Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFLAXyuNxATrvTpXvjirVLZNjjRDve8gxoKR6gJKMRao/0/323830343a373333303a3a2f33332d3333203d3e20323730393031.roa
File:                     323830343a373333303a3a2f33332d3333203d3e20323730393031.roa (raw, json)
Hash identifier:          fnu5L6JpgJJx9YOEZSNh3uPKTApnS37etff0FO1H1fw=
Subject key identifier:   32:CC:1C:72:76:73:88:7D:24:FE:2D:8D:E1:69:DC:99:E5:B9:30:C4
Certificate issuer:       /CN=5FEADC6697C33FDC01E1277B2D9C31CF1B27B564
Certificate serial:       1E66E38A9390546D11263B7424C3CE8115BBECD2
Authority key identifier: 5F:EA:DC:66:97:C3:3F:DC:01:E1:27:7B:2D:9C:31:CF:1B:27:B5:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FEADC6697C33FDC01E1277B2D9C31CF1B27B564.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFLAXyuNxATrvTpXvjirVLZNjjRDve8gxoKR6gJKMRao/0/323830343a373333303a3a2f33332d3333203d3e20323730393031.roa
Signing time:             Mon 22 May 2023 18:59:07 +0000
ROA not before:           Mon 22 May 2023 18:54:07 +0000
ROA not after:            Mon 20 May 2024 18:59:07 +0000
asID:                     270901
IP address blocks:        2804:7330::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:66:e3:8a:93:90:54:6d:11:26:3b:74:24:c3:ce:81:15:bb:ec:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FEADC6697C33FDC01E1277B2D9C31CF1B27B564
        Validity
            Not Before: May 22 18:54:07 2023 GMT
            Not After : May 20 18:59:07 2024 GMT
        Subject: CN=32CC1C727673887D24FE2D8DE169DC99E5B930C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:03:46:51:f4:ab:4b:51:84:5c:7a:0d:aa:7a:
                    ef:30:51:c3:3e:af:99:a7:0f:6e:8f:ba:58:2c:96:
                    72:3a:37:90:ac:be:49:f5:f6:3d:fa:12:66:30:b6:
                    69:91:05:7b:9a:c2:f1:93:e7:9c:c4:39:1b:af:29:
                    5a:f9:4f:73:19:0a:b4:1f:42:ca:0f:81:52:69:1e:
                    95:c9:21:24:04:d4:4b:8a:1f:45:02:ef:74:7e:4c:
                    cd:c6:c2:61:6f:01:02:5e:19:f7:e2:4b:99:3e:6b:
                    2a:1f:3e:6d:3c:76:a3:38:7c:4d:83:c0:16:24:39:
                    e5:c6:0b:d6:bf:2b:40:30:4b:21:c5:04:93:9a:a4:
                    d5:12:03:5e:32:3c:28:dd:17:a4:de:d1:d0:4e:87:
                    81:b0:27:56:cb:56:96:98:6b:9f:f1:2a:ce:14:ac:
                    21:81:03:d5:d3:94:bf:59:68:fb:0c:fe:2c:7e:fe:
                    9d:2c:a0:12:75:1e:91:0d:0f:1f:4e:ec:ec:42:88:
                    fb:33:d8:93:9d:86:cd:0e:8c:97:7f:e9:a0:d0:a7:
                    75:5f:35:d2:18:08:52:bd:c3:13:b7:55:05:57:cc:
                    eb:0b:3e:8a:86:70:f9:2e:66:9a:e2:37:63:46:d8:
                    59:46:c2:1a:b9:5e:5d:a3:86:28:5c:03:45:94:fa:
                    cc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:CC:1C:72:76:73:88:7D:24:FE:2D:8D:E1:69:DC:99:E5:B9:30:C4
            X509v3 Authority Key Identifier:
                keyid:5F:EA:DC:66:97:C3:3F:DC:01:E1:27:7B:2D:9C:31:CF:1B:27:B5:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFLAXyuNxATrvTpXvjirVLZNjjRDve8gxoKR6gJKMRao/0/5FEADC6697C33FDC01E1277B2D9C31CF1B27B564.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FEADC6697C33FDC01E1277B2D9C31CF1B27B564.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFLAXyuNxATrvTpXvjirVLZNjjRDve8gxoKR6gJKMRao/0/323830343a373333303a3a2f33332d3333203d3e20323730393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7330::/33

    Signature Algorithm: sha256WithRSAEncryption
         72:17:78:f7:32:7a:15:30:56:4d:c6:95:c3:eb:61:32:62:16:
         6f:4c:60:dc:a6:50:77:84:5c:9a:a7:8d:11:eb:87:fa:95:e4:
         80:2f:13:21:1e:22:dc:4e:fc:c5:33:ad:27:aa:5b:67:e3:89:
         6e:cf:d8:f7:dd:d4:35:71:7d:8c:26:63:89:43:78:40:00:1b:
         1b:83:2d:d1:9b:71:37:f4:15:f3:14:23:53:78:18:29:ea:65:
         e2:1a:29:4f:11:db:46:01:98:cb:ba:b2:95:02:0f:e3:f3:62:
         35:52:4d:fa:73:7c:e0:0d:15:1f:45:71:c7:7d:f9:72:d5:d6:
         cb:8f:61:8b:fd:49:93:d2:b7:bd:9c:b4:17:fc:b4:81:74:e8:
         f6:b9:d0:ff:19:21:aa:c4:db:50:5d:95:32:0b:20:5d:91:2f:
         76:b7:5a:27:33:32:d8:df:aa:71:ca:b2:61:f2:ad:95:19:1f:
         23:bb:1b:ad:1f:13:b6:dc:ae:69:dd:5f:11:f6:7c:1a:92:5e:
         88:26:44:59:25:f2:93:ef:9a:77:af:99:6c:2a:16:83:95:87:
         4c:6c:b0:ca:87:85:96:dd:ef:ae:64:dd:a3:c6:4a:e2:ef:03:
         ce:d6:68:7b:84:fe:70:3a:72:26:3c:00:2e:1b:34:3e:7a:8f:
         16:e6:bd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org