Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/323830343a323934383a613030303a3a2f33362d3336203d3e20323634303031.roa
File:                     323830343a323934383a613030303a3a2f33362d3336203d3e20323634303031.roa (raw, json)
Hash identifier:          mkfsLU3FVQ6rI2zyRIpo4jJ1Hv20kEHtQE1eYh5968g=
Subject key identifier:   65:40:81:7A:DC:01:A4:33:CF:AB:38:56:7E:8C:D6:65:79:9E:38:2C
Certificate issuer:       /CN=5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1
Certificate serial:       5A25D5920CA371DE24B39BE34A5308774CE71E06
Authority key identifier: 5B:D9:C3:7F:56:17:60:31:7D:A7:70:DA:6B:6E:5E:3C:C7:2A:9F:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/323830343a323934383a613030303a3a2f33362d3336203d3e20323634303031.roa
Signing time:             Thu 18 May 2023 17:18:30 +0000
ROA not before:           Thu 18 May 2023 17:13:30 +0000
ROA not after:            Thu 16 May 2024 17:18:30 +0000
asID:                     264001
IP address blocks:        2804:2948:a000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:25:d5:92:0c:a3:71:de:24:b3:9b:e3:4a:53:08:77:4c:e7:1e:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1
        Validity
            Not Before: May 18 17:13:30 2023 GMT
            Not After : May 16 17:18:30 2024 GMT
        Subject: CN=6540817ADC01A433CFAB38567E8CD665799E382C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:49:10:fa:cb:d7:04:44:09:7b:90:a6:a9:69:
                    88:7e:5a:f9:8e:95:ef:c9:bd:22:e4:1c:0a:9b:f4:
                    6f:c1:5f:f5:ef:80:e5:7f:f1:e4:90:5d:9e:61:9b:
                    be:57:38:2d:58:e4:84:52:e6:1c:68:d3:33:75:66:
                    e3:af:e7:ff:2f:85:75:f6:49:db:28:ed:63:e7:5f:
                    2c:6b:72:1e:16:67:4d:c9:65:cf:f3:cc:46:35:16:
                    0b:5b:74:b3:a4:03:92:32:1d:f3:2b:b6:57:03:46:
                    79:da:b8:13:d2:6c:f0:da:c0:27:5e:d3:89:10:f0:
                    46:80:ac:8e:8b:82:41:8e:5d:37:87:25:76:e2:d6:
                    a1:4c:68:4a:79:32:0d:df:d4:62:f1:7a:1b:0d:83:
                    27:0c:0e:c3:65:3c:38:62:f8:6a:a6:ce:5f:92:d1:
                    01:7a:e4:55:ae:e6:4b:00:f0:a5:76:e5:75:c1:9c:
                    1e:0d:eb:64:bc:35:62:e8:cf:04:c1:41:76:11:86:
                    c0:ab:b6:3e:60:03:1e:f8:a8:66:27:fa:be:6d:bb:
                    f5:b1:4e:a1:7a:b1:c8:46:2e:e6:02:74:fc:8d:82:
                    74:54:6a:5f:af:27:e8:9d:36:c9:45:84:69:7c:cb:
                    50:4a:84:1d:4e:fa:1e:d2:dc:05:0c:78:84:bb:ef:
                    5e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:40:81:7A:DC:01:A4:33:CF:AB:38:56:7E:8C:D6:65:79:9E:38:2C
            X509v3 Authority Key Identifier:
                keyid:5B:D9:C3:7F:56:17:60:31:7D:A7:70:DA:6B:6E:5E:3C:C7:2A:9F:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/323830343a323934383a613030303a3a2f33362d3336203d3e20323634303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2948:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0e:48:25:fc:5b:d9:da:be:85:00:32:89:be:27:ee:6b:d2:43:
         e6:5c:8b:d9:bb:69:d8:b7:b1:88:ac:2d:9b:57:70:71:61:32:
         31:00:96:52:06:2e:4d:c9:ac:9b:c1:78:e3:b6:9a:27:c8:71:
         74:81:90:a2:75:6c:e7:48:a7:d5:1a:ea:f1:00:8a:55:49:2f:
         10:c7:9b:22:08:c1:94:2d:e4:d1:c7:79:7d:ef:c6:cc:08:63:
         b4:80:75:06:f7:4c:18:e1:48:f0:bf:e9:3b:12:7f:29:a1:07:
         0c:29:94:12:cb:e6:9c:05:a8:29:d1:67:ae:9a:96:1e:2f:61:
         d7:4f:35:55:78:f3:d0:af:c1:8b:3c:6a:8b:46:b5:43:fa:21:
         3a:cb:e4:fa:f1:cd:97:ed:7d:f8:67:39:d5:30:7f:93:22:58:
         48:6c:03:b8:f2:de:c6:ff:14:2e:8b:e0:88:36:1a:26:30:5b:
         52:ad:42:64:b9:b9:76:92:9d:b2:ff:d4:2f:f1:58:a9:29:64:
         a3:5b:dc:52:11:b2:7b:93:e6:1b:90:71:fa:cb:eb:e7:e8:40:
         37:66:86:12:77:95:5b:49:35:b5:28:7a:be:14:66:88:87:a0:
         e3:19:51:80:7e:db:cf:d2:d0:06:7a:2d:f9:d1:52:3e:1f:5f:
         3b:7e:b4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org