Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/0/323830343a343930303a383030303a3a2f33332d3335203d3e20323637313538.roa
File:                     323830343a343930303a383030303a3a2f33332d3335203d3e20323637313538.roa (raw, json)
Hash identifier:          my+BNnbzfl4s+3ZPnanvfgvlGktB8j3DS/W0yTYtlt0=
Subject key identifier:   D0:DF:EB:57:10:30:4C:91:62:09:A2:69:0E:D4:D7:1E:35:C9:AB:AB
Certificate issuer:       /CN=52451CBA75931AC98AB5376E8F45C16C90C08B18
Certificate serial:       0921A7414820F2C853E58C4B971931B23DC6AB34
Authority key identifier: 52:45:1C:BA:75:93:1A:C9:8A:B5:37:6E:8F:45:C1:6C:90:C0:8B:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52451CBA75931AC98AB5376E8F45C16C90C08B18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/0/323830343a343930303a383030303a3a2f33332d3335203d3e20323637313538.roa
Signing time:             Wed 24 Jan 2024 12:17:22 +0000
ROA not before:           Wed 24 Jan 2024 12:12:22 +0000
ROA not after:            Wed 22 Jan 2025 12:17:22 +0000
asID:                     267158
IP address blocks:        2804:4900:8000::/33 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:21:a7:41:48:20:f2:c8:53:e5:8c:4b:97:19:31:b2:3d:c6:ab:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52451CBA75931AC98AB5376E8F45C16C90C08B18
        Validity
            Not Before: Jan 24 12:12:22 2024 GMT
            Not After : Jan 22 12:17:22 2025 GMT
        Subject: CN=D0DFEB5710304C916209A2690ED4D71E35C9ABAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:db:c6:a7:7f:ec:80:8c:78:69:4f:2a:e6:c1:
                    b3:73:ee:79:e6:bf:83:25:b7:10:09:7e:c0:5c:ee:
                    d7:5e:6d:01:ee:08:fd:d0:d8:0d:a1:ad:4b:90:c0:
                    ae:63:2e:d0:57:ec:6f:90:c2:27:3c:e8:de:c9:43:
                    1d:4f:69:51:fd:6a:95:ba:05:df:c8:81:1d:58:03:
                    a9:00:e6:be:a2:26:11:da:e9:16:26:6e:b8:ed:23:
                    9c:7d:43:7c:16:4f:8a:0c:1e:f6:1b:23:af:ab:ee:
                    9c:d7:68:71:ee:3f:a1:2c:0e:28:78:d9:27:0d:cf:
                    7b:c0:9f:f7:8d:26:58:08:55:e6:77:8c:2b:5c:cd:
                    0a:c5:76:d1:c7:2e:0e:35:99:c4:36:c1:af:06:de:
                    43:62:34:98:f5:a0:dc:3c:81:91:15:41:57:e1:00:
                    ee:06:08:d6:e3:de:0e:3c:a2:88:67:09:4b:d3:1d:
                    7e:af:b5:95:b8:15:c7:fc:56:ce:2a:13:16:e3:98:
                    eb:5c:ab:39:b4:bc:68:a6:19:3a:33:0d:fb:82:55:
                    93:57:df:5d:68:0a:45:16:08:5a:86:db:bc:6a:1e:
                    27:2f:d0:a1:5e:81:72:e6:42:cd:e0:35:67:fa:56:
                    6f:6d:7c:0b:c3:b1:19:d5:71:4a:be:ec:99:2f:c5:
                    dd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:DF:EB:57:10:30:4C:91:62:09:A2:69:0E:D4:D7:1E:35:C9:AB:AB
            X509v3 Authority Key Identifier:
                keyid:52:45:1C:BA:75:93:1A:C9:8A:B5:37:6E:8F:45:C1:6C:90:C0:8B:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/0/52451CBA75931AC98AB5376E8F45C16C90C08B18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52451CBA75931AC98AB5376E8F45C16C90C08B18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/0/323830343a343930303a383030303a3a2f33332d3335203d3e20323637313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4900:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         93:35:73:d3:ef:db:fb:f1:09:df:67:d1:12:75:f5:8b:ca:08:
         7f:c8:bb:88:4e:d1:f6:21:36:d6:7c:8a:b3:57:26:cb:54:e5:
         fe:d3:8e:0d:91:0e:57:10:e1:ae:69:21:dc:7a:ec:36:19:c7:
         c4:69:82:0b:eb:13:5d:f6:b1:2b:b6:8a:80:a3:3b:5c:f9:7d:
         7d:e3:57:99:c4:57:da:f5:c9:ad:98:67:3c:2b:6e:20:6b:37:
         51:22:e1:cd:3a:c7:ea:68:69:7d:3a:ac:00:68:62:9f:85:1e:
         bc:55:2a:c1:70:41:a9:76:cb:b5:84:15:92:a8:4b:c0:f4:0c:
         fc:82:95:4d:91:15:ef:b3:fc:82:f7:dc:bf:82:40:e8:8a:0f:
         97:83:4a:c7:57:59:6d:e5:55:27:d8:b2:7c:b0:47:91:a2:1e:
         ca:39:3b:69:90:d3:09:66:59:af:a1:25:33:8f:5a:30:8e:00:
         f6:f6:c9:67:0d:ff:a7:eb:43:c4:db:49:00:dd:de:a1:3f:c6:
         05:01:3b:5c:38:37:cc:c5:7e:36:da:16:cb:a3:18:12:41:f8:
         f7:59:dd:00:11:74:80:5c:cc:95:02:9b:c2:13:e6:1f:3f:9c:
         8d:5e:98:b0:46:50:3b:d3:60:79:91:ce:4f:1e:c1:cf:72:a3:
         1b:57:c9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org