Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/0/323830343a343930303a383030303a3a2f33332d3333203d3e20323637313538.roa
File:                     323830343a343930303a383030303a3a2f33332d3333203d3e20323637313538.roa (raw, json)
Hash identifier:          Pi+/q8xSAZDNJ3fpdb4NAwNdCsjTCBmotFXSdybhg/s=
Subject key identifier:   78:5D:61:EA:CA:4B:42:E2:5D:8B:64:C0:D8:ED:85:D4:CF:C7:16:D7
Certificate issuer:       /CN=A5B05E902FCF0AE404C26BD07DC5B4DFCC542934
Certificate serial:       73CE4312D0439FD80CC044275798A29B623AA8DE
Authority key identifier: A5:B0:5E:90:2F:CF:0A:E4:04:C2:6B:D0:7D:C5:B4:DF:CC:54:29:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5B05E902FCF0AE404C26BD07DC5B4DFCC542934.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/0/323830343a343930303a383030303a3a2f33332d3333203d3e20323637313538.roa
Signing time:             Mon 07 Feb 2022 12:09:12 +0000
ROA not before:           Mon 07 Feb 2022 12:04:12 +0000
ROA not after:            Mon 06 Feb 2023 12:09:12 +0000
asID:                     267158
IP address blocks:        2804:4900:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ce:43:12:d0:43:9f:d8:0c:c0:44:27:57:98:a2:9b:62:3a:a8:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5B05E902FCF0AE404C26BD07DC5B4DFCC542934
        Validity
            Not Before: Feb  7 12:04:12 2022 GMT
            Not After : Feb  6 12:09:12 2023 GMT
        Subject: CN=785D61EACA4B42E25D8B64C0D8ED85D4CFC716D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:86:9d:bd:26:b5:c8:33:8c:cc:32:cd:7a:6f:
                    b8:3a:f1:32:8b:ad:83:5d:8d:cc:5f:53:69:fd:0f:
                    5b:34:0d:e9:2d:60:a3:85:12:0b:b0:29:66:32:03:
                    d8:14:a7:d8:6b:ee:90:b0:bf:6f:a9:9e:2a:97:99:
                    35:73:57:4d:2b:e2:30:e5:d9:bf:bb:2c:e7:de:21:
                    aa:12:4d:e4:a5:9d:81:63:4f:2b:bf:93:33:1a:f2:
                    e9:74:db:c2:a0:d6:42:63:81:eb:11:2f:30:e5:07:
                    c4:46:84:1a:bf:69:4c:9b:97:77:52:12:b3:99:da:
                    be:c4:0b:87:33:e5:7b:da:68:7e:64:d3:bc:ba:c4:
                    d8:0b:5b:8c:19:a8:52:14:bd:5d:da:78:76:5d:32:
                    e6:83:00:8c:a7:49:19:b4:ce:4d:35:b7:bc:a9:c8:
                    69:ca:04:d7:c9:2b:d8:e8:14:8b:8a:83:e7:ae:30:
                    17:c0:03:69:35:f5:0a:67:c2:12:42:0f:9d:77:4f:
                    f2:ab:63:e6:ae:2b:28:f0:5a:d9:c8:88:6e:5d:c0:
                    16:a2:88:a7:26:2f:fe:1e:0f:5b:54:05:ed:24:ea:
                    6a:e9:ed:f6:5d:96:29:8f:cd:55:1a:e1:69:97:b8:
                    0a:84:17:5e:2c:14:83:63:09:16:30:d5:5c:80:ea:
                    e3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:5D:61:EA:CA:4B:42:E2:5D:8B:64:C0:D8:ED:85:D4:CF:C7:16:D7
            X509v3 Authority Key Identifier:
                keyid:A5:B0:5E:90:2F:CF:0A:E4:04:C2:6B:D0:7D:C5:B4:DF:CC:54:29:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/0/A5B05E902FCF0AE404C26BD07DC5B4DFCC542934.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5B05E902FCF0AE404C26BD07DC5B4DFCC542934.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/0/323830343a343930303a383030303a3a2f33332d3333203d3e20323637313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4900:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         9b:09:f9:2d:c7:5f:3f:43:99:0a:fe:e0:3f:9b:4e:02:3a:1c:
         de:e1:7e:44:1e:5b:48:d2:b3:52:00:ec:42:8c:54:3a:a4:1e:
         01:33:71:b2:01:ec:07:75:17:07:66:e6:0f:fa:b4:32:9b:cb:
         01:42:a8:09:0c:26:bd:54:78:60:b1:d3:f2:b7:d8:b0:bc:bb:
         fd:e0:33:24:86:d0:79:86:5b:66:dd:b9:e2:55:4f:dd:17:b8:
         fa:b7:43:d5:ca:fa:e3:dd:57:f1:87:33:27:31:9e:fe:11:48:
         e3:7c:ae:fc:66:8c:3f:db:81:0d:e5:24:19:ad:40:7a:83:9d:
         94:bf:4f:34:8b:9e:6b:97:a2:0b:7c:f5:72:71:f9:e0:5a:d7:
         00:07:d0:1c:b8:de:79:7b:fe:11:d3:c1:db:0c:e0:b6:94:0b:
         a6:56:72:15:c2:29:91:19:92:67:43:35:bb:e5:7c:7b:5e:f1:
         85:99:1f:cb:69:bb:e3:cb:0c:40:ce:e0:03:03:04:18:0e:43:
         72:c4:d3:fa:4f:f3:b8:a8:3b:be:33:80:cb:77:59:dd:ed:4a:
         2b:e2:ad:e6:f3:92:04:81:c7:51:d1:23:c0:bf:ff:86:b5:49:
         ab:5a:ae:61:66:35:b4:53:4a:2b:8e:6c:ae:5a:26:ca:d1:7e:
         43:5f:ef:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:09 2024 by rpki-client on console-ams.rpki-client.org