Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a643030303a3a2f33362d3336203d3e20323731343738.roa
File:                     323830343a376332343a643030303a3a2f33362d3336203d3e20323731343738.roa (raw, json)
Hash identifier:          24HUgw7Q2ojtKRA642rctcIjDlSbkox5vxjPlADVYfo=
Subject key identifier:   AD:6B:DE:26:3C:3C:AB:6C:97:F6:59:C7:93:2D:56:41:34:15:C9:74
Certificate issuer:       /CN=5AC857044932470260E44A2750076A9293F37835
Certificate serial:       756894E5FA870E45335678FFB349F49E0E76FEFF
Authority key identifier: 5A:C8:57:04:49:32:47:02:60:E4:4A:27:50:07:6A:92:93:F3:78:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AC857044932470260E44A2750076A9293F37835.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a643030303a3a2f33362d3336203d3e20323731343738.roa
Signing time:             Wed 31 Jan 2024 00:50:34 +0000
ROA not before:           Wed 31 Jan 2024 00:45:34 +0000
ROA not after:            Wed 29 Jan 2025 00:50:34 +0000
asID:                     271478
IP address blocks:        2804:7c24:d000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:68:94:e5:fa:87:0e:45:33:56:78:ff:b3:49:f4:9e:0e:76:fe:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC857044932470260E44A2750076A9293F37835
        Validity
            Not Before: Jan 31 00:45:34 2024 GMT
            Not After : Jan 29 00:50:34 2025 GMT
        Subject: CN=AD6BDE263C3CAB6C97F659C7932D56413415C974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ac:91:26:8b:de:b3:50:e8:cb:f2:d9:e4:b8:
                    b3:f8:76:6d:64:9c:0b:1f:60:c1:4f:9a:aa:a2:18:
                    1f:43:f7:73:28:40:45:f7:3a:92:c9:b0:11:25:a2:
                    8d:3a:6d:4e:35:21:14:3a:49:75:70:a7:96:05:8c:
                    56:e8:fb:f8:48:1a:16:b8:78:2b:b7:a5:b3:15:c1:
                    b6:8c:d8:dd:92:5d:5d:59:6f:77:40:8b:82:be:94:
                    e4:35:e1:13:c5:1e:b2:93:5b:51:8c:21:7d:45:79:
                    6c:ef:2c:ee:f1:9d:44:b7:0c:8a:6b:5d:da:82:fd:
                    e7:00:8b:92:6d:63:c8:b2:e3:1f:c2:b6:42:f3:c3:
                    90:76:13:a6:7e:9f:5b:2b:43:9f:aa:9a:8a:5a:d9:
                    12:8f:57:48:2e:d3:be:de:be:a2:5e:8a:b4:01:50:
                    d6:38:47:da:7f:af:18:63:8b:b0:3a:af:22:8f:d7:
                    32:9a:eb:ef:bd:eb:6f:81:88:21:9a:11:8c:8c:a7:
                    36:f0:89:97:21:71:79:aa:3d:37:2b:6b:47:7f:10:
                    4f:60:fc:ea:6b:d1:22:0b:87:1c:48:a7:d8:47:a9:
                    4b:0f:cf:2a:9a:a9:56:38:fa:41:df:9b:83:ac:63:
                    38:0e:a8:f0:6c:0e:e3:64:de:06:1f:05:58:2c:57:
                    e9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:6B:DE:26:3C:3C:AB:6C:97:F6:59:C7:93:2D:56:41:34:15:C9:74
            X509v3 Authority Key Identifier:
                keyid:5A:C8:57:04:49:32:47:02:60:E4:4A:27:50:07:6A:92:93:F3:78:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/5AC857044932470260E44A2750076A9293F37835.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AC857044932470260E44A2750076A9293F37835.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a643030303a3a2f33362d3336203d3e20323731343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c24:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8b:a9:28:76:d6:2f:d8:95:cb:01:cd:ab:25:aa:ee:a0:03:aa:
         64:3d:71:b8:b9:d5:72:79:d5:58:04:3e:23:55:98:27:3e:fc:
         90:b9:c7:24:1b:1f:fc:6e:58:12:21:22:de:91:d6:f3:68:e3:
         b6:14:54:9f:66:f4:c8:70:68:7d:2d:41:d8:ff:30:10:65:49:
         1c:b8:52:72:f3:f4:b0:a1:a3:fa:7f:a0:10:2c:c8:73:3b:6a:
         1c:27:1c:c3:2d:b4:4b:1b:85:d5:99:93:c6:89:4a:0f:51:87:
         08:2d:32:cb:5f:65:9b:41:1a:20:19:05:b7:1c:c7:4b:10:66:
         2a:b7:d3:d8:ff:2a:65:92:a8:62:66:fe:5d:5b:55:77:d9:82:
         d7:6f:fe:02:1e:22:22:ba:61:90:a3:0e:5e:86:d7:c3:35:2b:
         ba:d2:88:aa:6b:49:9e:77:e9:6e:80:17:c2:82:ea:16:56:9a:
         ea:b2:db:1a:dd:9e:8f:00:1d:4c:65:d6:d7:1c:1f:26:f1:ff:
         2e:c5:ef:1e:4c:a3:03:c4:41:c6:d8:e0:1b:cd:3c:fa:6e:63:
         85:2e:af:73:d7:03:d3:fc:6a:75:a0:f7:8b:a6:d7:09:72:df:
         72:a5:7d:a7:20:df:b4:d2:c2:9b:77:44:0f:90:ef:6a:ae:28:
         84:54:8f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org