Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/0/323830343a323439633a3a2f33322d313238203d3e20323634323333.roa
File:                     323830343a323439633a3a2f33322d313238203d3e20323634323333.roa (raw, json)
Hash identifier:          tRbC+B0hW8uhKQG/9EG//RbpXxCUnu+2UA/9r1k8+/o=
Subject key identifier:   D0:5C:23:8E:5A:81:C9:FB:FD:3D:CD:20:4E:4B:82:EE:72:E6:26:61
Certificate issuer:       /CN=5D7B839C4C40F86FDCD389072E91CDF7CB0670F9
Certificate serial:       59501FEE36549FF192DE8B23FD0C0B4CF909825F
Authority key identifier: 5D:7B:83:9C:4C:40:F8:6F:DC:D3:89:07:2E:91:CD:F7:CB:06:70:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D7B839C4C40F86FDCD389072E91CDF7CB0670F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/0/323830343a323439633a3a2f33322d313238203d3e20323634323333.roa
Signing time:             Wed 14 Jun 2023 17:22:18 +0000
ROA not before:           Wed 14 Jun 2023 17:17:18 +0000
ROA not after:            Wed 12 Jun 2024 17:22:18 +0000
asID:                     264233
IP address blocks:        2804:249c::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:50:1f:ee:36:54:9f:f1:92:de:8b:23:fd:0c:0b:4c:f9:09:82:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D7B839C4C40F86FDCD389072E91CDF7CB0670F9
        Validity
            Not Before: Jun 14 17:17:18 2023 GMT
            Not After : Jun 12 17:22:18 2024 GMT
        Subject: CN=D05C238E5A81C9FBFD3DCD204E4B82EE72E62661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:47:21:f0:bb:23:08:80:7b:58:d2:d0:b3:93:
                    8b:2a:84:eb:2a:f9:e9:46:c6:2b:e4:7a:64:bc:dd:
                    94:d9:23:ba:e7:bd:30:a0:f3:94:e7:be:d0:31:ee:
                    f2:09:f1:a8:58:19:67:b5:62:a3:ce:35:34:77:5d:
                    7b:0d:71:6f:64:fc:47:c2:a7:6f:cf:f9:71:58:54:
                    e3:05:0d:a4:14:91:5d:84:f0:c2:1f:21:91:05:68:
                    ba:70:59:53:1c:1a:77:1c:d5:8f:af:00:d4:29:57:
                    31:bb:3b:2b:bd:c6:97:7c:08:73:d6:11:0c:36:f7:
                    ce:09:e9:34:31:6f:c1:83:28:ac:b9:7d:29:50:8f:
                    6d:c7:52:04:f3:5d:99:f5:fb:a9:ef:22:9e:56:4f:
                    38:8c:67:ed:8b:84:ab:3f:09:3e:b3:7a:9b:a0:a6:
                    96:97:6d:16:5c:f9:e4:19:4d:27:80:e2:6a:08:9f:
                    78:1a:05:74:72:2b:ed:e0:4e:0f:07:28:e5:a3:5f:
                    45:17:e0:d3:65:37:ff:0e:59:ec:b0:b3:d6:a9:d9:
                    68:42:18:fa:8d:7f:de:06:c6:5e:5e:2a:d7:0f:68:
                    68:ee:d1:b6:be:62:af:c5:0b:f5:a8:c0:61:d2:07:
                    f5:dc:48:30:6f:c5:be:a8:93:22:c9:3d:e7:32:c6:
                    ab:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:5C:23:8E:5A:81:C9:FB:FD:3D:CD:20:4E:4B:82:EE:72:E6:26:61
            X509v3 Authority Key Identifier:
                keyid:5D:7B:83:9C:4C:40:F8:6F:DC:D3:89:07:2E:91:CD:F7:CB:06:70:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/0/5D7B839C4C40F86FDCD389072E91CDF7CB0670F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D7B839C4C40F86FDCD389072E91CDF7CB0670F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/0/323830343a323439633a3a2f33322d313238203d3e20323634323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:249c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:46:07:69:91:b1:0b:2b:ce:71:13:42:d2:2d:2c:35:ea:ad:
         9e:b7:79:f6:a5:c8:1d:6e:ea:95:bd:1f:4d:bf:26:f7:81:6a:
         0d:a5:34:f3:73:f3:56:df:8b:72:ee:03:72:72:b6:8c:64:0e:
         3e:19:b0:0b:22:33:0a:fa:29:37:a5:fb:27:0f:17:3b:c8:a3:
         1f:d2:83:05:fc:e6:b6:18:8a:40:72:d7:41:c0:f1:d5:88:62:
         a1:47:af:9d:13:01:7a:0c:4b:9e:5a:d7:6d:b0:d8:50:3b:6b:
         59:bb:99:16:1f:fa:c2:2d:32:c4:26:c6:22:57:34:5e:95:61:
         b6:f8:28:fc:72:97:a8:d0:27:5d:0c:c2:55:d4:49:44:65:9e:
         83:46:d9:fe:81:bd:c0:54:48:64:ff:46:9e:07:86:6e:a6:0e:
         7f:e4:53:2b:e4:d9:be:37:8b:a4:da:08:db:83:88:61:b6:70:
         dc:7b:a8:98:14:47:b6:4a:bb:b1:6f:09:9b:3b:6e:45:52:2c:
         7f:d1:9c:be:55:4d:6b:04:2b:e3:43:d9:d8:63:d6:7a:40:d8:
         18:28:c8:b6:86:6b:7d:d2:9e:0f:74:10:60:40:d9:f9:8d:81:
         cb:2f:3a:25:c1:c7:32:55:be:ae:b9:9e:22:69:76:75:4d:3f:
         ed:f1:cb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org