Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/323830343a323934383a323030303a3a2f33362d3336203d3e20323634303031.roa
File:                     323830343a323934383a323030303a3a2f33362d3336203d3e20323634303031.roa (raw, json)
Hash identifier:          tB4MYcNXXPfl4ZVQgwEIv86wiPMxWelV9Xhkm3ozJ1s=
Subject key identifier:   AF:E1:A2:8F:79:7A:6D:FF:24:82:84:7B:E8:1A:BA:7C:68:0C:60:90
Certificate issuer:       /CN=5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1
Certificate serial:       071753ED09CF8727A9782B8C060C1C7E46087CAD
Authority key identifier: 5B:D9:C3:7F:56:17:60:31:7D:A7:70:DA:6B:6E:5E:3C:C7:2A:9F:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/323830343a323934383a323030303a3a2f33362d3336203d3e20323634303031.roa
Signing time:             Tue 18 Apr 2023 13:46:41 +0000
ROA not before:           Tue 18 Apr 2023 13:41:41 +0000
ROA not after:            Tue 16 Apr 2024 13:46:41 +0000
asID:                     264001
IP address blocks:        2804:2948:2000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:17:53:ed:09:cf:87:27:a9:78:2b:8c:06:0c:1c:7e:46:08:7c:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1
        Validity
            Not Before: Apr 18 13:41:41 2023 GMT
            Not After : Apr 16 13:46:41 2024 GMT
        Subject: CN=AFE1A28F797A6DFF2482847BE81ABA7C680C6090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:26:9c:2f:3c:c7:4f:3d:89:48:44:e4:cf:ee:
                    1c:4a:8a:ab:53:df:b5:9a:c6:00:d5:65:82:a5:6f:
                    0a:dd:6b:ad:67:85:17:6e:9e:a8:24:8e:12:70:2c:
                    d9:ba:04:13:06:ca:20:4e:d2:b8:d2:ea:24:c2:01:
                    b8:d4:ec:53:75:35:ef:6f:81:09:ed:91:6d:c8:46:
                    24:81:95:95:ce:5f:b1:ea:dc:8c:0a:31:74:2c:d2:
                    61:f3:49:db:bb:b5:24:ca:4e:bc:4f:13:27:eb:92:
                    66:d7:93:10:b9:4b:d8:f3:20:cd:4b:8c:ae:16:f7:
                    20:ed:1e:f6:77:03:5f:30:a3:8e:e5:14:e4:40:63:
                    fd:8d:71:c4:b4:cf:a2:2d:df:42:de:92:16:8d:b3:
                    4b:78:b6:a7:42:91:e1:61:0c:57:1d:54:87:9b:bf:
                    ee:f2:a0:87:09:ff:13:35:85:57:6c:0a:3a:a2:c2:
                    12:cc:60:e7:84:a5:66:c6:98:1a:e0:c9:63:79:22:
                    8e:b2:23:3a:8b:a0:2d:09:ce:53:4b:3a:08:dd:21:
                    bf:f7:3e:cc:b7:56:bf:a7:cb:da:03:58:df:79:69:
                    a9:4e:2d:44:dc:7e:f3:f2:b7:56:a0:4f:a8:51:65:
                    9f:b0:dc:bf:81:47:7f:89:2d:81:ff:82:a8:c7:5d:
                    b3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E1:A2:8F:79:7A:6D:FF:24:82:84:7B:E8:1A:BA:7C:68:0C:60:90
            X509v3 Authority Key Identifier:
                keyid:5B:D9:C3:7F:56:17:60:31:7D:A7:70:DA:6B:6E:5E:3C:C7:2A:9F:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/323830343a323934383a323030303a3a2f33362d3336203d3e20323634303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2948:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a8:e7:97:a7:77:c4:f6:4a:fb:35:06:37:e9:dd:c9:0e:bd:b1:
         89:4f:00:2a:76:66:a6:2b:58:6b:2a:af:e0:2d:a9:4a:08:59:
         71:04:c3:26:58:02:70:de:0b:4a:2d:74:93:49:63:ad:d2:9d:
         0d:e2:c5:63:6f:39:6a:06:c6:69:df:6b:bd:d3:98:7e:ce:57:
         5a:d8:25:f0:f1:b5:48:46:1a:f9:62:6c:ea:6d:a3:92:69:34:
         f4:b9:ba:d9:ab:8b:fd:3a:ec:f4:d0:41:5d:e5:80:ea:5e:d8:
         01:fd:5b:6c:3f:f8:5e:34:3b:05:0f:fc:fc:ea:23:06:56:8c:
         14:76:18:5e:6c:36:0b:5a:dc:ef:da:7d:8c:b3:67:2c:8d:9d:
         77:d0:c4:b9:24:f9:3f:4d:43:1d:01:36:50:c2:ee:50:e4:4a:
         54:14:bd:f5:bc:89:4d:b5:0d:35:87:ee:27:16:12:66:ab:ad:
         69:19:a2:48:e7:0b:b1:fc:e3:ca:42:a9:58:12:3e:27:4c:50:
         e1:8d:17:58:d8:3e:09:a7:0e:3a:8b:8b:60:50:6b:d0:15:d9:
         a6:d5:64:88:f0:08:4e:52:c2:4a:d2:b4:12:29:2b:85:a4:30:
         c9:5a:36:c7:86:10:48:84:22:5c:48:b5:a5:26:72:80:b9:ea:
         21:52:14:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org