Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/323830343a323539633a3130303a3a2f34302d3430203d3e203532373732.roa
File:                     323830343a323539633a3130303a3a2f34302d3430203d3e203532373732.roa (raw, json)
Hash identifier:          zVBpVPWfDkqysiENXkmM0WzhdisIaPAk77tczSSD4+Q=
Subject key identifier:   51:5A:36:BC:39:05:70:88:DE:BC:BC:8C:B0:9A:A6:07:7A:F4:46:24
Certificate issuer:       /CN=2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F
Certificate serial:       59BFDC14F0DABB16CA400C6A66FD6B4CF132C7A6
Authority key identifier: 2B:0E:37:CE:5F:21:EE:8A:D5:F2:86:A8:2A:5B:F9:E4:5B:30:BE:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/323830343a323539633a3130303a3a2f34302d3430203d3e203532373732.roa
Signing time:             Wed 03 Apr 2024 21:54:18 +0000
ROA not before:           Wed 03 Apr 2024 21:49:18 +0000
ROA not after:            Wed 02 Apr 2025 21:54:18 +0000
asID:                     52772
IP address blocks:        2804:259c:100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:bf:dc:14:f0:da:bb:16:ca:40:0c:6a:66:fd:6b:4c:f1:32:c7:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F
        Validity
            Not Before: Apr  3 21:49:18 2024 GMT
            Not After : Apr  2 21:54:18 2025 GMT
        Subject: CN=515A36BC39057088DEBCBC8CB09AA6077AF44624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1b:f3:87:0a:ce:83:3d:30:ee:4a:89:80:d9:
                    b5:c3:ef:0d:d3:38:22:62:fa:49:11:fd:03:06:1b:
                    c7:ff:52:d0:05:75:7a:85:fa:07:eb:8e:2e:bc:52:
                    ad:d2:ea:09:c3:9e:05:87:47:07:47:82:32:32:e1:
                    04:32:96:10:5d:fb:7b:4a:91:0e:58:53:99:00:18:
                    c0:5d:e4:e5:4d:5a:8e:fa:c9:c9:ed:eb:d3:59:f0:
                    a0:0e:25:8f:0a:ee:c1:b1:a7:2b:5e:17:f9:30:41:
                    52:ea:e2:d9:44:52:c5:e7:ef:68:64:bf:02:bc:46:
                    42:71:f3:3f:92:6a:f1:c2:a6:32:8c:fc:d0:9b:04:
                    5b:c8:fc:a7:d8:2b:3e:c4:28:2f:2f:2e:b6:3e:22:
                    0f:f0:e0:b5:0e:8d:f7:4d:49:c7:4a:cc:86:03:31:
                    9d:e0:c8:58:ca:18:0f:02:df:1f:da:42:c6:2c:67:
                    0d:f4:a3:87:6a:d8:39:5e:c1:32:5a:7a:e8:f4:8e:
                    40:17:7d:e7:52:cb:e0:25:2d:8e:5c:01:88:28:3f:
                    21:a1:9e:dd:3a:69:06:3d:2e:77:cd:15:d5:f9:ab:
                    53:73:52:14:4b:72:99:66:22:c3:62:96:75:b5:f4:
                    07:1e:ec:89:d1:78:84:a6:16:8e:e6:56:ae:fa:4c:
                    9c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5A:36:BC:39:05:70:88:DE:BC:BC:8C:B0:9A:A6:07:7A:F4:46:24
            X509v3 Authority Key Identifier:
                keyid:2B:0E:37:CE:5F:21:EE:8A:D5:F2:86:A8:2A:5B:F9:E4:5B:30:BE:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/323830343a323539633a3130303a3a2f34302d3430203d3e203532373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:259c:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         23:8d:2e:9a:ce:5f:9f:58:c8:c2:f3:31:23:b7:27:1f:0b:84:
         ad:67:74:0d:84:ff:c8:14:98:27:9a:ad:ac:0c:01:e6:5e:75:
         5f:fb:d3:ca:25:37:49:2e:e1:41:ec:50:35:12:bb:70:b0:33:
         3d:10:a1:a7:24:c1:95:c4:1e:74:d3:f3:f4:f6:fb:19:31:26:
         1d:6c:ff:00:f4:94:14:08:60:42:31:5c:59:8b:43:85:62:6c:
         b0:85:e9:61:55:cc:d5:67:75:be:f9:5a:e8:26:41:a6:3a:da:
         95:5f:d7:32:cf:d1:05:66:c3:91:b8:2b:36:26:57:09:ae:4d:
         11:ce:ef:42:00:bf:9a:ba:17:8b:48:6d:3a:c5:17:36:1b:3b:
         40:bd:e1:cd:ff:82:d3:31:89:fe:0d:d0:79:9f:12:66:9c:43:
         a1:b4:3b:13:82:61:46:57:4c:fe:39:02:9f:d4:00:ea:d8:21:
         d5:ee:7a:2c:f7:da:f4:07:bf:02:78:c1:16:8c:ea:58:2a:52:
         c2:50:ff:88:d4:e2:ba:39:f2:43:39:7b:ee:5c:29:26:08:a6:
         aa:31:fe:ac:e6:dd:16:20:3c:e2:4f:d8:78:08:53:2c:05:09:
         83:59:03:a9:9d:45:0e:90:cf:61:ca:9e:0c:f8:af:19:4a:c4:
         e5:48:bd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 01:37:21 2024 by rpki-client on console-fra.rpki-client.org