Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D4xhzCjtGqfyJ4TPu2f6FAMXi5VUJoKdLn4RrkoV23Ey/0/323830343a383636303a3a2f33322d3332203d3e20323732363339.roa
File:                     323830343a383636303a3a2f33322d3332203d3e20323732363339.roa (raw, json)
Hash identifier:          rkOZgERpWii3JsixQoDer+3Tj7AU1/plz/KFfXOTxSM=
Subject key identifier:   A8:2E:55:88:22:24:20:3B:BF:BA:99:A0:09:3B:1E:76:3B:20:FF:A1
Certificate issuer:       /CN=D58EF563C3E71EBBE6485409B01C01B51887A2CF
Certificate serial:       419FEE7F475789AF62D9FACF2F57EB312D744895
Authority key identifier: D5:8E:F5:63:C3:E7:1E:BB:E6:48:54:09:B0:1C:01:B5:18:87:A2:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D58EF563C3E71EBBE6485409B01C01B51887A2CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4xhzCjtGqfyJ4TPu2f6FAMXi5VUJoKdLn4RrkoV23Ey/0/323830343a383636303a3a2f33322d3332203d3e20323732363339.roa
Signing time:             Tue 16 May 2023 17:38:02 +0000
ROA not before:           Tue 16 May 2023 17:33:02 +0000
ROA not after:            Tue 14 May 2024 17:38:02 +0000
asID:                     272639
IP address blocks:        2804:8660::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:9f:ee:7f:47:57:89:af:62:d9:fa:cf:2f:57:eb:31:2d:74:48:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D58EF563C3E71EBBE6485409B01C01B51887A2CF
        Validity
            Not Before: May 16 17:33:02 2023 GMT
            Not After : May 14 17:38:02 2024 GMT
        Subject: CN=A82E55882224203BBFBA99A0093B1E763B20FFA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a3:1a:f1:b5:38:9f:a4:27:c9:2d:db:1b:a4:
                    0b:df:7f:e9:ad:75:1d:66:91:61:d6:bb:b2:d9:a1:
                    46:5d:00:8d:03:39:38:90:f4:5e:63:6d:11:3f:1b:
                    cf:34:65:90:22:8d:13:ed:1c:ea:b3:41:41:ee:00:
                    d4:dc:01:e3:c9:e9:54:42:01:bc:70:a4:a5:b7:ec:
                    a0:09:82:57:bb:44:d4:25:b4:de:30:0a:29:70:75:
                    26:b0:83:86:2b:0d:e0:cf:04:56:f3:7f:70:04:32:
                    3d:22:41:90:ea:5d:55:ba:c7:3b:64:f6:f6:da:c4:
                    36:d5:46:03:27:5d:a0:8a:8c:96:0b:02:16:07:1c:
                    c7:e6:a4:68:aa:36:93:0f:41:11:a8:49:01:8b:6b:
                    4a:de:ad:bf:1f:27:00:91:49:de:a9:9b:05:69:c3:
                    ee:e5:06:df:38:d6:19:1e:1f:33:46:61:d1:25:8f:
                    3f:b7:9b:27:72:83:83:13:14:78:b9:50:ea:8f:01:
                    1d:18:23:42:62:ff:08:a1:7f:16:9f:fe:79:5c:d7:
                    35:80:47:7e:f4:5e:5b:d8:f6:a2:5f:55:1d:91:69:
                    00:5e:90:82:3e:d0:f4:ed:82:74:cc:ef:c4:4d:15:
                    b3:93:8f:da:b6:f6:ef:0e:84:8e:13:9c:d5:95:ce:
                    13:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:2E:55:88:22:24:20:3B:BF:BA:99:A0:09:3B:1E:76:3B:20:FF:A1
            X509v3 Authority Key Identifier:
                keyid:D5:8E:F5:63:C3:E7:1E:BB:E6:48:54:09:B0:1C:01:B5:18:87:A2:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4xhzCjtGqfyJ4TPu2f6FAMXi5VUJoKdLn4RrkoV23Ey/0/D58EF563C3E71EBBE6485409B01C01B51887A2CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D58EF563C3E71EBBE6485409B01C01B51887A2CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4xhzCjtGqfyJ4TPu2f6FAMXi5VUJoKdLn4RrkoV23Ey/0/323830343a383636303a3a2f33322d3332203d3e20323732363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8660::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:47:17:e8:b7:e8:7a:f6:d8:a8:ad:4b:fe:8b:37:b9:e8:f5:
         c2:ff:73:4f:48:24:ed:c2:f7:ad:b1:29:0b:6e:0e:43:29:b1:
         ea:15:1d:53:f0:19:4e:0e:94:19:78:6d:9f:89:7d:a7:a8:58:
         24:4d:23:e8:f0:db:6b:cc:8e:c8:05:c9:de:fc:bb:05:95:c1:
         ec:d0:82:8d:0b:56:2c:84:f4:d2:2e:7d:2e:53:a1:08:2a:a9:
         65:d8:74:04:4a:d2:fe:84:d8:9a:11:b5:8e:32:94:38:ef:05:
         ed:85:05:13:0e:e0:3c:5f:77:28:fb:d3:cc:03:48:f1:f6:2d:
         55:b3:5a:79:e2:3b:94:e0:ea:1b:b6:72:db:f5:b9:5f:8a:51:
         f6:1b:13:f9:80:9c:a3:a5:13:32:1a:71:e7:fd:b2:c7:7f:ec:
         4e:a5:f1:bd:d6:b0:65:07:e9:76:6d:74:9b:ca:c5:a7:c8:9a:
         47:bb:42:ab:c6:13:d1:65:47:98:e3:ac:b9:97:33:08:4d:c1:
         cf:e7:b6:0d:29:51:7a:fe:87:24:23:96:a4:11:29:41:cf:dc:
         01:00:14:e5:f1:64:4e:4c:00:87:e9:bc:5b:a4:aa:e2:8b:6d:
         16:d1:6d:b5:f1:ab:b8:11:22:98:aa:60:56:ae:51:1c:a3:ac:
         bc:f7:6a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org