Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgintYyM1MkCsi6iGj7xDS8ommMtpj9KFQy4cjUk26qw/0/323830343a356139383a3a2f33322d313237203d3e20323632343339.roa
File:                     323830343a356139383a3a2f33322d313237203d3e20323632343339.roa (raw, json)
Hash identifier:          hXFvTAGpJYUOBGau0wU5a+7XQjxGvjVEMvRmixU7Y8I=
Subject key identifier:   39:35:90:B0:74:67:9D:93:B3:F5:06:F0:16:B3:F6:C5:94:DD:97:CC
Certificate issuer:       /CN=D299779E3716893CEA766AB5F675939AE481EB54
Certificate serial:       39DC2307880EB1A22D71E7F39C33B5FACC3861D6
Authority key identifier: D2:99:77:9E:37:16:89:3C:EA:76:6A:B5:F6:75:93:9A:E4:81:EB:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D299779E3716893CEA766AB5F675939AE481EB54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgintYyM1MkCsi6iGj7xDS8ommMtpj9KFQy4cjUk26qw/0/323830343a356139383a3a2f33322d313237203d3e20323632343339.roa
Signing time:             Tue 30 May 2023 15:30:36 +0000
ROA not before:           Tue 30 May 2023 15:25:36 +0000
ROA not after:            Tue 28 May 2024 15:30:36 +0000
asID:                     262439
IP address blocks:        2804:5a98::/32 maxlen: 127

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:dc:23:07:88:0e:b1:a2:2d:71:e7:f3:9c:33:b5:fa:cc:38:61:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D299779E3716893CEA766AB5F675939AE481EB54
        Validity
            Not Before: May 30 15:25:36 2023 GMT
            Not After : May 28 15:30:36 2024 GMT
        Subject: CN=393590B074679D93B3F506F016B3F6C594DD97CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:33:98:95:32:12:29:f2:de:d7:b5:5e:83:73:
                    d0:fa:60:24:20:49:d3:27:8d:3d:31:af:ba:ca:49:
                    b6:1a:a4:2e:1b:c5:bf:c7:07:ed:cc:72:05:fe:cd:
                    fe:4f:3e:a8:53:d1:a6:71:76:6b:c0:ed:9c:58:67:
                    da:78:cd:52:7e:e0:04:3d:4e:d0:ee:3b:d5:b2:82:
                    93:68:1a:50:ff:10:da:29:07:d6:e0:69:c4:63:36:
                    74:9f:ce:97:32:96:40:a9:6c:b8:5f:ab:92:5a:a2:
                    f5:64:d2:1c:5e:ec:dd:66:d1:e1:6d:89:c4:bf:db:
                    44:cf:c7:52:a2:69:64:d2:b1:8a:ab:01:05:ab:5e:
                    92:04:86:79:14:29:3d:b8:ee:c2:99:6f:8a:0e:74:
                    22:45:90:aa:c1:01:34:21:a1:c1:75:36:08:ea:f0:
                    86:38:9b:91:ed:76:8e:8d:ad:28:65:ed:0f:ec:5b:
                    68:8e:5f:ba:b8:00:ea:a3:ad:ff:f3:b0:fb:53:7c:
                    f6:03:86:5e:85:cc:fb:cd:ef:4a:fe:34:99:ad:0b:
                    c2:fc:24:41:72:f8:1e:66:fc:73:8b:2d:fd:63:cd:
                    b5:e5:e7:1e:b9:66:d3:82:f2:e3:7d:7b:b4:1a:db:
                    6d:cb:89:8f:51:42:6f:b4:83:77:89:df:85:ee:1e:
                    ea:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:35:90:B0:74:67:9D:93:B3:F5:06:F0:16:B3:F6:C5:94:DD:97:CC
            X509v3 Authority Key Identifier:
                keyid:D2:99:77:9E:37:16:89:3C:EA:76:6A:B5:F6:75:93:9A:E4:81:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgintYyM1MkCsi6iGj7xDS8ommMtpj9KFQy4cjUk26qw/0/D299779E3716893CEA766AB5F675939AE481EB54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D299779E3716893CEA766AB5F675939AE481EB54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgintYyM1MkCsi6iGj7xDS8ommMtpj9KFQy4cjUk26qw/0/323830343a356139383a3a2f33322d313237203d3e20323632343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a98::/32

    Signature Algorithm: sha256WithRSAEncryption
         d7:56:d5:a8:f7:ca:1d:81:44:d4:d9:12:34:9a:37:b9:42:f3:
         1b:a9:58:ae:b3:be:2b:26:eb:5f:01:7c:5c:e5:48:9c:49:31:
         b9:fd:b6:b3:fc:41:10:79:2b:c1:ed:42:83:23:19:70:3f:09:
         ec:a3:de:0b:0f:12:31:5f:9b:2f:6d:df:2f:c4:94:b9:e7:ac:
         7b:b8:89:a4:9e:a0:2c:06:48:6d:d8:ea:a2:f9:a1:67:cd:7a:
         46:7c:90:fe:17:73:02:0a:1f:ac:f7:7a:9e:29:3d:81:60:1d:
         32:31:65:55:6f:26:eb:b0:fe:73:dd:87:1f:96:19:04:aa:30:
         e1:d5:8e:72:99:7e:b4:ec:54:77:b5:d5:ef:88:e2:1b:af:ca:
         94:d3:47:4b:b3:03:49:73:c5:16:59:68:60:88:51:4f:df:b5:
         36:da:b6:b8:21:88:a8:5c:44:34:a1:25:74:cd:8c:5b:fe:ae:
         db:a9:a0:42:86:64:f8:b2:24:17:f1:b8:7d:e2:3a:03:d4:46:
         b6:47:b3:16:96:64:97:8d:c1:f1:1b:0f:1a:f7:60:e7:af:98:
         b2:98:e4:4c:7c:8c:3a:08:04:82:5b:65:2d:db:06:35:b8:83:
         01:f2:1e:30:e1:82:55:ad:72:6b:52:1c:b3:e8:f3:5d:0d:ba:
         15:0b:cb:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org