Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/323830343a363462383a3a2f33322d3335203d3e20323639343434.roa
File:                     323830343a363462383a3a2f33322d3335203d3e20323639343434.roa (raw, json)
Hash identifier:          t9d1nn6zr9bQm2SJRnKnEe6WPxvzz5+120Qyq/B69Zg=
Subject key identifier:   35:6E:9F:45:78:68:A7:08:87:20:C2:A2:88:CC:42:05:17:28:13:3E
Certificate issuer:       /CN=0A57E22B5DA2126C6212C06A47BFC5022500D7AA
Certificate serial:       2499FC8DDDFB990F9035C04254A6F3E963A03E69
Authority key identifier: 0A:57:E2:2B:5D:A2:12:6C:62:12:C0:6A:47:BF:C5:02:25:00:D7:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A57E22B5DA2126C6212C06A47BFC5022500D7AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/323830343a363462383a3a2f33322d3335203d3e20323639343434.roa
Signing time:             Wed 18 Jan 2023 18:59:27 +0000
ROA not before:           Wed 18 Jan 2023 18:54:27 +0000
ROA not after:            Wed 17 Jan 2024 18:59:27 +0000
asID:                     269444
IP address blocks:        2804:64b8::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:99:fc:8d:dd:fb:99:0f:90:35:c0:42:54:a6:f3:e9:63:a0:3e:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A57E22B5DA2126C6212C06A47BFC5022500D7AA
        Validity
            Not Before: Jan 18 18:54:27 2023 GMT
            Not After : Jan 17 18:59:27 2024 GMT
        Subject: CN=356E9F457868A7088720C2A288CC42051728133E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6f:df:30:6e:72:19:23:bf:e2:c5:76:aa:a0:
                    14:e4:cf:20:14:d4:b6:11:88:f8:de:98:d6:e2:88:
                    45:27:c9:a4:fa:14:af:c5:2d:d6:d8:03:9a:34:ba:
                    0e:ad:ee:b8:2f:d6:6c:f2:d3:bd:17:c7:0b:76:34:
                    b3:f4:66:84:70:bd:63:32:a4:14:1d:aa:c6:e6:94:
                    9b:8f:ee:01:b8:d1:60:08:96:83:74:d4:e0:c6:0b:
                    dc:31:3e:04:47:cc:e7:85:f2:e9:ad:8f:ce:ad:91:
                    11:65:6d:be:94:02:86:d0:9f:cd:36:58:b2:95:c1:
                    ae:13:cd:f3:81:9a:9c:f7:27:6e:64:32:99:9a:40:
                    df:63:af:9c:74:b6:c1:d5:79:3f:4b:e4:59:5e:26:
                    e1:ec:e3:2d:35:db:06:d6:f0:25:3f:6b:e4:b9:4e:
                    da:85:b8:8a:e6:9d:2b:21:cb:a8:37:8c:40:84:94:
                    98:db:10:4e:50:89:45:05:41:37:8b:e8:84:ad:18:
                    3d:a4:83:4e:9d:24:5b:37:6a:d3:0d:f2:c0:e0:4f:
                    b8:d2:01:5e:3b:4a:eb:74:6c:97:38:7a:e0:27:99:
                    cd:f5:32:2f:11:ba:44:e0:f8:f3:48:d6:79:85:54:
                    ee:22:d5:30:b3:9b:14:27:32:90:2f:09:9e:9f:e0:
                    0e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6E:9F:45:78:68:A7:08:87:20:C2:A2:88:CC:42:05:17:28:13:3E
            X509v3 Authority Key Identifier:
                keyid:0A:57:E2:2B:5D:A2:12:6C:62:12:C0:6A:47:BF:C5:02:25:00:D7:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/0A57E22B5DA2126C6212C06A47BFC5022500D7AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A57E22B5DA2126C6212C06A47BFC5022500D7AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/323830343a363462383a3a2f33322d3335203d3e20323639343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:64b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:35:b5:e4:da:74:df:3e:d1:8a:83:ee:f3:ce:79:97:9b:98:
         69:44:ba:fb:b0:e5:f4:ef:b1:5c:18:40:56:51:8a:b4:1c:4f:
         3e:3b:89:a8:3f:f4:55:c4:01:29:96:11:68:50:91:07:df:cd:
         39:30:f6:3a:7c:da:f0:89:62:24:ea:54:49:60:be:20:c5:38:
         e6:95:74:79:b9:2e:8e:4e:82:26:84:1c:cc:2e:df:43:70:a3:
         6e:e9:82:13:78:03:a0:d7:28:20:0a:28:a7:17:93:0d:26:5e:
         73:8d:76:c1:9e:c1:a3:ad:ba:b7:09:fa:59:78:ea:ac:bc:16:
         70:57:14:c3:9e:5a:43:54:7d:dc:1d:a8:62:21:82:e2:d4:bd:
         b3:8c:38:15:32:24:1e:4c:15:e5:c7:66:87:0b:e2:88:6b:4c:
         70:df:40:73:f8:1f:d8:19:aa:e7:61:3a:e2:87:56:a0:e1:b8:
         27:ab:fc:bd:00:6c:e4:09:76:c0:e5:4c:e2:ae:4e:14:46:ba:
         75:87:d3:4b:e1:7d:54:2c:c5:94:f4:a4:37:b0:ab:10:8e:38:
         de:ca:29:13:4a:42:95:ad:ff:08:39:94:38:e0:f4:f0:64:f1:
         92:fe:bf:1d:bb:2e:ff:94:7f:66:83:cb:2e:80:3a:2f:89:6a:
         b2:f6:9b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:34 2024 by rpki-client on console-ams.rpki-client.org