Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/323830343a333239343a3a2f33322d3438203d3e20323635303836.roa
File:                     323830343a333239343a3a2f33322d3438203d3e20323635303836.roa (raw, json)
Hash identifier:          GEKYy+JB1tlEdszR4/DA7YcR+0u8j2jz+c9/smGdrZQ=
Subject key identifier:   D8:6D:CC:EC:83:07:3B:8D:34:69:8C:D9:7B:5C:E5:F0:DC:34:F2:4A
Certificate issuer:       /CN=50497439D51FAF0FA48E52A17FE5D631143E8C3A
Certificate serial:       7E214F92B196831EB7F78B34078BA39BF75A33FC
Authority key identifier: 50:49:74:39:D5:1F:AF:0F:A4:8E:52:A1:7F:E5:D6:31:14:3E:8C:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/50497439D51FAF0FA48E52A17FE5D631143E8C3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/323830343a333239343a3a2f33322d3438203d3e20323635303836.roa
Signing time:             Wed 18 Aug 2021 15:10:00 +0000
ROA not before:           Wed 18 Aug 2021 15:05:00 +0000
ROA not after:            Wed 17 Aug 2022 15:10:00 +0000
asID:                     265086
IP address blocks:        2804:3294::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:21:4f:92:b1:96:83:1e:b7:f7:8b:34:07:8b:a3:9b:f7:5a:33:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50497439D51FAF0FA48E52A17FE5D631143E8C3A
        Validity
            Not Before: Aug 18 15:05:00 2021 GMT
            Not After : Aug 17 15:10:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c9:fc:af:4b:ee:fe:4f:22:10:76:28:5e:2d:
                    dc:6e:8a:ac:c9:fb:30:2b:c3:a0:ab:d8:1a:e5:94:
                    59:ba:01:a7:cc:8c:5f:d5:03:c0:f0:b7:b8:4a:26:
                    3a:47:4e:9f:df:e7:4f:b3:46:1e:3d:48:cf:c1:0c:
                    a8:31:85:74:87:84:19:77:80:59:e8:fe:3c:d5:6d:
                    93:43:14:ee:8f:25:95:c5:27:66:1e:01:63:2b:8f:
                    31:70:4c:ce:e5:0a:c0:67:72:db:14:33:1b:77:4d:
                    38:0b:7f:cb:31:d3:f8:1a:22:3e:04:0f:ca:dc:a9:
                    b1:0f:61:c8:91:f3:91:71:75:e3:9b:78:85:b1:83:
                    f9:c4:d1:89:85:80:94:de:e7:2e:b0:1e:3f:d7:44:
                    08:c3:3b:cf:a9:67:e0:58:dd:41:e1:72:20:45:97:
                    b6:4f:ba:65:a5:8d:0d:aa:55:c7:11:fc:ff:cd:b8:
                    76:d9:36:c7:ed:1b:24:c4:54:f1:23:11:11:07:f4:
                    a7:6d:c9:ae:34:ed:91:9b:b1:f8:d7:78:ad:a6:97:
                    41:5f:c6:df:c0:a8:f7:8f:1c:fe:52:80:3e:2f:1b:
                    76:fc:7c:aa:84:b4:26:dc:a2:c6:33:99:7d:0e:c5:
                    1a:35:67:e1:63:bd:f2:07:67:4d:eb:0b:c6:9f:8d:
                    86:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:6D:CC:EC:83:07:3B:8D:34:69:8C:D9:7B:5C:E5:F0:DC:34:F2:4A
            X509v3 Authority Key Identifier:
                keyid:50:49:74:39:D5:1F:AF:0F:A4:8E:52:A1:7F:E5:D6:31:14:3E:8C:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/50497439D51FAF0FA48E52A17FE5D631143E8C3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/50497439D51FAF0FA48E52A17FE5D631143E8C3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/323830343a333239343a3a2f33322d3438203d3e20323635303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3294::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:1a:0a:98:90:ff:76:70:24:62:c1:33:5a:d1:df:c0:55:e9:
         e5:a2:12:26:b8:11:27:d3:e9:a4:80:94:d4:80:68:62:d4:33:
         76:fc:86:97:65:42:dc:68:79:01:e6:24:82:7c:df:c6:f4:66:
         05:bc:ab:fe:4e:ed:6e:96:52:48:8f:7a:01:5b:81:93:c1:05:
         e9:b5:8e:65:46:f0:38:9d:77:d4:dd:58:d5:d2:cb:ca:70:92:
         e4:0a:7e:67:11:b9:c3:01:81:b9:e1:be:c1:65:40:bd:2b:a3:
         81:c9:4d:b4:c3:d6:ef:81:23:95:30:33:f8:a7:c0:81:ed:24:
         4c:e3:f6:cc:0a:ea:bf:58:b3:a7:c5:c2:a2:1b:60:9c:3a:7b:
         97:b3:73:52:46:04:b6:92:72:e3:c8:36:9f:17:de:ee:8f:95:
         36:38:02:3a:28:e0:a6:87:a2:dd:32:fe:13:82:27:90:7f:f9:
         79:48:8f:c9:c7:1d:6b:da:27:d7:60:ce:7a:61:6a:9a:cb:b2:
         e8:11:2e:85:98:95:3a:aa:f0:40:89:c2:14:9b:de:bd:d7:eb:
         09:65:d0:63:41:a8:b4:33:3c:f7:fe:3f:b9:f5:4d:b0:ea:d6:
         09:e1:25:18:d5:d5:95:11:36:49:d4:f6:72:5d:53:1a:1f:0f:
         42:5a:b9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:31 2024 by rpki-client on console-ams.rpki-client.org