Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D1ZvgSRvnxcRVR1g8gJTeBu4GsVgkXT38exEufhx5Pgf/0/323830343a363565383a3a2f33322d3332203d3e20323639353232.roa
File:                     323830343a363565383a3a2f33322d3332203d3e20323639353232.roa (raw, json)
Hash identifier:          11Z4/doUJb/AaAMJpOxMs3ZxfFMdcAooOeGhJ17BYQ8=
Subject key identifier:   23:18:4B:AC:90:76:1A:E3:92:06:C9:EA:F4:83:B3:3C:F9:36:8B:28
Certificate issuer:       /CN=56039EB82C5411D70FD18734B264EEAA57F519F5
Certificate serial:       2172F0CB5D9A202E4E06A4B3F1DB1E67C8826DAB
Authority key identifier: 56:03:9E:B8:2C:54:11:D7:0F:D1:87:34:B2:64:EE:AA:57:F5:19:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56039EB82C5411D70FD18734B264EEAA57F519F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D1ZvgSRvnxcRVR1g8gJTeBu4GsVgkXT38exEufhx5Pgf/0/323830343a363565383a3a2f33322d3332203d3e20323639353232.roa
Signing time:             Wed 24 May 2023 20:11:18 +0000
ROA not before:           Wed 24 May 2023 20:06:18 +0000
ROA not after:            Wed 22 May 2024 20:11:18 +0000
asID:                     269522
IP address blocks:        2804:65e8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:72:f0:cb:5d:9a:20:2e:4e:06:a4:b3:f1:db:1e:67:c8:82:6d:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56039EB82C5411D70FD18734B264EEAA57F519F5
        Validity
            Not Before: May 24 20:06:18 2023 GMT
            Not After : May 22 20:11:18 2024 GMT
        Subject: CN=23184BAC90761AE39206C9EAF483B33CF9368B28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:55:55:59:25:4b:b5:dc:8b:03:60:b6:b0:4c:
                    53:81:dd:95:79:bc:89:ae:d3:a7:ee:98:b0:67:63:
                    57:f8:61:2f:c4:ec:b8:be:bd:3e:32:10:12:8a:12:
                    5a:19:4f:53:17:4d:ee:62:cf:67:72:45:6f:4a:10:
                    93:b5:12:7e:9e:c6:23:d8:74:45:ba:63:5b:ea:b4:
                    af:4b:ca:a2:6a:e9:b7:4f:da:a2:cd:1a:70:67:35:
                    e2:c3:0f:cd:35:f8:ee:50:e4:7c:53:c6:b3:6c:69:
                    49:33:f2:8a:a9:1f:e5:2d:5f:12:21:17:d6:9a:1c:
                    6e:ae:ab:35:b8:a8:99:19:ba:3f:ff:e9:82:c5:5d:
                    71:3c:85:58:65:55:e8:6c:e1:f5:d4:3c:00:b7:f7:
                    a8:ee:db:9f:ba:15:21:ed:cb:34:45:23:d1:b0:eb:
                    01:fc:67:14:ec:38:b2:ae:36:54:b7:d6:ba:a7:57:
                    0f:8e:f7:55:94:3e:a3:cf:39:6a:97:b3:29:40:91:
                    0c:db:23:8e:50:14:4f:60:a4:e1:72:b4:2e:a9:bf:
                    14:38:d9:62:ee:62:b6:15:3e:55:51:2f:e6:c3:7e:
                    2a:75:d2:9f:1e:fc:d8:f5:2c:64:bd:3d:02:38:ca:
                    86:c2:2d:5e:88:4a:96:4f:3f:17:37:a9:8d:2a:32:
                    36:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:18:4B:AC:90:76:1A:E3:92:06:C9:EA:F4:83:B3:3C:F9:36:8B:28
            X509v3 Authority Key Identifier:
                keyid:56:03:9E:B8:2C:54:11:D7:0F:D1:87:34:B2:64:EE:AA:57:F5:19:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D1ZvgSRvnxcRVR1g8gJTeBu4GsVgkXT38exEufhx5Pgf/0/56039EB82C5411D70FD18734B264EEAA57F519F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56039EB82C5411D70FD18734B264EEAA57F519F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1ZvgSRvnxcRVR1g8gJTeBu4GsVgkXT38exEufhx5Pgf/0/323830343a363565383a3a2f33322d3332203d3e20323639353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:5d:b2:b9:b8:9f:12:96:aa:46:64:de:6f:42:bd:c1:5b:cd:
         e6:a5:6a:70:61:c6:45:0c:ec:b9:08:8a:76:f8:41:89:cf:48:
         d3:e2:8a:dc:d1:ab:fa:ac:f6:06:fa:21:bc:83:bc:70:bd:7b:
         8a:71:97:63:2a:d9:ad:99:af:26:78:a4:04:ef:d0:ce:5c:32:
         98:e1:5f:04:c5:aa:07:76:76:f9:48:7c:e1:98:af:d9:b1:c6:
         af:64:41:9e:ab:c8:85:c6:75:bb:23:f3:00:96:93:6a:57:d8:
         82:18:41:9a:3c:7d:03:f9:6e:4f:e6:06:c6:5a:2c:f0:2f:97:
         a0:0c:54:fe:1d:e2:b7:02:2f:af:e8:f9:c1:90:38:ba:1c:a7:
         2f:1e:02:7d:d9:59:9c:e2:c1:32:0f:fa:55:71:79:a2:73:f4:
         5a:82:cb:38:e5:c0:85:ca:52:45:52:c3:ba:ec:64:9c:78:60:
         44:ea:0b:71:09:83:8b:41:44:79:61:85:94:66:ea:87:61:64:
         e2:ce:55:09:a2:62:25:07:c9:37:b1:2c:78:fd:ab:85:14:08:
         81:44:e2:fa:19:69:ca:5a:74:47:f7:75:db:2a:25:59:13:1b:
         27:8f:d1:1c:78:37:a7:a6:0a:02:93:a1:05:93:21:c2:1f:1a:
         a0:d5:9d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org