Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J1YQF8mpEir25pCLkU8nfGpqY1fdkro5sNYv4u7GHDZv/0/323830343a356232383a3a2f33322d313238203d3e20323638383232.roa
File:                     323830343a356232383a3a2f33322d313238203d3e20323638383232.roa (raw, json)
Hash identifier:          2sxO3oLTpfbEP3aG7B+HXH6GV353WL/GeJwWcMc67Ow=
Subject key identifier:   70:53:14:29:A1:F6:95:4C:01:34:A5:1C:BA:CD:C5:C1:FD:93:F5:1C
Certificate issuer:       /CN=DFE7F74B9B7F295D740ABA91E7106F6A68F59899
Certificate serial:       5D8294F8A4619BAA180FAA0F43E6E1270ECBACCE
Authority key identifier: DF:E7:F7:4B:9B:7F:29:5D:74:0A:BA:91:E7:10:6F:6A:68:F5:98:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFE7F74B9B7F295D740ABA91E7106F6A68F59899.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J1YQF8mpEir25pCLkU8nfGpqY1fdkro5sNYv4u7GHDZv/0/323830343a356232383a3a2f33322d313238203d3e20323638383232.roa
Signing time:             Fri 31 Mar 2023 19:57:15 +0000
ROA not before:           Fri 31 Mar 2023 19:52:15 +0000
ROA not after:            Fri 29 Mar 2024 19:57:15 +0000
asID:                     268822
IP address blocks:        2804:5b28::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:82:94:f8:a4:61:9b:aa:18:0f:aa:0f:43:e6:e1:27:0e:cb:ac:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFE7F74B9B7F295D740ABA91E7106F6A68F59899
        Validity
            Not Before: Mar 31 19:52:15 2023 GMT
            Not After : Mar 29 19:57:15 2024 GMT
        Subject: CN=70531429A1F6954C0134A51CBACDC5C1FD93F51C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:2f:68:b0:4c:30:fa:c6:bf:96:58:6d:e2:1f:
                    f0:f6:d6:8d:93:29:72:1a:15:e7:b3:8f:34:eb:81:
                    ae:8d:e3:b3:07:14:75:b6:80:75:c4:40:d5:8f:87:
                    97:6f:5f:81:0b:cf:89:8b:af:fc:85:57:73:29:1c:
                    a0:fc:cc:fc:6a:f2:2d:83:64:b5:8e:16:b4:80:4e:
                    91:6d:7a:f7:34:87:8b:98:e8:c3:d1:09:49:03:a6:
                    b6:91:ea:01:bf:30:f7:f9:14:be:bf:b1:7f:17:50:
                    ee:a5:1b:81:db:c6:58:de:8f:80:a8:4b:ac:38:80:
                    45:08:2d:eb:e0:9b:26:3c:70:4d:96:34:76:1b:a8:
                    39:2f:5d:fd:a7:25:0a:d8:c2:9b:90:6a:74:0f:e1:
                    66:5a:a4:5c:ff:a3:9a:9e:ab:89:bc:78:c8:ef:dc:
                    c2:6b:b4:73:f9:e8:8b:6f:31:58:68:03:df:5b:01:
                    68:59:29:4d:c7:64:cc:ee:cd:9b:22:08:19:d4:72:
                    fd:44:95:3b:aa:79:0a:99:5d:cb:67:9b:90:a0:d5:
                    8f:9d:b9:e3:39:e1:bb:14:23:f0:f5:7c:21:a1:8f:
                    74:a2:fe:a4:6f:69:9d:a6:3c:2d:c9:c2:53:f9:6b:
                    97:b8:87:ec:66:01:af:3a:0a:54:2f:93:e3:1c:bd:
                    64:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:53:14:29:A1:F6:95:4C:01:34:A5:1C:BA:CD:C5:C1:FD:93:F5:1C
            X509v3 Authority Key Identifier:
                keyid:DF:E7:F7:4B:9B:7F:29:5D:74:0A:BA:91:E7:10:6F:6A:68:F5:98:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J1YQF8mpEir25pCLkU8nfGpqY1fdkro5sNYv4u7GHDZv/0/DFE7F74B9B7F295D740ABA91E7106F6A68F59899.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFE7F74B9B7F295D740ABA91E7106F6A68F59899.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J1YQF8mpEir25pCLkU8nfGpqY1fdkro5sNYv4u7GHDZv/0/323830343a356232383a3a2f33322d313238203d3e20323638383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b28::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:69:fd:68:82:c5:28:d1:5b:f9:65:36:48:46:3b:48:77:28:
         16:43:2f:dc:30:32:fc:b7:8b:4b:6d:94:a6:2b:78:1f:89:44:
         d5:43:bc:ae:73:95:2c:b7:6f:bb:d4:48:93:27:50:55:1e:42:
         a0:98:c8:4c:b0:9c:b6:16:a0:15:ce:f3:77:8f:b9:85:62:cd:
         db:27:a8:93:96:dc:2a:1c:02:10:36:36:3f:05:4d:af:95:67:
         d2:e2:b8:e0:8f:f6:1d:1a:69:96:98:72:68:24:b1:aa:99:a8:
         f3:80:5b:e7:1a:8c:c0:e0:66:6f:eb:60:e3:7c:23:84:4c:5c:
         ad:51:3d:69:72:0a:fb:27:84:3b:c5:52:a4:fa:51:79:d7:4b:
         f8:79:50:a7:5c:7f:1f:08:43:68:03:1f:4c:d0:c5:82:0b:98:
         c1:1c:be:e3:ad:fb:68:d3:6d:d5:a9:40:ee:12:4e:4d:14:f9:
         3c:bc:d8:be:21:95:62:52:88:6b:37:14:0f:95:9b:d9:64:83:
         f3:fd:e9:d7:95:78:a4:80:a2:ff:23:f0:ad:c0:5d:90:2a:28:
         df:5b:81:6f:f1:6c:61:1d:e2:a8:9e:52:f1:43:29:f3:f2:70:
         df:d4:61:94:03:1d:3d:37:2a:1a:bc:42:90:64:ec:2e:b9:bb:
         7e:b2:31:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org