Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a32383a3a2f34382d3438203d3e203631383332.roa
File:                     323830343a316130343a32383a3a2f34382d3438203d3e203631383332.roa (raw, json)
Hash identifier:          bhHolvbWl+NyX8fc9Jl4icG8pdSf+loLLMu5zf/sIhQ=
Subject key identifier:   50:1B:63:DD:9D:E3:47:53:AF:1A:D7:87:44:66:81:D9:CA:AE:9B:D9
Certificate issuer:       /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial:       24724A2184B3CE9E05A0BA198F2DE47E04B58B5A
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a32383a3a2f34382d3438203d3e203631383332.roa
Signing time:             Thu 05 Oct 2023 17:51:46 +0000
ROA not before:           Thu 05 Oct 2023 17:46:46 +0000
ROA not after:            Thu 03 Oct 2024 17:51:46 +0000
asID:                     61832
IP address blocks:        2804:1a04:28::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:72:4a:21:84:b3:ce:9e:05:a0:ba:19:8f:2d:e4:7e:04:b5:8b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
        Validity
            Not Before: Oct  5 17:46:46 2023 GMT
            Not After : Oct  3 17:51:46 2024 GMT
        Subject: CN=501B63DD9DE34753AF1AD787446681D9CAAE9BD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5c:ed:b5:e1:eb:4f:44:c3:f4:54:01:f4:0d:
                    26:94:fb:43:53:3f:92:a4:c9:52:14:42:48:7e:d6:
                    09:52:9f:71:4d:63:32:8e:a8:d7:7e:50:c7:4e:b4:
                    8f:1f:e6:6f:7d:f5:db:68:c0:10:db:f1:ae:3f:fb:
                    59:5a:00:07:41:c9:ed:27:49:44:67:35:02:87:d1:
                    1f:6a:3f:36:72:e6:1f:75:c3:6d:7c:b7:68:1b:9d:
                    36:78:05:d4:86:18:36:bd:be:da:72:84:ce:76:49:
                    ab:41:db:83:f7:b2:a5:74:5c:f8:42:45:75:f7:a9:
                    5f:93:45:61:3d:2d:99:11:3b:1e:4f:2b:a9:5a:d4:
                    f7:94:62:a8:83:48:3f:8a:83:71:e4:75:04:26:bf:
                    c6:89:bf:93:86:f2:ef:e7:3a:8f:27:ad:57:a5:88:
                    5d:66:ae:8d:14:43:48:b9:c5:ce:26:fd:f8:71:c6:
                    bc:0d:5a:a3:df:36:85:d3:01:4d:c5:25:82:c9:62:
                    82:e8:49:f0:08:a8:a1:78:13:0f:e5:90:1c:79:47:
                    f3:f0:01:e4:83:b1:5e:01:68:00:a3:68:51:e8:9b:
                    d6:fc:cd:cb:cd:ca:7f:1f:5b:41:8d:54:f8:e4:ed:
                    67:62:84:29:38:cc:a4:5b:b4:c8:6c:9f:09:f8:a6:
                    ba:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:1B:63:DD:9D:E3:47:53:AF:1A:D7:87:44:66:81:D9:CA:AE:9B:D9
            X509v3 Authority Key Identifier:
                keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a32383a3a2f34382d3438203d3e203631383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a04:28::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:e5:f9:29:00:c2:99:c5:75:dc:51:fe:a7:36:0b:36:f4:00:
         7c:9b:ce:9d:a6:a5:8e:65:fd:39:a9:1a:6f:7a:0b:7d:58:aa:
         0a:2f:79:f2:9c:8b:45:e6:4f:96:69:05:9a:ed:11:1f:9f:73:
         50:7b:40:41:ff:59:7c:b3:73:40:9c:93:39:6b:02:9d:03:5e:
         7d:6b:e1:40:92:e5:14:6e:1a:26:ac:22:e6:95:80:3f:ed:01:
         b4:89:38:8c:70:56:75:78:04:5c:b9:30:d3:24:4d:6f:14:59:
         cf:7b:ff:78:75:0b:1e:d7:4d:ce:e1:30:d5:8c:ca:79:79:97:
         31:df:ea:92:7b:99:59:4f:3c:9c:53:44:24:1c:ab:3e:59:22:
         61:82:50:7b:c4:26:0c:a8:57:87:27:9a:06:70:59:f0:a4:01:
         86:81:f7:69:5d:4c:d3:3f:31:4b:ea:9f:2e:5d:ce:9b:31:88:
         aa:5a:09:17:cc:31:b7:4d:49:0e:3b:87:eb:3e:26:2f:80:93:
         c0:4f:f8:d9:f4:2e:7d:fb:92:83:20:f6:8e:87:d3:9d:7e:63:
         88:cc:3c:d5:ef:c1:81:18:2e:8c:26:af:1f:69:60:2f:aa:6a:
         70:99:53:6a:51:ef:5d:62:48:e8:0f:aa:e7:e4:9c:76:5a:ad:
         d2:4e:d4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org