Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/323830343a323934383a3a2f33322d3332203d3e20323634303031.roa
File:                     323830343a323934383a3a2f33322d3332203d3e20323634303031.roa (raw, json)
Hash identifier:          rqStjCJOj4q9oymbwMa/3/OKg2rQ6uIVYu9MrBhXuH8=
Subject key identifier:   46:52:A7:A5:DC:E2:B6:D9:E2:87:F5:1D:12:8A:78:21:7E:C8:6D:AA
Certificate issuer:       /CN=5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1
Certificate serial:       4DC457594EDB53D323A70459040DD9ABBC6669D6
Authority key identifier: 5B:D9:C3:7F:56:17:60:31:7D:A7:70:DA:6B:6E:5E:3C:C7:2A:9F:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/323830343a323934383a3a2f33322d3332203d3e20323634303031.roa
Signing time:             Wed 15 Nov 2023 16:55:29 +0000
ROA not before:           Wed 15 Nov 2023 16:50:29 +0000
ROA not after:            Wed 13 Nov 2024 16:55:29 +0000
asID:                     264001
IP address blocks:        2804:2948::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:c4:57:59:4e:db:53:d3:23:a7:04:59:04:0d:d9:ab:bc:66:69:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1
        Validity
            Not Before: Nov 15 16:50:29 2023 GMT
            Not After : Nov 13 16:55:29 2024 GMT
        Subject: CN=4652A7A5DCE2B6D9E287F51D128A78217EC86DAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:10:be:9d:8d:e5:f9:38:06:05:06:c5:29:48:
                    43:ef:8e:17:f1:a7:63:bb:cd:eb:27:ab:97:63:48:
                    88:ee:30:96:50:64:14:53:ea:08:75:af:e1:72:a8:
                    46:fc:13:03:b9:8a:47:a9:89:1a:70:b3:37:4f:c2:
                    8d:2f:d3:bf:28:45:06:a5:fa:e7:56:b5:cf:45:e4:
                    0b:6f:d1:79:aa:29:9c:30:43:1b:c2:c6:2b:44:a7:
                    7b:fc:81:2f:b4:d9:9c:91:9b:48:3a:5b:65:cb:dd:
                    46:d6:c5:8c:2a:18:e8:b9:7c:f4:32:ec:b2:c2:45:
                    07:de:b2:6e:9e:e2:a3:6f:3f:4c:cd:ef:40:50:82:
                    98:0a:c1:fd:18:60:01:45:6b:e1:2d:bf:4a:1c:41:
                    90:8b:7c:f0:71:f2:08:27:d9:95:21:dc:f7:8d:82:
                    dd:fd:7c:3e:9e:21:66:20:a9:ec:7a:c5:a4:fd:f3:
                    ec:3a:8c:d7:16:df:45:96:ff:0f:21:1e:a7:02:e9:
                    f9:8c:6c:b3:73:75:08:bc:56:38:2f:90:70:a4:4e:
                    3c:71:e5:0b:0f:2a:3f:4c:3a:5e:16:e8:d7:25:64:
                    37:e9:49:94:21:d3:6f:b9:5b:f1:0e:ef:63:28:dc:
                    d8:73:9b:f7:d5:7e:41:78:95:5d:e5:29:2c:5f:2d:
                    a9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:52:A7:A5:DC:E2:B6:D9:E2:87:F5:1D:12:8A:78:21:7E:C8:6D:AA
            X509v3 Authority Key Identifier:
                keyid:5B:D9:C3:7F:56:17:60:31:7D:A7:70:DA:6B:6E:5E:3C:C7:2A:9F:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/323830343a323934383a3a2f33322d3332203d3e20323634303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2948::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:37:d9:fd:c1:a4:68:c3:7d:1e:e4:82:57:40:d4:45:9a:7b:
         5a:2e:f8:12:64:71:ea:8a:d2:51:7a:7f:5c:4f:e1:96:01:0d:
         0c:02:21:a4:5d:5c:4c:ac:6a:c1:c1:c8:ae:96:bd:16:a8:10:
         98:c1:0e:41:71:ca:64:b0:07:85:31:9e:0c:79:6c:1d:d5:58:
         a4:3c:65:3c:bf:34:9f:1f:f7:12:32:63:f6:23:30:11:df:a1:
         b6:db:e9:a9:ad:57:da:6b:7a:79:e1:70:d4:64:ad:1f:ed:ff:
         61:a1:09:eb:ff:cc:4b:16:e0:87:50:52:f0:8e:09:e8:35:1a:
         5b:89:f7:2d:6e:e4:52:cf:84:e4:6c:4a:2b:18:d9:6e:64:8f:
         dc:d1:8a:a1:7f:77:69:bb:86:06:67:63:88:55:91:db:6c:49:
         95:d8:be:bd:4e:03:33:3c:22:61:82:6d:74:6b:78:7c:24:af:
         89:ec:45:e6:12:ca:9c:52:c9:d8:bb:17:29:7b:17:f4:58:57:
         c6:77:d3:23:82:52:f5:3e:fb:c1:56:16:14:98:83:3c:a1:25:
         f4:a8:1c:ed:7d:36:94:08:f6:c5:ac:1a:2f:3e:58:74:60:aa:
         d8:1a:fe:a5:54:ef:23:e8:1e:3b:9d:82:18:c7:f2:ef:4d:2a:
         28:e5:e2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org