Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/0/323830343a323534303a3a2f33322d3332203d3e20323634323638.roa
File:                     323830343a323534303a3a2f33322d3332203d3e20323634323638.roa (raw, json)
Hash identifier:          s3Btji3rvYognY0O4PPjtLjJEeLAe7dh9nmMKQPoc5k=
Subject key identifier:   75:1C:55:36:68:C0:AE:05:0A:2F:4D:D4:55:65:2E:FB:DD:F0:7D:55
Certificate issuer:       /CN=8DB6DA6BEB1D8BD287397DF4882B096CD4CEC6F0
Certificate serial:       549EC0985D694084FAA3C184FFB8242B4A67F3BF
Authority key identifier: 8D:B6:DA:6B:EB:1D:8B:D2:87:39:7D:F4:88:2B:09:6C:D4:CE:C6:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DB6DA6BEB1D8BD287397DF4882B096CD4CEC6F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/0/323830343a323534303a3a2f33322d3332203d3e20323634323638.roa
Signing time:             Wed 31 May 2023 23:00:00 +0000
ROA not before:           Wed 31 May 2023 22:55:00 +0000
ROA not after:            Fri 31 May 2024 23:00:00 +0000
asID:                     264268
IP address blocks:        2804:2540::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:9e:c0:98:5d:69:40:84:fa:a3:c1:84:ff:b8:24:2b:4a:67:f3:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DB6DA6BEB1D8BD287397DF4882B096CD4CEC6F0
        Validity
            Not Before: May 31 22:55:00 2023 GMT
            Not After : May 31 23:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a9:49:aa:3c:b5:cd:5c:77:e8:85:ce:6d:6a:
                    ac:03:50:c4:90:cb:bf:d1:e9:5c:bb:2d:b4:87:a4:
                    ac:e1:89:69:bf:f4:db:9c:f3:83:24:05:22:70:58:
                    9c:ae:4f:8e:eb:8c:6c:3f:44:75:e0:fd:2a:53:51:
                    2c:ad:73:1c:98:df:08:ad:71:16:f4:4a:12:d2:78:
                    4e:f1:8d:ae:a0:6e:5a:3a:99:c0:50:ba:90:aa:c4:
                    a4:db:4f:9f:d5:a6:21:a9:24:90:d8:ef:4b:82:73:
                    e8:fc:df:6b:87:13:71:4e:01:61:e9:36:bc:12:1e:
                    33:29:a5:70:63:57:57:c3:61:77:48:d0:c3:1a:aa:
                    3a:58:c2:86:4f:ab:07:56:40:0b:c7:f4:f3:b9:87:
                    e1:9c:71:79:37:0e:cf:a6:6c:d3:fe:98:00:57:1c:
                    60:76:60:ac:c6:22:49:98:a0:d3:d7:3b:f4:26:7a:
                    43:4c:4b:d7:bb:ca:6a:24:55:71:5d:b5:91:03:a5:
                    f1:de:e3:e4:4b:2b:d1:f4:df:60:20:fc:cf:de:cf:
                    48:89:3d:9d:da:03:e5:a1:a8:c1:bb:41:c5:db:4e:
                    64:72:5e:d1:77:37:31:3d:2d:08:c4:67:39:73:93:
                    a8:d4:19:35:34:6a:99:07:92:4a:10:02:09:de:0a:
                    b2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:1C:55:36:68:C0:AE:05:0A:2F:4D:D4:55:65:2E:FB:DD:F0:7D:55
            X509v3 Authority Key Identifier:
                keyid:8D:B6:DA:6B:EB:1D:8B:D2:87:39:7D:F4:88:2B:09:6C:D4:CE:C6:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/0/8DB6DA6BEB1D8BD287397DF4882B096CD4CEC6F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DB6DA6BEB1D8BD287397DF4882B096CD4CEC6F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/0/323830343a323534303a3a2f33322d3332203d3e20323634323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2540::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:9c:a4:ee:cd:1c:6d:55:53:8e:b4:21:c6:48:e7:86:25:8a:
         f9:55:ec:54:6a:00:21:8f:1f:1c:09:73:f8:a9:ee:55:02:67:
         a3:91:3a:cc:17:d2:2b:11:f0:de:0a:96:20:ac:80:c0:1b:0a:
         34:f9:ab:3f:48:5e:3d:f3:10:9c:f6:3c:3f:75:8b:24:75:c1:
         ac:4a:ab:ef:67:11:81:37:39:88:8f:a6:c5:8b:39:25:fd:98:
         2c:7e:98:69:cd:3c:88:b0:02:7d:09:ce:bb:a1:9d:3c:be:c8:
         e7:29:ec:b8:b6:05:fc:1f:f5:40:40:eb:fb:92:ba:46:f8:0c:
         27:e9:17:75:72:0e:cb:75:3c:c9:73:93:d7:08:b5:3c:54:79:
         cc:94:14:1a:7f:51:ba:d6:ad:70:98:99:32:4c:1f:be:20:90:
         d9:de:68:fd:e8:8a:73:75:7d:f0:27:81:84:24:11:7d:77:ae:
         6e:83:ac:e6:90:f6:78:96:76:94:b6:f8:1c:e0:d1:70:68:9e:
         f5:ab:14:9d:be:8a:2a:e2:93:1a:0e:69:4b:98:74:bd:d0:24:
         3b:f4:f0:a9:84:2e:c6:46:7b:39:6d:27:2f:1f:76:58:80:73:
         ad:33:49:40:44:f7:07:e6:35:88:f8:89:78:9c:ee:1f:7d:c8:
         b4:3f:9f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:11 2024 by rpki-client on console-fra.rpki-client.org