Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H599g2B2KGPbiCjtjZWfzFyY8NsSYjTeArpMBu2VuuNh/0/323830343a343035633a3a2f33322d3332203d3e20323635393534.roa
File:                     323830343a343035633a3a2f33322d3332203d3e20323635393534.roa (raw, json)
Hash identifier:          usQb3a6LNATwwEarxt7/xAKeqDLv2KZPuXDcMMcYnC0=
Subject key identifier:   52:7D:83:0C:89:D1:AB:36:51:0F:D5:23:65:20:2C:2B:40:B6:57:BA
Certificate issuer:       /CN=10BD2DC730F0B23F916910967FC53BEC4220C195
Certificate serial:       09BFF326F28959BC0487BF278756E85C73EFCE32
Authority key identifier: 10:BD:2D:C7:30:F0:B2:3F:91:69:10:96:7F:C5:3B:EC:42:20:C1:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10BD2DC730F0B23F916910967FC53BEC4220C195.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H599g2B2KGPbiCjtjZWfzFyY8NsSYjTeArpMBu2VuuNh/0/323830343a343035633a3a2f33322d3332203d3e20323635393534.roa
Signing time:             Tue 11 May 2021 01:18:59 +0000
ROA not before:           Tue 11 May 2021 01:13:59 +0000
ROA not after:            Tue 10 May 2022 01:18:59 +0000
asID:                     265954
IP address blocks:        2804:405c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:bf:f3:26:f2:89:59:bc:04:87:bf:27:87:56:e8:5c:73:ef:ce:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BD2DC730F0B23F916910967FC53BEC4220C195
        Validity
            Not Before: May 11 01:13:59 2021 GMT
            Not After : May 10 01:18:59 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:66:03:36:54:45:ce:49:75:81:c8:53:16:27:
                    c7:bd:f9:a7:d1:6d:01:57:fe:2e:29:b0:27:95:cf:
                    4e:ec:5c:0a:72:b2:80:e0:99:44:d4:6f:33:e5:ea:
                    cf:73:3c:91:ab:5a:1c:fc:e2:0d:9a:bd:c6:dc:ed:
                    06:4c:5b:0a:fd:a9:0f:15:67:42:7a:fc:f8:48:16:
                    63:ff:17:20:b9:de:35:1d:fe:9a:f8:6e:cc:64:ed:
                    77:ad:72:62:12:09:80:72:9c:f3:1c:0f:31:d0:61:
                    26:da:28:93:8e:de:22:6d:df:a2:7c:d3:be:95:eb:
                    34:b6:d7:0c:d6:dd:b5:9f:8a:aa:4f:7c:23:82:9f:
                    79:10:57:3e:71:81:23:a7:ad:24:d3:8c:f9:ad:76:
                    11:15:12:d8:24:62:eb:0d:47:f6:19:55:b8:56:d7:
                    f8:c1:a7:3c:52:7d:54:63:98:52:bc:14:df:01:63:
                    9d:d4:7f:48:8a:18:b9:96:9c:43:09:29:15:0a:76:
                    15:34:72:40:d1:92:42:db:ef:b2:45:04:7c:f3:9d:
                    6c:cf:5a:d6:32:17:36:e1:28:85:0e:5e:a1:09:2f:
                    a5:8b:10:97:99:9d:13:24:9a:0c:5c:95:8e:b5:9a:
                    fd:d8:91:67:df:2e:11:7e:d9:20:f6:4d:2e:aa:fa:
                    89:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:7D:83:0C:89:D1:AB:36:51:0F:D5:23:65:20:2C:2B:40:B6:57:BA
            X509v3 Authority Key Identifier:
                keyid:10:BD:2D:C7:30:F0:B2:3F:91:69:10:96:7F:C5:3B:EC:42:20:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H599g2B2KGPbiCjtjZWfzFyY8NsSYjTeArpMBu2VuuNh/0/10BD2DC730F0B23F916910967FC53BEC4220C195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10BD2DC730F0B23F916910967FC53BEC4220C195.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H599g2B2KGPbiCjtjZWfzFyY8NsSYjTeArpMBu2VuuNh/0/323830343a343035633a3a2f33322d3332203d3e20323635393534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:405c::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:c9:85:2b:cb:b5:77:cc:d8:b4:70:f0:18:7b:3d:67:67:38:
         47:26:6d:bf:b2:c8:54:d0:77:33:83:0c:4a:c9:3e:01:b9:08:
         42:e5:42:bb:dc:8c:1b:1b:65:6e:49:36:1d:3f:32:1c:1f:f8:
         96:3c:f3:96:77:e3:51:7a:19:33:97:56:d7:92:91:77:fb:09:
         21:d9:2e:e7:8c:e6:3b:5a:0b:82:8f:69:c9:ae:12:4d:a3:ac:
         dd:06:3c:83:19:1c:82:fe:55:1a:ff:0c:4b:1c:f6:f1:b7:45:
         46:22:c8:1c:b5:c1:dc:3f:7e:df:f5:11:36:9c:75:b9:d2:b3:
         a0:97:bb:6f:86:a2:5b:1f:3f:48:46:88:90:8a:7e:4a:9c:52:
         52:2f:13:99:81:8d:1a:2b:a3:5a:ff:44:f8:a8:e3:a7:b0:28:
         cb:90:2c:c4:32:99:4d:91:e3:57:16:4e:6a:ae:30:19:07:f7:
         ba:f7:6d:48:89:d2:36:f2:e7:40:f2:f3:fb:09:35:6d:d3:4d:
         c0:6b:e8:fa:c2:c3:07:2a:2a:d2:97:bd:8c:cd:1b:ef:0f:00:
         95:cf:4f:98:7b:cd:a8:e1:ee:0f:6e:7a:79:6a:a4:f7:96:69:
         bd:ac:43:53:ed:a9:db:27:fc:1a:cf:b6:e6:30:b9:90:a9:fc:
         b7:da:58:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org