Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/0/323830343a6136343a3a2f33322d3334203d3e203532383933.roa
File:                     323830343a6136343a3a2f33322d3334203d3e203532383933.roa (raw, json)
Hash identifier:          DyNkcVNteqw6AP8jf2c1M23yL1cI0dknvb9xDBUmx38=
Subject key identifier:   0D:52:5F:94:19:63:01:53:EA:29:5D:6A:74:0F:FF:F6:E6:D3:3A:78
Certificate issuer:       /CN=590CB921D31788D4537CBF5A72ACB47A7E34BA34
Certificate serial:       5921D15F2B6F6E4B395286DC44822D624B901779
Authority key identifier: 59:0C:B9:21:D3:17:88:D4:53:7C:BF:5A:72:AC:B4:7A:7E:34:BA:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/590CB921D31788D4537CBF5A72ACB47A7E34BA34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/0/323830343a6136343a3a2f33322d3334203d3e203532383933.roa
Signing time:             Thu 25 Jan 2024 15:00:00 +0000
ROA not before:           Thu 25 Jan 2024 14:55:00 +0000
ROA not after:            Thu 23 Jan 2025 15:00:00 +0000
asID:                     52893
IP address blocks:        2804:a64::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:21:d1:5f:2b:6f:6e:4b:39:52:86:dc:44:82:2d:62:4b:90:17:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590CB921D31788D4537CBF5A72ACB47A7E34BA34
        Validity
            Not Before: Jan 25 14:55:00 2024 GMT
            Not After : Jan 23 15:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:40:96:a9:bb:e0:27:7d:42:3f:4d:0d:a9:f5:
                    85:e8:67:31:d5:5c:4f:55:6d:78:1c:22:5a:0c:f5:
                    43:05:79:55:e2:dd:a7:bb:db:c7:c4:ed:fe:1d:88:
                    40:0c:f4:4c:e0:16:64:eb:ed:c5:89:0b:6b:e7:40:
                    58:e0:15:29:84:a6:5a:8b:26:99:c5:1f:83:ba:75:
                    e0:33:31:61:61:09:0a:5e:da:1a:d2:1f:c5:36:35:
                    42:62:e4:33:a3:e6:aa:84:38:6f:c6:fb:9f:c9:6b:
                    83:68:7d:15:56:68:39:f3:fe:8d:cb:66:44:a0:57:
                    ec:6b:6a:d7:22:88:9f:e8:49:c4:83:a4:6b:e7:a1:
                    9f:61:15:0e:a3:3d:28:94:13:84:cd:6e:06:22:31:
                    1f:7d:18:fb:d4:54:28:77:17:8c:d7:53:6d:2e:f9:
                    74:8b:f1:c3:0a:e2:ce:e7:17:ad:f6:59:f3:cf:d3:
                    92:fe:41:b8:73:71:74:4b:cc:88:9e:8c:6f:7b:5d:
                    20:e4:b4:ef:36:5f:c6:d5:03:b5:07:b9:79:55:28:
                    fb:c7:ba:e3:0e:58:a9:69:f2:f0:3b:8f:be:d0:1e:
                    fe:e3:d0:c1:fa:ea:9f:54:fc:7d:00:82:26:83:88:
                    a0:66:58:5a:52:62:de:ae:b7:96:6c:8b:bb:e6:59:
                    41:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:52:5F:94:19:63:01:53:EA:29:5D:6A:74:0F:FF:F6:E6:D3:3A:78
            X509v3 Authority Key Identifier:
                keyid:59:0C:B9:21:D3:17:88:D4:53:7C:BF:5A:72:AC:B4:7A:7E:34:BA:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/0/590CB921D31788D4537CBF5A72ACB47A7E34BA34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/590CB921D31788D4537CBF5A72ACB47A7E34BA34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/0/323830343a6136343a3a2f33322d3334203d3e203532383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a64::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:48:66:7b:93:30:e2:73:cb:e4:e9:48:16:a7:c5:e5:99:22:
         77:73:13:74:51:c0:d6:ba:68:e6:6c:5f:45:df:5c:97:72:5c:
         23:46:d8:f3:2f:04:80:8a:36:93:89:0e:9d:de:7d:27:59:ad:
         82:1d:51:6a:93:1a:bb:00:49:d4:54:ea:14:89:80:05:d8:6f:
         37:e2:e9:3c:30:f4:78:ba:b3:0e:2c:b6:08:81:bf:e3:7b:e3:
         e4:b8:e7:20:f6:4c:29:a8:46:e7:d9:70:9d:6e:a6:57:74:b8:
         45:bc:fe:85:d1:ae:7a:d6:e4:01:4c:b3:4a:9a:08:c4:60:ff:
         5d:85:f9:9a:63:ad:a2:4f:f7:a6:fd:cd:9f:a7:3d:c1:29:cc:
         d0:ea:e4:ea:a6:96:e0:71:6e:01:cc:24:91:c9:fd:d2:7f:ee:
         d9:69:84:4d:a0:de:f9:39:1b:f7:58:6f:2c:8a:2d:ae:fb:24:
         2d:d9:67:fc:6a:9d:1b:4f:b8:5e:00:dd:2d:52:57:7d:23:d3:
         38:5f:da:42:fa:ef:47:67:eb:d3:99:ad:74:56:78:0d:79:17:
         2c:cd:07:11:f0:84:f9:5f:fd:aa:0c:2c:43:d5:c2:44:5b:97:
         9d:5f:9b:87:a7:83:b0:41:2d:e7:f2:05:e4:79:90:a8:a2:5f:
         e7:23:fb:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org