Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/0/323830343a316164383a3a2f33322d3332203d3e203532353839.roa
File:                     323830343a316164383a3a2f33322d3332203d3e203532353839.roa (raw, json)
Hash identifier:          dtb93IApp8DYgHzwRtD51BZSyF7S7fIjzZDBWU4kzWA=
Subject key identifier:   9C:22:6A:B6:99:8A:6A:D3:05:DC:C2:33:9B:62:26:36:F8:1C:80:93
Certificate issuer:       /CN=6105708DECB452B1B805D7D6266F2D51732B8FBE
Certificate serial:       43EB202B34AB43F9B22B469AA956B04CA685CA0F
Authority key identifier: 61:05:70:8D:EC:B4:52:B1:B8:05:D7:D6:26:6F:2D:51:73:2B:8F:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6105708DECB452B1B805D7D6266F2D51732B8FBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/0/323830343a316164383a3a2f33322d3332203d3e203532353839.roa
Signing time:             Fri 22 Apr 2022 10:45:57 +0000
ROA not before:           Fri 22 Apr 2022 10:40:57 +0000
ROA not after:            Fri 21 Apr 2023 10:45:57 +0000
asID:                     52589
IP address blocks:        2804:1ad8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:eb:20:2b:34:ab:43:f9:b2:2b:46:9a:a9:56:b0:4c:a6:85:ca:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6105708DECB452B1B805D7D6266F2D51732B8FBE
        Validity
            Not Before: Apr 22 10:40:57 2022 GMT
            Not After : Apr 21 10:45:57 2023 GMT
        Subject: CN=9C226AB6998A6AD305DCC2339B622636F81C8093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:62:93:0b:0b:64:c1:db:e3:74:3b:f4:08:8c:
                    d3:84:21:1e:fe:f0:d7:f9:bc:09:e8:32:d1:9d:6a:
                    00:dc:12:a1:d1:59:e4:de:dc:da:41:d1:19:7a:da:
                    49:d6:f8:d7:9b:ce:75:aa:87:19:07:7b:9a:46:60:
                    4b:61:c5:7e:bb:00:cb:93:6e:ac:31:24:59:7d:53:
                    63:e9:43:c9:70:5e:6c:12:c7:2d:a0:3a:b8:37:39:
                    48:7e:be:71:ee:5d:8f:9e:56:78:cd:31:ba:d6:a6:
                    8f:86:ee:aa:2c:88:58:e9:ab:72:86:03:8a:fa:87:
                    33:5d:c9:07:da:8c:df:1b:87:ea:c3:ef:11:d4:de:
                    6f:82:b1:09:08:48:08:97:da:7e:6e:a5:cb:fa:3a:
                    d2:cf:58:4a:c4:f6:10:55:48:81:62:85:92:5b:d7:
                    b3:3f:cc:96:ec:02:9b:2f:8e:6d:3e:90:84:3b:71:
                    5e:cc:f2:47:7f:8b:b8:ea:a6:aa:6a:f3:00:55:bb:
                    d6:3f:a6:88:b8:75:23:ee:66:7b:c1:39:9f:72:89:
                    36:73:9c:d9:ef:fa:b0:9b:22:2b:9b:27:1f:4b:a1:
                    0a:9a:67:d4:fb:0e:9d:9c:28:5c:67:33:44:0c:38:
                    b4:a8:d0:d9:e3:27:97:60:cb:94:33:77:65:a5:32:
                    ae:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:22:6A:B6:99:8A:6A:D3:05:DC:C2:33:9B:62:26:36:F8:1C:80:93
            X509v3 Authority Key Identifier:
                keyid:61:05:70:8D:EC:B4:52:B1:B8:05:D7:D6:26:6F:2D:51:73:2B:8F:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/0/6105708DECB452B1B805D7D6266F2D51732B8FBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6105708DECB452B1B805D7D6266F2D51732B8FBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/0/323830343a316164383a3a2f33322d3332203d3e203532353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ad8::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:94:04:13:33:aa:0b:a4:3e:3e:4d:09:9a:91:23:0d:71:41:
         c3:03:52:24:6f:da:50:21:77:46:e6:e2:84:17:aa:e9:33:26:
         7b:44:ab:43:c5:39:01:ec:c7:04:d4:ed:1b:0a:db:de:ed:09:
         f0:d1:8f:a1:1f:5d:8e:8e:5d:62:a6:95:fd:47:b8:71:2a:02:
         eb:dc:8f:ce:36:71:1d:88:cb:de:4a:2a:cb:ff:55:3b:2e:22:
         06:89:e5:45:8f:32:e8:e6:82:c0:56:76:a4:d8:69:65:db:98:
         3d:0d:0d:f4:2a:e7:c4:ea:bb:de:64:3a:70:1e:7b:62:5e:d3:
         d6:d1:ba:26:35:29:e6:15:b4:c7:57:00:7c:a1:79:3e:b4:e0:
         4e:f6:2d:ef:0c:3e:56:9e:e8:f7:68:e3:e3:89:f5:02:6a:da:
         dc:ef:29:2e:26:8f:6b:48:01:0c:ce:f6:36:a2:66:9e:57:60:
         8a:e6:85:67:2d:79:84:cc:6c:95:10:80:3b:1e:ae:0e:73:2b:
         23:d1:cb:6b:5f:5d:af:3e:de:8e:f9:f6:fa:13:46:4b:4b:0f:
         c2:f5:a5:5b:5c:23:cb:f0:60:84:74:bb:07:b9:ed:d9:56:cf:
         fd:2b:af:bf:10:a5:85:63:bc:ec:b5:d5:3f:9d:df:28:fe:06:
         44:fe:6b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org