Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/323830343a353635383a3a2f33322d313238203d3e20323637393932.roa
File:                     323830343a353635383a3a2f33322d313238203d3e20323637393932.roa (raw, json)
Hash identifier:          hibE4xkuA7DSsHNpqrxBQP7JlpJKxIwAZg/4mLUWtbw=
Subject key identifier:   BB:DF:34:55:8D:4D:53:FD:E7:00:C5:A5:A5:2F:92:2E:6C:C1:ED:35
Certificate issuer:       /CN=85221691CDF08706BEE1A2A092778521C8204123
Certificate serial:       19662375CCBE7357A47F0ECC34E135BA4C529ECE
Authority key identifier: 85:22:16:91:CD:F0:87:06:BE:E1:A2:A0:92:77:85:21:C8:20:41:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85221691CDF08706BEE1A2A092778521C8204123.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/323830343a353635383a3a2f33322d313238203d3e20323637393932.roa
Signing time:             Mon 22 Apr 2024 15:39:23 +0000
ROA not before:           Mon 22 Apr 2024 15:34:23 +0000
ROA not after:            Mon 21 Apr 2025 15:39:23 +0000
asID:                     267992
IP address blocks:        2804:5658::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:66:23:75:cc:be:73:57:a4:7f:0e:cc:34:e1:35:ba:4c:52:9e:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85221691CDF08706BEE1A2A092778521C8204123
        Validity
            Not Before: Apr 22 15:34:23 2024 GMT
            Not After : Apr 21 15:39:23 2025 GMT
        Subject: CN=BBDF34558D4D53FDE700C5A5A52F922E6CC1ED35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a4:82:fb:2a:00:e6:ed:f3:59:61:c2:94:00:
                    0d:6a:c2:b2:38:fe:ff:27:1a:4d:80:9e:0c:5a:0c:
                    0f:67:eb:8b:81:e4:72:86:24:94:0a:33:69:12:e1:
                    59:5e:fd:5a:f9:34:b9:ac:98:75:8f:64:99:82:36:
                    2e:d3:57:a0:7f:59:55:0a:e0:20:db:33:29:d3:a9:
                    89:95:36:1b:f1:1b:f1:56:c2:25:17:ef:0b:61:bb:
                    8f:f5:5b:f0:cf:f8:46:b0:d4:05:f1:64:d6:62:0c:
                    02:aa:8c:0c:bb:5e:a2:45:0e:6b:bb:80:91:ac:1e:
                    cd:80:92:a8:62:9c:01:17:d5:6a:a2:42:1e:5c:78:
                    32:b7:ff:43:33:90:3f:fe:5d:f7:4b:d0:e8:86:d8:
                    04:e0:1e:f9:a7:e2:f7:83:f5:02:a9:b9:58:46:26:
                    c6:0d:c1:5d:e3:f1:c5:d8:b7:f8:bb:b0:fa:fd:95:
                    83:b9:67:2f:0a:e3:cb:69:c6:41:66:96:5c:80:4c:
                    f7:19:fa:dc:2b:a3:21:c4:5b:3b:8c:74:81:4f:03:
                    45:f3:21:a1:27:bf:a9:3e:d6:0c:7e:a3:4f:f2:cf:
                    f8:62:f1:67:f5:55:a7:02:12:ac:1e:ed:4d:04:49:
                    35:2a:51:89:8d:cf:aa:23:8e:9a:b1:2e:1d:28:59:
                    10:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:DF:34:55:8D:4D:53:FD:E7:00:C5:A5:A5:2F:92:2E:6C:C1:ED:35
            X509v3 Authority Key Identifier:
                keyid:85:22:16:91:CD:F0:87:06:BE:E1:A2:A0:92:77:85:21:C8:20:41:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/85221691CDF08706BEE1A2A092778521C8204123.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85221691CDF08706BEE1A2A092778521C8204123.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/323830343a353635383a3a2f33322d313238203d3e20323637393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5658::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:9d:22:2b:2a:b1:4c:d1:c9:5c:22:14:17:2e:76:02:09:dc:
         94:c8:81:fd:64:79:59:22:53:9a:df:3b:eb:f5:55:0e:11:c4:
         33:1d:31:5d:1a:31:4a:8f:ef:e3:8b:63:44:2c:be:05:87:32:
         fa:2b:12:e9:87:39:ae:98:91:33:75:28:a0:45:7a:6e:f9:4a:
         79:6e:04:51:51:1c:03:f8:a9:fe:a3:be:8a:9e:3a:00:16:9f:
         65:69:b5:c7:cd:e1:31:d3:dc:12:77:e3:8b:61:76:8d:0d:00:
         e4:b1:f9:51:70:f1:84:c4:80:74:96:82:ca:fd:ba:1c:f0:f8:
         0d:64:36:7b:04:0b:84:3b:fa:03:c7:00:a8:53:53:49:96:57:
         7e:54:13:7a:cf:c6:ec:f1:e2:ab:12:d7:40:94:bf:3f:82:49:
         aa:8c:95:45:f2:41:3e:bc:73:f3:85:48:62:b0:96:fa:9a:aa:
         ec:ce:52:7c:f4:d6:1b:bc:77:46:1a:b9:d8:e3:ec:04:11:bb:
         83:21:3d:12:98:10:a3:fb:3f:41:d4:90:14:7d:10:9a:85:cb:
         c3:57:d6:c0:a7:df:d3:78:74:d5:6f:cd:3e:ff:ba:8c:73:ef:
         d2:a8:a1:3c:d9:9c:8a:44:a7:31:37:a6:df:99:3c:fe:10:23:
         f0:a9:91:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org