Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/0/323830343a383630343a3a2f33322d3332203d3e20323732363134.roa
File:                     323830343a383630343a3a2f33322d3332203d3e20323732363134.roa (raw, json)
Hash identifier:          cSCstxpvnGA3M/kMFKX5QN26rmSOvFg0xHRmMQ2qFak=
Subject key identifier:   EA:17:07:AF:46:93:4B:38:ED:34:56:EA:2B:D9:AB:0D:CE:CE:58:8A
Certificate issuer:       /CN=3508ABC74EC71F9482F4469C06D817E172192BCC
Certificate serial:       5C528912A7B415C4064E2427DD98C04A908A6CAB
Authority key identifier: 35:08:AB:C7:4E:C7:1F:94:82:F4:46:9C:06:D8:17:E1:72:19:2B:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3508ABC74EC71F9482F4469C06D817E172192BCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/0/323830343a383630343a3a2f33322d3332203d3e20323732363134.roa
Signing time:             Tue 16 May 2023 11:51:00 +0000
ROA not before:           Tue 16 May 2023 11:46:00 +0000
ROA not after:            Tue 14 May 2024 11:51:00 +0000
asID:                     272614
IP address blocks:        2804:8604::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:52:89:12:a7:b4:15:c4:06:4e:24:27:dd:98:c0:4a:90:8a:6c:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3508ABC74EC71F9482F4469C06D817E172192BCC
        Validity
            Not Before: May 16 11:46:00 2023 GMT
            Not After : May 14 11:51:00 2024 GMT
        Subject: CN=EA1707AF46934B38ED3456EA2BD9AB0DCECE588A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:78:c0:10:92:a5:c8:56:cd:c9:d7:f0:21:6d:
                    3b:8c:04:65:3e:9d:ed:88:3d:2c:47:60:c9:78:78:
                    d1:ac:4e:99:ca:3f:0a:2f:0a:5e:ac:a2:15:59:a3:
                    a2:3e:0d:54:8d:c6:c8:d4:d3:98:02:43:fb:ab:55:
                    12:0e:3b:fc:74:02:5d:ba:80:8f:71:92:08:6b:b4:
                    81:89:d9:ad:8f:38:e0:cc:73:6a:e1:db:df:1c:59:
                    54:75:09:b0:d8:0f:fa:be:39:4d:d4:b2:f8:fd:ae:
                    d3:29:36:89:93:44:07:1e:74:86:f5:c8:35:31:df:
                    31:d1:7a:13:e2:eb:ef:4f:bd:fa:75:63:99:a3:78:
                    1f:4d:24:6f:b6:cc:25:9e:f2:c2:c1:9c:ad:97:20:
                    21:36:b1:46:1b:db:90:8b:f9:7e:b8:37:5f:a2:4c:
                    f4:42:7d:30:7e:cc:20:f5:cd:e0:1f:fa:33:96:ca:
                    57:9b:d7:aa:5c:24:27:62:6f:0f:a0:2b:b3:8e:97:
                    c2:d3:84:97:9f:9a:ba:ca:d6:82:f7:9d:08:27:18:
                    f1:02:a6:ab:1c:91:79:40:ae:02:1e:9a:10:41:1b:
                    e1:38:d9:f1:9d:d6:75:77:a0:ae:d8:c5:b1:c9:0b:
                    c3:d3:3e:e0:3d:5b:a2:04:b5:bd:84:55:fe:ee:7d:
                    4b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:17:07:AF:46:93:4B:38:ED:34:56:EA:2B:D9:AB:0D:CE:CE:58:8A
            X509v3 Authority Key Identifier:
                keyid:35:08:AB:C7:4E:C7:1F:94:82:F4:46:9C:06:D8:17:E1:72:19:2B:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/0/3508ABC74EC71F9482F4469C06D817E172192BCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3508ABC74EC71F9482F4469C06D817E172192BCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/0/323830343a383630343a3a2f33322d3332203d3e20323732363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8604::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:f7:57:33:9d:f2:c4:1a:88:81:99:13:d1:83:b8:03:c8:05:
         49:09:28:89:f7:cf:22:62:0f:d3:d6:42:11:ba:22:f4:b3:36:
         b3:98:f3:92:e2:c5:32:ee:0e:54:1c:01:6d:d1:a3:db:f4:ff:
         7f:78:d3:1d:27:2c:79:ff:12:07:41:22:89:00:1e:4a:97:e7:
         7b:b3:ae:1a:37:1f:1a:1e:fe:23:a8:62:79:db:38:64:d5:b2:
         a9:bc:30:45:b0:7b:80:ce:d3:83:4e:67:b9:08:97:04:ec:33:
         da:a7:ef:b5:cb:16:5b:04:4a:4b:e3:c2:92:f2:1c:24:f2:8e:
         29:ee:6e:ea:b0:dc:a2:10:b4:99:2d:c2:a1:be:57:93:f3:ad:
         b8:8b:15:4f:3b:f1:8c:97:d4:17:f7:b1:64:d2:2a:b0:11:32:
         c2:53:04:ce:c5:9c:31:f6:da:14:91:53:9c:f0:e4:cc:ab:3e:
         c1:dd:45:89:00:23:77:7e:cf:ac:1c:da:0b:60:8e:fa:18:d8:
         a5:c0:14:65:01:94:12:f1:e9:03:62:1c:df:ce:ac:01:ca:c6:
         29:32:6a:36:4c:28:ff:85:54:f1:f4:2c:d0:36:7d:83:32:48:
         26:d5:63:f0:3d:b5:fe:4f:95:ec:8c:a7:8a:44:1a:cf:c8:e3:
         4f:53:b1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org