Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GzSpzE7ZJ4cSPpLsaJTAEWsaHdjTZMnyNnG9CTttcxPH/0/323830343a353930343a3a2f33322d313238203d3e20323638313634.roa
File:                     323830343a353930343a3a2f33322d313238203d3e20323638313634.roa (raw, json)
Hash identifier:          EublBdK4jgyEI33LyUkiHYktcw+eEMYzjexm7pcn5tA=
Subject key identifier:   5E:4B:FD:4E:48:D1:F4:20:5F:1A:94:2E:C7:ED:7A:25:E4:15:C4:AD
Certificate issuer:       /CN=D85040866220B9E2081CF8E30D0BE49F82B0C554
Certificate serial:       399FF186CEB2F9815F428E6A999562761F2CE021
Authority key identifier: D8:50:40:86:62:20:B9:E2:08:1C:F8:E3:0D:0B:E4:9F:82:B0:C5:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85040866220B9E2081CF8E30D0BE49F82B0C554.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzSpzE7ZJ4cSPpLsaJTAEWsaHdjTZMnyNnG9CTttcxPH/0/323830343a353930343a3a2f33322d313238203d3e20323638313634.roa
Signing time:             Fri 06 Oct 2023 21:09:35 +0000
ROA not before:           Fri 06 Oct 2023 21:04:35 +0000
ROA not after:            Fri 04 Oct 2024 21:09:35 +0000
asID:                     268164
IP address blocks:        2804:5904::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:9f:f1:86:ce:b2:f9:81:5f:42:8e:6a:99:95:62:76:1f:2c:e0:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85040866220B9E2081CF8E30D0BE49F82B0C554
        Validity
            Not Before: Oct  6 21:04:35 2023 GMT
            Not After : Oct  4 21:09:35 2024 GMT
        Subject: CN=5E4BFD4E48D1F4205F1A942EC7ED7A25E415C4AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e8:a7:b1:24:d7:f6:a7:f0:7b:25:f4:f4:3f:
                    b1:10:1e:ab:bb:a2:8d:3f:91:44:b0:76:0e:70:94:
                    9e:18:c0:62:90:9b:51:c6:a7:6a:bb:43:c7:ce:f9:
                    c0:68:e2:ac:fb:77:1d:9a:55:13:44:6e:bd:24:46:
                    2f:a0:66:7c:d6:cd:d2:6c:50:b6:a8:f2:b1:51:7b:
                    b8:5b:b2:6b:e5:8c:30:9b:ac:ed:1b:01:dc:f5:2c:
                    95:60:e5:3a:33:de:9a:bf:a4:80:ac:f5:9e:fa:e3:
                    0c:46:ce:0a:20:70:a4:e2:43:8d:44:46:b7:29:9e:
                    8c:91:cc:19:5a:d0:07:ad:a1:a4:8a:7f:46:0e:15:
                    59:53:b8:7e:4a:26:d2:e7:e8:e3:08:f8:ff:51:17:
                    f5:22:5e:a7:4a:b0:b6:97:ff:ce:08:2e:3f:dd:f0:
                    ed:52:47:5a:c3:7e:c8:07:21:32:fc:84:e0:79:b9:
                    e0:98:ad:eb:94:2e:d3:0a:73:16:23:ca:7a:17:fe:
                    e3:df:ae:4c:75:38:c8:0c:9e:55:d4:5f:20:11:18:
                    35:49:a5:4a:c1:91:51:8c:58:e4:9c:05:44:6d:fb:
                    44:bb:07:aa:2a:02:60:88:99:e8:79:e5:d7:81:6a:
                    ca:b1:6c:21:fd:67:04:56:96:6d:18:2d:00:d1:f7:
                    05:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:4B:FD:4E:48:D1:F4:20:5F:1A:94:2E:C7:ED:7A:25:E4:15:C4:AD
            X509v3 Authority Key Identifier:
                keyid:D8:50:40:86:62:20:B9:E2:08:1C:F8:E3:0D:0B:E4:9F:82:B0:C5:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzSpzE7ZJ4cSPpLsaJTAEWsaHdjTZMnyNnG9CTttcxPH/0/D85040866220B9E2081CF8E30D0BE49F82B0C554.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85040866220B9E2081CF8E30D0BE49F82B0C554.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzSpzE7ZJ4cSPpLsaJTAEWsaHdjTZMnyNnG9CTttcxPH/0/323830343a353930343a3a2f33322d313238203d3e20323638313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5904::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:ba:12:54:8c:a4:ae:43:30:c9:1c:18:9d:85:83:7c:6a:68:
         ab:9e:72:7c:18:3a:a7:9a:77:7c:c7:12:9c:94:6b:62:9e:1f:
         89:49:21:3b:05:cd:d7:d5:e3:4b:50:85:47:60:21:54:6d:5f:
         4b:dc:92:e4:f5:e3:90:45:4d:d9:07:2b:ad:d8:0b:2e:30:02:
         6e:90:0c:2d:3a:66:86:c3:ab:96:11:30:1a:3c:37:3c:53:15:
         29:48:8e:06:b4:f2:f7:a4:eb:53:5e:a2:a3:a8:4d:51:57:9f:
         43:b5:4c:4d:ed:cb:0b:b9:19:46:1e:fa:b3:91:a5:08:0f:58:
         52:93:b7:8f:d8:0a:d6:41:15:40:61:04:9a:a6:13:37:82:db:
         80:df:ee:ff:a1:45:49:b6:ad:22:7f:fb:44:58:22:aa:6e:1b:
         96:60:8f:fb:49:04:9c:9d:a8:90:2a:29:4e:a2:84:e5:0f:41:
         51:f6:e7:9d:95:3e:dc:34:c1:86:df:2c:0b:67:01:1b:70:a8:
         7a:f1:bd:31:7b:1a:1d:c6:e7:b3:b1:52:83:ed:4e:af:38:c6:
         df:4b:7f:d5:3b:ed:f5:3a:08:57:9a:e3:17:b0:10:9f:2f:7c:
         75:53:dc:5b:af:34:57:8c:da:19:47:68:07:28:e8:16:19:ca:
         3f:3c:a7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org