Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J1YQF8mpEir25pCLkU8nfGpqY1fdkro5sNYv4u7GHDZv/0/323830343a356232383a3a2f33322d3332203d3e20323638383232.roa
File:                     323830343a356232383a3a2f33322d3332203d3e20323638383232.roa (raw, json)
Hash identifier:          4IQlhAzIeXyPr0AvrtYdN87jNnOjpXnR6Bn4v5JQ6PI=
Subject key identifier:   02:14:D4:D3:3D:EF:67:97:DB:89:91:36:6B:AC:8D:A1:B4:27:D1:DF
Certificate issuer:       /CN=1A8B5BCCA3C0F6CD3F8FD230D0B5AEFF24AA0507
Certificate serial:       07F1F2059EDB7307E2A3E70119AD89044850D646
Authority key identifier: 1A:8B:5B:CC:A3:C0:F6:CD:3F:8F:D2:30:D0:B5:AE:FF:24:AA:05:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A8B5BCCA3C0F6CD3F8FD230D0B5AEFF24AA0507.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J1YQF8mpEir25pCLkU8nfGpqY1fdkro5sNYv4u7GHDZv/0/323830343a356232383a3a2f33322d3332203d3e20323638383232.roa
Signing time:             Thu 30 Dec 2021 11:21:39 +0000
ROA not before:           Thu 30 Dec 2021 11:16:39 +0000
ROA not after:            Thu 29 Dec 2022 11:21:39 +0000
asID:                     268822
IP address blocks:        2804:5b28::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f1:f2:05:9e:db:73:07:e2:a3:e7:01:19:ad:89:04:48:50:d6:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A8B5BCCA3C0F6CD3F8FD230D0B5AEFF24AA0507
        Validity
            Not Before: Dec 30 11:16:39 2021 GMT
            Not After : Dec 29 11:21:39 2022 GMT
        Subject: CN=0214D4D33DEF6797DB8991366BAC8DA1B427D1DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5d:64:a0:c5:07:a8:fa:67:e9:0f:92:f3:81:
                    aa:4d:bc:f0:77:24:c6:ad:39:2f:66:18:1f:df:bb:
                    03:c9:48:e1:1d:e0:d4:31:c0:00:9a:ca:e3:68:2e:
                    64:a1:d9:7a:95:e8:57:c1:8b:1d:ea:41:f5:76:64:
                    89:99:91:d6:9b:fb:d9:70:05:92:99:62:15:1c:c1:
                    86:73:78:c9:fc:29:05:90:7a:28:0e:6c:2d:18:58:
                    fa:a5:aa:e4:7e:98:31:32:9f:15:ac:f6:f1:e6:68:
                    f7:8a:76:23:37:e4:5c:78:fc:19:f6:33:58:f1:70:
                    4c:16:8e:4b:b1:0b:36:4f:1c:87:59:9d:e7:0d:66:
                    e7:75:5a:39:11:01:cd:bf:c1:30:76:5a:82:47:e0:
                    c1:6e:0c:e1:66:98:6d:80:af:b4:91:b2:ed:ae:9b:
                    ae:e4:ba:3f:ac:55:4f:cb:3c:63:db:b6:6e:2e:3c:
                    68:92:42:b6:27:74:20:71:b4:57:12:5b:7f:87:fd:
                    67:d8:af:27:0c:b3:c2:44:80:9d:22:89:35:f8:86:
                    40:74:89:92:7d:ed:7b:ed:2a:0e:e7:c1:8c:f7:26:
                    7f:b8:fb:0d:37:1d:18:dd:b4:f2:97:a1:ca:b0:bc:
                    ce:16:75:64:f4:48:89:61:21:91:2c:08:45:40:3b:
                    4c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:14:D4:D3:3D:EF:67:97:DB:89:91:36:6B:AC:8D:A1:B4:27:D1:DF
            X509v3 Authority Key Identifier:
                keyid:1A:8B:5B:CC:A3:C0:F6:CD:3F:8F:D2:30:D0:B5:AE:FF:24:AA:05:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J1YQF8mpEir25pCLkU8nfGpqY1fdkro5sNYv4u7GHDZv/0/1A8B5BCCA3C0F6CD3F8FD230D0B5AEFF24AA0507.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A8B5BCCA3C0F6CD3F8FD230D0B5AEFF24AA0507.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J1YQF8mpEir25pCLkU8nfGpqY1fdkro5sNYv4u7GHDZv/0/323830343a356232383a3a2f33322d3332203d3e20323638383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b28::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:1e:bf:f8:ce:79:e1:63:18:85:36:8b:e2:b0:f1:69:11:a2:
         be:5a:02:51:2b:fd:a8:df:4d:98:36:54:d3:4e:75:26:46:ac:
         be:1e:21:ea:90:23:44:44:c6:b0:ae:55:52:49:6b:f9:ae:aa:
         11:6a:ac:4f:42:6e:30:ba:bb:b4:19:c9:63:ca:0f:3b:56:d7:
         44:38:8c:af:03:14:fa:4c:ab:15:57:db:6b:28:86:4e:6d:77:
         cb:1e:b6:af:36:ee:d6:d4:b9:59:d0:8d:db:ed:e5:c0:e0:bf:
         9e:61:8b:e0:91:8a:95:13:8e:7b:e1:89:14:a2:11:70:9d:e2:
         0b:15:dc:ef:ed:da:33:4f:63:5c:33:56:39:d1:ed:78:ee:1f:
         9c:68:25:e9:81:4c:0a:85:f8:93:25:a4:19:7a:be:28:f7:11:
         05:fb:30:e7:e9:b0:2a:ac:fc:48:0e:ec:10:95:49:97:aa:67:
         f9:fc:e9:c3:3d:22:93:e5:af:3c:b0:53:c2:62:e7:f3:3b:b4:
         36:b1:b1:4f:de:49:b1:e3:08:00:ec:f4:97:77:40:31:1b:d0:
         62:42:e9:10:66:76:26:6a:a6:d0:07:f3:30:72:69:09:2a:84:
         90:4f:7b:6e:23:a8:f4:df:00:c6:ae:84:f1:0c:3e:3f:bd:ea:
         c3:c7:b1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org