Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/0/323830343a363361303a383030303a3a2f33332d3333203d3e20323639333733.roa
File:                     323830343a363361303a383030303a3a2f33332d3333203d3e20323639333733.roa (raw, json)
Hash identifier:          bsEu34avZ88To9d2+fFTGbkRFxTDeD5Z+ClOP0i0hR4=
Subject key identifier:   C3:1C:3E:FC:13:AE:09:7B:95:B1:75:77:01:4C:9E:75:E0:C4:85:1F
Certificate issuer:       /CN=E57428CD781F4DD43EE8A9D9B65ED50D8FA05505
Certificate serial:       5985C4A6878259843A27705D619D33A8768925D3
Authority key identifier: E5:74:28:CD:78:1F:4D:D4:3E:E8:A9:D9:B6:5E:D5:0D:8F:A0:55:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E57428CD781F4DD43EE8A9D9B65ED50D8FA05505.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/0/323830343a363361303a383030303a3a2f33332d3333203d3e20323639333733.roa
Signing time:             Wed 31 May 2023 13:34:41 +0000
ROA not before:           Wed 31 May 2023 13:29:41 +0000
ROA not after:            Wed 29 May 2024 13:34:41 +0000
asID:                     269373
IP address blocks:        2804:63a0:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:85:c4:a6:87:82:59:84:3a:27:70:5d:61:9d:33:a8:76:89:25:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E57428CD781F4DD43EE8A9D9B65ED50D8FA05505
        Validity
            Not Before: May 31 13:29:41 2023 GMT
            Not After : May 29 13:34:41 2024 GMT
        Subject: CN=C31C3EFC13AE097B95B17577014C9E75E0C4851F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:05:f5:07:a6:42:cb:e2:a3:5b:91:dd:54:74:
                    74:ac:82:72:c3:db:63:5b:3a:4f:2e:cd:78:3b:e6:
                    7e:92:0c:c7:45:79:4c:36:6e:5c:b8:17:06:15:e8:
                    b3:a9:a4:37:02:05:d5:e9:c7:a3:7a:fe:da:7c:3f:
                    ef:7e:6f:c4:be:a1:c0:05:b2:e6:bc:21:79:8c:e9:
                    2a:f5:ea:41:4e:3c:23:44:e1:ec:df:2f:66:5b:0c:
                    0d:1c:bd:27:fe:6c:7b:f8:14:42:bc:55:17:a8:e0:
                    c4:c4:e5:6d:75:4e:d0:41:a6:cc:5c:69:7b:d1:87:
                    62:94:63:a0:5f:01:10:8e:ba:18:c1:cc:76:e1:ec:
                    b7:83:b9:21:91:19:e3:24:3a:4d:42:d1:1c:d4:af:
                    ba:08:99:0c:e9:7d:94:b2:4e:a9:c1:3f:e0:8d:f9:
                    94:56:e5:c2:e4:65:ce:96:ab:53:6a:da:16:72:8c:
                    df:93:0e:1e:e5:b2:d5:ac:a8:49:70:ed:c2:eb:69:
                    5f:f7:80:12:e0:bf:dc:19:3e:07:2f:ee:da:73:d7:
                    84:5d:b7:39:6b:8b:65:be:9f:ce:f0:4c:43:e5:4f:
                    e4:55:ee:f8:fb:f3:9e:34:ed:e8:96:44:95:ba:ad:
                    5f:a1:53:62:81:e6:5a:25:e2:4c:b5:69:eb:0c:76:
                    e9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:1C:3E:FC:13:AE:09:7B:95:B1:75:77:01:4C:9E:75:E0:C4:85:1F
            X509v3 Authority Key Identifier:
                keyid:E5:74:28:CD:78:1F:4D:D4:3E:E8:A9:D9:B6:5E:D5:0D:8F:A0:55:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/0/E57428CD781F4DD43EE8A9D9B65ED50D8FA05505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E57428CD781F4DD43EE8A9D9B65ED50D8FA05505.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/0/323830343a363361303a383030303a3a2f33332d3333203d3e20323639333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:63a0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         58:fc:6d:bf:45:0a:85:3b:3a:b7:bd:0f:42:36:e8:09:d8:46:
         b8:77:e7:09:64:b2:07:49:de:e7:e3:9f:b9:b3:64:e6:bc:07:
         44:8b:80:73:3c:51:ac:41:53:56:28:30:b8:44:88:97:3e:bc:
         33:c4:0d:86:e6:9c:75:6c:2d:1f:9c:7c:4e:f8:9c:69:6f:2d:
         1f:b5:01:bd:8a:4a:57:14:04:3b:27:81:48:a9:93:05:c6:3a:
         9b:ff:98:6b:f3:fe:44:c5:e1:8b:2f:ff:36:1f:2a:57:dc:ed:
         75:8d:04:3f:57:62:20:b9:dd:29:41:21:49:b9:fb:75:25:24:
         e8:c1:74:3b:a1:99:92:52:6f:b1:c0:92:3d:4b:8d:58:11:85:
         73:7a:eb:f7:1a:38:ce:72:06:72:9b:1f:21:4b:1c:4b:24:2a:
         36:c9:da:ca:70:8f:12:c9:b1:a4:b8:63:27:5e:d2:17:e1:44:
         c2:b8:7f:4f:99:b4:39:0e:eb:dd:45:c5:5f:56:10:61:9b:a0:
         e2:0d:10:71:41:d6:4f:13:25:43:35:6b:0c:e3:51:91:9f:31:
         a5:18:e1:6d:de:eb:05:30:29:a7:96:30:04:3b:49:00:2f:13:
         4a:c8:dd:7f:22:4d:67:da:69:eb:e4:e1:b2:05:a7:7a:a4:34:
         cd:f9:26:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org