Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DjhhMjAZ3HJyDsKoAUGTJ9wNCRtnooZxrkuKMwcsbf8J/0/323830343a343337633a633030303a3a2f34302d3438203d3e20323637353733.roa
File:                     323830343a343337633a633030303a3a2f34302d3438203d3e20323637353733.roa (raw, json)
Hash identifier:          oU5jR1q4EovH61vA0SEgh26aqimRBmfdtqp4FcQBqgM=
Subject key identifier:   92:A9:5F:A3:58:66:63:54:23:63:92:A9:D1:3D:0F:CA:09:10:33:E2
Certificate issuer:       /CN=568240316B2E029888E6CD5C24522C55D5D6DA1E
Certificate serial:       1B7A454CA9D50FEE270F688F59AB16695DBF7E30
Authority key identifier: 56:82:40:31:6B:2E:02:98:88:E6:CD:5C:24:52:2C:55:D5:D6:DA:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/568240316B2E029888E6CD5C24522C55D5D6DA1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DjhhMjAZ3HJyDsKoAUGTJ9wNCRtnooZxrkuKMwcsbf8J/0/323830343a343337633a633030303a3a2f34302d3438203d3e20323637353733.roa
Signing time:             Sat 03 Jun 2023 15:25:23 +0000
ROA not before:           Sat 03 Jun 2023 15:20:23 +0000
ROA not after:            Sat 01 Jun 2024 15:25:23 +0000
asID:                     267573
IP address blocks:        2804:437c:c000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:7a:45:4c:a9:d5:0f:ee:27:0f:68:8f:59:ab:16:69:5d:bf:7e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=568240316B2E029888E6CD5C24522C55D5D6DA1E
        Validity
            Not Before: Jun  3 15:20:23 2023 GMT
            Not After : Jun  1 15:25:23 2024 GMT
        Subject: CN=92A95FA358666354236392A9D13D0FCA091033E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:94:b0:d2:9f:23:d4:5e:f2:a0:98:75:17:5c:
                    cb:9b:8d:fa:fe:fb:75:75:c2:d9:07:81:b8:21:c0:
                    02:30:17:96:b0:a0:20:d8:37:bc:ff:9e:e8:7b:d6:
                    64:51:3a:4d:ab:f0:a1:be:5e:fc:83:0f:32:b7:6b:
                    54:e0:1b:0f:b3:72:26:69:32:87:aa:3c:1a:d6:76:
                    20:05:6a:8f:98:8b:d4:ae:19:17:48:43:33:8f:d4:
                    85:9a:44:2b:e3:de:70:60:07:7f:77:03:4c:75:53:
                    b9:7e:8c:01:85:14:41:59:a8:f0:54:eb:78:fb:c1:
                    c1:45:e9:34:4e:9b:e5:b8:a0:04:99:87:23:73:7f:
                    71:db:17:3b:31:53:bd:20:74:29:66:a3:9f:41:e6:
                    93:43:6a:48:ea:24:41:8e:25:32:04:2a:df:6a:1b:
                    8a:e2:e7:72:bb:7d:04:1e:89:66:ac:f4:14:6c:65:
                    9b:60:03:95:be:c0:24:a5:16:75:97:5c:6d:17:6d:
                    a4:7a:8e:ad:3e:5a:de:56:a6:e8:dd:4b:b6:5c:fb:
                    a3:2e:34:9a:77:31:7a:c1:44:bc:d8:ed:c9:58:9e:
                    fd:a6:5e:01:10:f8:ee:2d:3c:3f:f5:43:64:f8:8f:
                    b2:87:ed:30:a7:3f:82:83:6e:13:30:63:44:74:00:
                    23:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A9:5F:A3:58:66:63:54:23:63:92:A9:D1:3D:0F:CA:09:10:33:E2
            X509v3 Authority Key Identifier:
                keyid:56:82:40:31:6B:2E:02:98:88:E6:CD:5C:24:52:2C:55:D5:D6:DA:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DjhhMjAZ3HJyDsKoAUGTJ9wNCRtnooZxrkuKMwcsbf8J/0/568240316B2E029888E6CD5C24522C55D5D6DA1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/568240316B2E029888E6CD5C24522C55D5D6DA1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DjhhMjAZ3HJyDsKoAUGTJ9wNCRtnooZxrkuKMwcsbf8J/0/323830343a343337633a633030303a3a2f34302d3438203d3e20323637353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:437c:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         50:f9:17:e9:5e:6d:89:c7:bc:18:d8:e8:4c:bb:0f:8e:6a:86:
         b3:1b:db:25:18:a7:6c:6f:7e:a9:96:5a:6b:77:2c:c3:c7:4d:
         c9:74:6e:22:b5:94:fc:75:f4:f5:69:d5:45:93:9b:d3:d9:17:
         50:87:05:6d:d6:dc:2a:61:0b:ef:ed:85:bc:a1:74:04:83:8a:
         4f:66:3a:a7:96:68:41:55:54:36:ee:65:5a:02:25:a5:8c:82:
         4e:a1:99:d7:1d:3b:b5:12:4b:a2:49:72:6c:29:42:e7:50:34:
         2f:da:b6:81:f2:09:96:5a:3e:62:19:57:fe:34:4a:1f:85:49:
         1a:87:c4:55:bd:e8:58:c0:85:f8:70:9a:9c:13:a3:c0:61:6b:
         4d:f0:bd:72:2d:46:e1:87:6d:71:b4:0a:33:89:7b:24:52:c5:
         bc:d5:94:df:3f:62:85:9e:3d:db:b5:f5:28:28:a2:bc:ca:df:
         3b:dd:4d:3e:d6:40:b3:98:3e:81:ff:71:af:04:06:f6:78:cb:
         1f:bc:76:ed:e1:7e:1b:7c:ef:5d:e1:08:fc:58:f0:36:02:9d:
         0f:28:b3:6f:2b:da:96:d7:7f:57:31:92:d8:9f:8b:58:5c:00:
         d1:e9:18:51:d0:3f:e8:1a:1c:07:2a:be:95:42:a1:28:e8:bd:
         c8:39:a3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org