Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EKdiAEqkptLGgPXgDKQdDjJF7CwNCTjyrZZ1JrrzkUe4/0/323830343a383830303a3a2f33322d3332203d3e20323732373435.roa
File:                     323830343a383830303a3a2f33322d3332203d3e20323732373435.roa (raw, json)
Hash identifier:          iGBDIL0kpKlMOzHFcl59W4PcwWZc6vSImOg+gulx63I=
Subject key identifier:   51:58:A5:D7:61:04:D3:F2:B3:3E:68:9B:12:11:55:9D:60:FB:82:4D
Certificate issuer:       /CN=89CAA4755C67FF86C13A0EB4B18659013D9BD1FD
Certificate serial:       6494EA22D80AF6DFB886489B2665D6D90B1610B0
Authority key identifier: 89:CA:A4:75:5C:67:FF:86:C1:3A:0E:B4:B1:86:59:01:3D:9B:D1:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/89CAA4755C67FF86C13A0EB4B18659013D9BD1FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKdiAEqkptLGgPXgDKQdDjJF7CwNCTjyrZZ1JrrzkUe4/0/323830343a383830303a3a2f33322d3332203d3e20323732373435.roa
Signing time:             Mon 10 Oct 2022 14:52:13 +0000
ROA not before:           Mon 10 Oct 2022 14:47:13 +0000
ROA not after:            Mon 09 Oct 2023 14:52:13 +0000
asID:                     272745
IP address blocks:        2804:8800::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:94:ea:22:d8:0a:f6:df:b8:86:48:9b:26:65:d6:d9:0b:16:10:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CAA4755C67FF86C13A0EB4B18659013D9BD1FD
        Validity
            Not Before: Oct 10 14:47:13 2022 GMT
            Not After : Oct  9 14:52:13 2023 GMT
        Subject: CN=5158A5D76104D3F2B33E689B1211559D60FB824D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:aa:f4:28:56:a4:2d:47:5a:35:22:09:0f:42:
                    27:e4:04:97:ca:78:25:82:23:61:39:28:be:6a:90:
                    c1:d3:e0:84:d4:59:7b:db:2f:61:c6:31:4b:de:cd:
                    dd:7c:1c:03:38:1d:63:2e:6c:f7:8b:e8:8c:1d:58:
                    2f:5a:17:66:c3:6b:36:1f:86:26:d3:0d:37:0d:ff:
                    7f:c8:12:c7:e5:a1:03:d6:83:59:55:e4:56:13:fc:
                    1e:35:e8:96:d5:e3:2e:9a:63:3f:4c:9f:79:08:e6:
                    c1:02:ae:cd:16:c2:75:81:82:2d:52:3b:6c:b0:ec:
                    30:e5:d6:48:e7:e1:85:95:95:0d:2d:62:d5:3a:f8:
                    34:6f:6e:0e:18:09:88:f2:06:aa:8c:cd:2e:8b:c6:
                    72:f9:a7:52:df:b9:76:dc:fb:f2:0b:40:bf:ce:73:
                    9d:54:55:33:23:26:63:f1:5f:34:ba:39:02:12:5f:
                    5f:c9:ff:f4:7e:78:0d:06:9e:e7:f7:a5:3d:7f:81:
                    3c:65:a0:4f:80:7a:b1:e7:b6:2f:9c:40:89:7a:ea:
                    c6:e9:64:5b:f0:00:01:fa:c6:3b:04:97:a1:26:7f:
                    1d:f6:91:a6:0d:cb:1d:b0:9d:01:91:e6:33:bc:d3:
                    78:02:05:6c:1b:ac:d0:05:1a:a5:10:74:bc:8a:eb:
                    86:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:58:A5:D7:61:04:D3:F2:B3:3E:68:9B:12:11:55:9D:60:FB:82:4D
            X509v3 Authority Key Identifier:
                keyid:89:CA:A4:75:5C:67:FF:86:C1:3A:0E:B4:B1:86:59:01:3D:9B:D1:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKdiAEqkptLGgPXgDKQdDjJF7CwNCTjyrZZ1JrrzkUe4/0/89CAA4755C67FF86C13A0EB4B18659013D9BD1FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/89CAA4755C67FF86C13A0EB4B18659013D9BD1FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKdiAEqkptLGgPXgDKQdDjJF7CwNCTjyrZZ1JrrzkUe4/0/323830343a383830303a3a2f33322d3332203d3e20323732373435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8800::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:92:d7:29:c4:a6:cb:f1:7f:7f:81:04:c7:1a:b8:2c:ca:2c:
         6b:d8:2f:43:64:d6:f8:ae:40:49:ac:dc:4e:98:7c:e8:5f:2e:
         39:61:0d:97:f6:75:c6:61:f2:3f:11:88:82:3c:1a:a4:3f:fd:
         31:d0:31:3f:3e:c9:3e:37:a4:ef:d7:1b:02:c9:8b:9a:5d:65:
         89:b6:ad:86:d7:5e:d5:be:41:c8:6b:58:fd:b3:3b:29:d2:69:
         05:cd:36:3a:a2:96:02:a5:e3:9d:88:82:3c:0e:39:17:53:bb:
         b2:89:07:ff:5a:6b:c6:7c:c4:c7:bf:2c:ee:1e:37:98:97:58:
         74:f7:04:60:a3:ba:f8:18:d2:9f:33:a6:35:7e:26:6c:0a:90:
         c1:93:c8:e1:05:fc:99:7b:fd:97:4e:d2:9a:26:56:df:54:7b:
         d7:5b:4d:78:4c:7f:30:1a:f9:3d:ab:de:aa:ca:27:b3:3f:ba:
         0c:02:79:99:10:d4:7f:e1:92:b1:01:e5:d7:4d:68:82:97:7b:
         a5:ba:0f:16:31:0f:91:8e:45:b6:2c:d7:e9:56:7c:bb:1a:2e:
         0e:6a:d9:1e:b5:f4:d6:39:40:c7:94:18:89:92:21:41:56:45:
         f6:a5:ea:77:3e:43:c2:2c:54:7b:d0:3d:97:d4:7f:d2:08:fa:
         91:74:f8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org