Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/0/323830343a323731303a3a2f33322d3336203d3e20323633383733.roa
File:                     323830343a323731303a3a2f33322d3336203d3e20323633383733.roa (raw, json)
Hash identifier:          9NLWMedNDGf4J6gL8/JEP/G/fcF1TFKQ6jGFFKN50Nk=
Subject key identifier:   52:AD:02:31:84:86:81:B9:C8:B5:78:43:06:69:D7:40:33:95:24:5C
Certificate issuer:       /CN=F8D1B1FA3CDAD6455634D21D55C5D45A0F88A5D2
Certificate serial:       5358B8B0339360CD430EE3233D5DE66337B001E9
Authority key identifier: F8:D1:B1:FA:3C:DA:D6:45:56:34:D2:1D:55:C5:D4:5A:0F:88:A5:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F8D1B1FA3CDAD6455634D21D55C5D45A0F88A5D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/0/323830343a323731303a3a2f33322d3336203d3e20323633383733.roa
Signing time:             Tue 12 Jul 2022 14:38:20 +0000
ROA not before:           Tue 12 Jul 2022 14:33:20 +0000
ROA not after:            Tue 11 Jul 2023 14:38:20 +0000
asID:                     263873
IP address blocks:        2804:2710::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:58:b8:b0:33:93:60:cd:43:0e:e3:23:3d:5d:e6:63:37:b0:01:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8D1B1FA3CDAD6455634D21D55C5D45A0F88A5D2
        Validity
            Not Before: Jul 12 14:33:20 2022 GMT
            Not After : Jul 11 14:38:20 2023 GMT
        Subject: CN=52AD0231848681B9C8B578430669D7403395245C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e0:68:d2:4a:37:30:5e:df:9b:d5:0f:49:bc:
                    1e:a0:46:5d:ef:4a:f4:1c:27:d0:fe:c5:71:9a:51:
                    ae:5f:97:2f:ad:d9:81:78:c9:81:2d:0f:56:19:10:
                    fe:e4:3a:70:1d:37:da:51:ae:9a:9e:70:f1:31:ef:
                    57:5d:4e:dd:37:02:a5:0c:5f:1d:25:40:3b:bb:6b:
                    f4:9c:98:4c:04:1b:55:0e:16:08:b0:f3:3a:b2:b9:
                    24:9d:28:e3:d9:96:48:6a:7d:e4:91:32:b1:14:6a:
                    d4:4e:f0:70:87:f1:e0:bd:c4:75:53:ef:6e:ee:b3:
                    3c:86:e9:21:a2:c1:0e:dc:5e:1b:a4:6c:09:c4:8d:
                    26:72:01:3b:fe:4e:22:ee:78:11:14:1f:57:41:8d:
                    83:e7:ff:f6:44:1f:4f:fc:7b:ed:6e:f9:b6:c1:4d:
                    16:67:0e:46:f1:6c:82:93:74:ab:2b:7b:e8:f4:36:
                    75:14:a6:0d:4b:6e:80:72:91:6e:9f:9b:7e:af:d6:
                    4c:df:f9:e8:4c:d7:73:88:ac:4d:4a:48:3f:0a:26:
                    92:28:fd:84:f4:0d:29:a8:d4:1a:93:3b:4a:b3:73:
                    bb:06:d6:1f:d3:e1:42:c6:3f:5d:dc:e5:63:31:65:
                    4a:05:40:fa:d9:c6:97:72:35:e8:09:14:e2:0d:b4:
                    cf:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AD:02:31:84:86:81:B9:C8:B5:78:43:06:69:D7:40:33:95:24:5C
            X509v3 Authority Key Identifier:
                keyid:F8:D1:B1:FA:3C:DA:D6:45:56:34:D2:1D:55:C5:D4:5A:0F:88:A5:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/0/F8D1B1FA3CDAD6455634D21D55C5D45A0F88A5D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F8D1B1FA3CDAD6455634D21D55C5D45A0F88A5D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/0/323830343a323731303a3a2f33322d3336203d3e20323633383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2710::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:ef:a9:b8:18:39:5e:af:b2:a3:d1:5b:4f:a8:96:d1:95:41:
         15:32:6c:e4:4d:6d:4b:96:4f:7d:f9:ab:6c:b1:ef:32:6b:ea:
         1e:65:3a:1a:7b:3a:25:37:a8:df:d7:d1:7e:91:62:ad:86:f4:
         08:ce:50:4b:7e:6f:53:19:33:6e:d9:ff:da:a5:0e:6e:bc:87:
         8d:3f:e5:a5:3d:16:e2:73:9b:e8:ed:a7:9e:27:2d:0d:25:6d:
         ef:44:ee:7a:52:b6:8a:44:24:27:f2:16:f0:f7:af:d0:65:32:
         eb:b2:0a:12:a6:4d:ba:6d:89:cd:b6:f5:c3:47:c8:0f:ba:0c:
         fa:12:3a:97:c7:3e:da:f2:67:81:14:07:8a:f9:08:b5:e8:60:
         51:6a:13:b3:81:67:67:46:60:9f:46:42:03:a0:8b:8a:54:c9:
         fe:eb:8b:62:0b:f2:9a:46:d7:d2:23:79:64:6e:5d:72:32:08:
         b4:56:8c:85:34:20:2c:1a:86:eb:ae:86:07:1a:f8:32:ae:d2:
         cc:3c:ec:71:b7:27:2d:c4:5c:d8:eb:89:c7:40:9d:1b:fc:0a:
         19:76:81:62:b8:3d:52:72:ad:07:da:d6:a3:97:ac:49:09:58:
         f4:f2:06:71:2e:18:5e:11:d7:f0:24:aa:3d:bd:4f:36:66:5a:
         8b:1c:af:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org