Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/323830343a323934383a383030303a3a2f33332d3333203d3e20323634303031.roa
File:                     323830343a323934383a383030303a3a2f33332d3333203d3e20323634303031.roa (raw, json)
Hash identifier:          GVLoCCZOYlh21tB9kv03/9FvGxdrcY5yb5Ed7rjtE4I=
Subject key identifier:   57:D6:CC:17:ED:9D:AA:A1:48:CD:9C:D7:DF:34:F0:8B:54:4D:B0:2E
Certificate issuer:       /CN=5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1
Certificate serial:       531684CE37445FD8FCFFBFEF8BD80D8691C65F8B
Authority key identifier: 5B:D9:C3:7F:56:17:60:31:7D:A7:70:DA:6B:6E:5E:3C:C7:2A:9F:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/323830343a323934383a383030303a3a2f33332d3333203d3e20323634303031.roa
Signing time:             Mon 19 Dec 2022 15:43:00 +0000
ROA not before:           Mon 19 Dec 2022 15:38:00 +0000
ROA not after:            Mon 18 Dec 2023 15:43:00 +0000
asID:                     264001
IP address blocks:        2804:2948:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:16:84:ce:37:44:5f:d8:fc:ff:bf:ef:8b:d8:0d:86:91:c6:5f:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1
        Validity
            Not Before: Dec 19 15:38:00 2022 GMT
            Not After : Dec 18 15:43:00 2023 GMT
        Subject: CN=57D6CC17ED9DAAA148CD9CD7DF34F08B544DB02E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f7:e5:fd:e8:67:95:ec:f0:e4:ee:b2:c9:20:
                    8a:77:75:f0:ee:1b:c9:ec:cd:fa:e6:9f:3a:c5:71:
                    23:30:58:d4:ff:f3:cd:4c:f0:d6:17:ec:8a:af:49:
                    fa:81:f6:75:97:b2:fd:f0:00:a9:aa:0a:47:e5:f1:
                    d4:d2:9e:60:1b:2d:08:e4:5a:da:15:dd:10:d0:b7:
                    f1:5d:b4:cf:33:e4:9b:58:9d:24:4b:02:0c:8b:51:
                    90:ba:55:4f:7b:4e:e6:46:7b:10:f3:ac:97:16:5b:
                    e7:a1:2e:69:ac:bc:24:a5:4e:bf:f3:9a:77:2a:bd:
                    1b:e1:da:30:1d:91:bb:97:0b:ca:10:9f:97:a4:7b:
                    86:b2:85:98:98:b1:b3:41:6e:86:9e:81:67:73:f7:
                    63:5f:66:ad:50:1d:95:34:ff:0e:4b:64:33:94:82:
                    c3:f9:85:5c:08:c8:71:e2:40:07:0a:90:68:d9:44:
                    af:6c:4a:76:60:4e:45:4a:02:15:83:a7:de:ab:8e:
                    50:48:95:e4:a2:ff:9f:06:66:29:51:c1:61:41:09:
                    4a:82:db:35:04:e8:38:ad:bc:b8:7f:a2:92:15:42:
                    ef:d0:86:9e:8a:f7:01:94:4b:9a:60:6e:19:21:17:
                    9b:93:da:ab:9e:30:ab:e1:a6:fb:c8:b5:23:6f:9c:
                    08:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D6:CC:17:ED:9D:AA:A1:48:CD:9C:D7:DF:34:F0:8B:54:4D:B0:2E
            X509v3 Authority Key Identifier:
                keyid:5B:D9:C3:7F:56:17:60:31:7D:A7:70:DA:6B:6E:5E:3C:C7:2A:9F:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/323830343a323934383a383030303a3a2f33332d3333203d3e20323634303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2948:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         2f:d0:d5:cf:4a:42:db:66:16:2c:22:85:b0:42:44:65:b3:ed:
         26:a0:f2:99:ab:ac:3c:b8:c1:05:4b:f3:f1:4c:02:00:cd:1e:
         7a:9d:ae:1b:fa:d2:78:cb:0e:d4:d1:c2:44:be:f2:f5:86:35:
         e7:34:1a:9e:07:ec:61:3f:3f:c7:d6:f3:27:59:9f:d5:c6:d9:
         40:27:e3:8c:bf:b7:a8:a3:37:56:58:a8:bf:3a:d3:40:2c:d4:
         10:a3:95:ea:e9:ee:2f:4c:9e:24:1e:d9:00:f7:b9:f8:0c:1a:
         e3:56:f2:cb:29:0c:8b:fb:8c:16:4d:93:64:e3:84:94:6d:14:
         50:64:3d:c9:fc:b6:bd:b2:15:46:21:6d:3e:e3:3f:03:51:2d:
         34:c8:3e:2b:28:e5:86:ed:3f:f2:ec:1c:5e:04:30:22:15:af:
         42:a2:f2:8d:49:87:8d:67:8a:c1:6f:35:f2:2b:f1:05:b0:29:
         d0:be:3a:b0:f7:55:11:7b:d4:d5:aa:d0:76:1d:69:59:42:cc:
         cb:9b:0c:bc:1f:6f:96:fb:55:5f:77:d2:e8:53:13:16:b8:fc:
         34:4f:f3:64:29:18:70:8a:e3:81:6e:86:ea:65:bf:8e:82:8a:
         26:68:1e:cf:a7:4c:78:a3:2f:67:89:62:ea:3d:31:00:05:61:
         ef:56:05:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org