:49:89:0c:b3:90:16:b1:
         d2:68:c6:1e:46:51:cb:75:ed:bc:31:22:4d:70:e4:5f:20:56:
         ad:1c:5a:5b:72:e3:53:61:45:ec:70:e4:81:60:fd:44:d1:7f:
         3f:01:6a:3e:fd:cd:b9:56:eb:69:18:70:0e:a3:56:c9:51:85:
         6d:fc:38:42:cd:e7:e0:4d:bb:24:ed:72:45:02:05:a6:f0:54:
         f1:c3:58:8e:36:7e:38:2c:4b:e1:7f:15:d3:4d:ed:49:ce:da:
         52:a7:ca:31:5b:e9:95:c7:fb:04:ef:a3:cb:c0:f8:ed:e7:85:
         3c:ff:1f:9c:28:e0:14:f1:6c:d1:80:67:f2:ea:fb:d6:4b:ef:
         a7:3d:cd:ea:4e:13:3a:3c:8d:bf:ee:ae:3a:4c:1b:2c:8d:60:
         89:ac:c1:2d:4e:7e:bc:ac:ed:7f:07:b7:ce:a9:ce:e2:2e:9e:
         93:fb:39:70:ab:64:fa:39:5b:2e:39:f1:53:f1:0b:41:c2:3d:
         97:cd:2d:2e:e1:09:71:ef:30:50:66:85:d0:a6:b3:5f:1c:b5:
         4d:f1:fc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org