Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/323830343a343465303a3a2f33322d3332203d3e203631353836.roa
File:                     323830343a343465303a3a2f33322d3332203d3e203631353836.roa (raw, json)
Hash identifier:          2fWJ9TEy/plzlJX8kNeWLY/SLFWDmYd9RtebNTwgNAM=
Subject key identifier:   A8:9E:A8:E2:1C:F9:78:AC:B2:69:7C:97:8E:67:69:7B:D8:46:49:88
Certificate issuer:       /CN=D0590692F7D6B1EE39B74477FF54E33A9668696D
Certificate serial:       5E7DE0AC7D267CEEF2A5C1651AB52D027EEB792B
Authority key identifier: D0:59:06:92:F7:D6:B1:EE:39:B7:44:77:FF:54:E3:3A:96:68:69:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0590692F7D6B1EE39B74477FF54E33A9668696D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/323830343a343465303a3a2f33322d3332203d3e203631353836.roa
Signing time:             Thu 05 Oct 2023 16:52:31 +0000
ROA not before:           Thu 05 Oct 2023 16:47:31 +0000
ROA not after:            Thu 03 Oct 2024 16:52:31 +0000
asID:                     61586
IP address blocks:        2804:44e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:7d:e0:ac:7d:26:7c:ee:f2:a5:c1:65:1a:b5:2d:02:7e:eb:79:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0590692F7D6B1EE39B74477FF54E33A9668696D
        Validity
            Not Before: Oct  5 16:47:31 2023 GMT
            Not After : Oct  3 16:52:31 2024 GMT
        Subject: CN=A89EA8E21CF978ACB2697C978E67697BD8464988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cc:d7:31:a9:f7:67:3d:d9:60:ca:5d:9b:dd:
                    46:b4:2e:1d:f4:f6:51:cb:4c:f1:7e:8c:e6:1a:8d:
                    da:b1:34:0c:88:25:85:78:0f:e5:ab:41:2d:f8:14:
                    9e:d2:6d:bb:88:dc:98:ba:fb:d9:e5:e1:ed:6f:f3:
                    9a:72:3c:46:b1:6d:16:d4:7f:1d:a8:e7:4e:89:58:
                    d1:7f:e9:c1:bd:71:a4:65:76:53:81:16:52:7f:6e:
                    a3:b9:0f:e7:39:8b:9f:aa:d0:77:86:25:d1:f8:d1:
                    e8:8b:7f:00:21:e9:f8:9f:29:8f:cb:b0:0e:05:7a:
                    86:41:9a:d6:a6:ba:f5:9b:60:10:13:2c:1a:cf:f5:
                    61:e8:8f:44:d2:46:12:40:a9:a3:50:67:1a:aa:54:
                    76:c8:5c:05:02:cc:41:f9:fb:ff:06:6f:7c:29:6c:
                    7b:10:33:e5:06:5c:53:38:c6:db:f4:c2:af:58:20:
                    d5:c0:99:ad:ad:a7:05:d1:39:09:5f:41:24:3c:88:
                    35:ad:8d:09:eb:00:14:03:e2:f6:c3:c5:85:e0:38:
                    c1:28:5b:f6:75:ea:91:6a:cf:a3:57:1f:ba:65:60:
                    e5:d9:48:5d:bf:2a:c9:a5:4d:46:1c:ff:4b:76:f1:
                    63:9d:c9:38:81:51:85:d6:80:21:01:25:4e:e5:b7:
                    f9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:9E:A8:E2:1C:F9:78:AC:B2:69:7C:97:8E:67:69:7B:D8:46:49:88
            X509v3 Authority Key Identifier:
                keyid:D0:59:06:92:F7:D6:B1:EE:39:B7:44:77:FF:54:E3:3A:96:68:69:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/D0590692F7D6B1EE39B74477FF54E33A9668696D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0590692F7D6B1EE39B74477FF54E33A9668696D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/323830343a343465303a3a2f33322d3332203d3e203631353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:44e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:d4:30:c1:ca:34:48:e3:1a:7d:04:ad:bb:5a:58:88:3a:0a:
         f8:75:cd:fd:a8:97:ed:5b:26:e8:e6:31:de:03:c4:41:99:90:
         5f:48:76:03:ad:a3:21:0e:41:3c:7f:fd:ab:6a:95:bb:69:30:
         de:18:4e:64:bd:d2:d7:4a:11:b8:89:2e:59:3b:95:05:be:78:
         d0:57:f7:c3:62:bc:2f:9e:57:e4:16:33:72:2a:ca:17:8b:0c:
         43:7d:21:7e:8b:38:f5:e4:dc:ef:ac:fa:a7:fd:a3:9c:2b:43:
         2f:29:a9:61:43:cb:7c:b3:bc:2f:65:42:69:15:77:a4:78:a0:
         62:5e:72:2e:8e:bf:c3:6f:e2:c6:68:22:4e:2a:fc:19:f4:28:
         d7:2b:03:0c:58:ad:17:10:a0:55:a8:34:7c:f9:60:98:d6:af:
         9f:98:ed:fb:bb:2e:7f:a0:b9:d8:80:bf:9d:6e:26:5a:10:e0:
         89:5c:86:fb:5e:0a:29:95:67:ed:37:39:2e:03:3f:1f:83:0c:
         bc:a9:66:cf:78:5b:93:cb:0c:71:22:f0:35:2b:af:d9:30:dc:
         0e:7a:02:0d:6e:ac:ed:6c:ba:0e:c7:27:a7:11:60:29:2b:98:
         91:63:75:a9:b3:83:75:96:69:64:91:3e:71:d4:ca:cd:f9:55:
         16:e3:db:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org