Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/0/323830343a353530303a3a2f33342d313238203d3e20323638363833.roa
File:                     323830343a353530303a3a2f33342d313238203d3e20323638363833.roa (raw, json)
Hash identifier:          E74iBqF+8dreO6B7E3mT1NPAZFCtoL7ulGlSGbbYM1Q=
Subject key identifier:   8C:8C:76:75:DF:09:77:FF:31:82:AF:40:5B:3C:57:29:EA:13:3B:5F
Certificate issuer:       /CN=77221E37456D3A3771F725418DF86A07924D70B8
Certificate serial:       163B065A279535143EE871F48EC314E1675963CF
Authority key identifier: 77:22:1E:37:45:6D:3A:37:71:F7:25:41:8D:F8:6A:07:92:4D:70:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77221E37456D3A3771F725418DF86A07924D70B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/0/323830343a353530303a3a2f33342d313238203d3e20323638363833.roa
Signing time:             Wed 22 Nov 2023 19:27:20 +0000
ROA not before:           Wed 22 Nov 2023 19:22:20 +0000
ROA not after:            Wed 20 Nov 2024 19:27:20 +0000
asID:                     268683
IP address blocks:        2804:5500::/34 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:3b:06:5a:27:95:35:14:3e:e8:71:f4:8e:c3:14:e1:67:59:63:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77221E37456D3A3771F725418DF86A07924D70B8
        Validity
            Not Before: Nov 22 19:22:20 2023 GMT
            Not After : Nov 20 19:27:20 2024 GMT
        Subject: CN=8C8C7675DF0977FF3182AF405B3C5729EA133B5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:52:65:bb:7a:51:26:f5:58:a0:c2:85:4f:01:
                    4e:0c:11:4a:fb:26:93:85:5b:0b:a8:d2:98:1e:ae:
                    20:af:11:78:b9:45:ba:7f:06:75:a9:72:08:c4:c2:
                    b1:09:98:43:7b:57:d1:77:6f:1e:a8:57:8b:c5:eb:
                    65:b5:ca:a2:80:4b:d1:19:d5:a1:e9:31:c3:3e:6a:
                    56:ab:cf:70:f4:7a:cc:ab:09:0c:7d:ca:be:21:0c:
                    10:0b:62:ec:66:c9:ef:77:6e:88:31:54:4e:dd:7b:
                    fd:eb:21:c4:2a:b1:8f:70:6a:fc:d8:1f:df:00:a2:
                    3c:f7:71:12:88:94:0d:f1:b9:b1:a8:59:31:f2:6e:
                    3a:8e:70:d6:f4:a5:54:7c:a2:4f:b5:4a:bc:36:d8:
                    bb:65:4e:5c:41:ab:f8:5d:fe:10:e0:d5:ae:a8:6f:
                    e9:bb:24:8e:35:a4:99:cc:f0:e0:07:fb:78:a7:93:
                    5b:cc:7f:c4:05:b9:86:48:d1:04:b1:10:32:d2:95:
                    29:28:50:4d:6f:c3:d6:b6:ce:02:4c:55:a0:b7:46:
                    be:c7:d8:a0:70:35:ca:f8:b7:f9:17:4e:05:ef:27:
                    c7:d6:ea:e5:54:c1:a0:cd:8e:99:15:73:31:aa:7f:
                    2a:bd:96:02:9e:22:91:47:1b:73:3b:8b:f5:6e:66:
                    77:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8C:76:75:DF:09:77:FF:31:82:AF:40:5B:3C:57:29:EA:13:3B:5F
            X509v3 Authority Key Identifier:
                keyid:77:22:1E:37:45:6D:3A:37:71:F7:25:41:8D:F8:6A:07:92:4D:70:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/0/77221E37456D3A3771F725418DF86A07924D70B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77221E37456D3A3771F725418DF86A07924D70B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/0/323830343a353530303a3a2f33342d313238203d3e20323638363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5500::/34

    Signature Algorithm: sha256WithRSAEncryption
         2e:42:92:22:f1:3b:d3:64:0d:58:0e:ff:bd:d7:3f:85:c9:71:
         c1:1b:35:67:6f:af:27:76:15:56:f9:51:48:79:4a:17:a5:90:
         24:cb:db:11:15:b4:bb:5e:b7:7a:f4:07:d5:0e:6d:3f:d9:c4:
         d8:b7:76:da:2c:d3:93:04:ac:8c:89:4f:bb:85:9c:de:36:c2:
         6a:ee:46:95:d8:13:81:c4:2e:39:7f:e8:71:82:a3:a0:32:cc:
         4a:10:45:2b:06:2c:3a:3a:da:0b:fe:c8:74:65:f3:33:a9:fe:
         28:86:b7:b9:f0:68:51:49:82:af:29:e9:20:46:a0:4a:42:99:
         a7:cf:e0:aa:0d:1a:c0:1d:ee:9e:87:4e:12:04:f0:c5:33:d4:
         6f:ed:5a:4d:48:66:61:cf:93:fe:d8:08:94:3e:4e:54:d3:24:
         6f:71:1e:f2:70:c5:c0:c1:94:ef:87:39:45:f0:5a:6a:38:82:
         fe:ab:d8:30:9a:40:0d:7c:c0:b1:f1:bc:2f:af:dc:21:b7:54:
         5d:98:00:d1:ef:7e:84:2b:34:f9:96:85:41:f0:6f:04:5f:c4:
         c8:03:a3:6c:46:22:89:fa:3b:91:d9:e5:68:b9:97:ac:67:0a:
         d6:ef:a7:6e:c1:0c:cf:1a:c4:4e:6c:db:f6:c6:30:d1:e0:ed:
         96:09:fa:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:17 2024 by rpki-client on console-ams.rpki-client.org