Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/323830343a366535303a3a2f33322d313238203d3e20323730353838.roa
File:                     323830343a366535303a3a2f33322d313238203d3e20323730353838.roa (raw, json)
Hash identifier:          +tkLSka1OHRvJUmtuhpcflRRX+kbrHkNUl2qOX/S650=
Subject key identifier:   31:BE:90:36:76:92:A6:D8:B7:DA:B3:80:AC:A7:E0:17:21:B1:47:24
Certificate issuer:       /CN=158AEF27B3C63D34A7E29654EDFCAF891E750A77
Certificate serial:       115D2AF2A56991EBD95AB81555DF45548DD8CEC4
Authority key identifier: 15:8A:EF:27:B3:C6:3D:34:A7:E2:96:54:ED:FC:AF:89:1E:75:0A:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/158AEF27B3C63D34A7E29654EDFCAF891E750A77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/323830343a366535303a3a2f33322d313238203d3e20323730353838.roa
Signing time:             Fri 04 Aug 2023 03:41:42 +0000
ROA not before:           Fri 04 Aug 2023 03:36:42 +0000
ROA not after:            Fri 02 Aug 2024 03:41:42 +0000
asID:                     270588
IP address blocks:        2804:6e50::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:5d:2a:f2:a5:69:91:eb:d9:5a:b8:15:55:df:45:54:8d:d8:ce:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=158AEF27B3C63D34A7E29654EDFCAF891E750A77
        Validity
            Not Before: Aug  4 03:36:42 2023 GMT
            Not After : Aug  2 03:41:42 2024 GMT
        Subject: CN=31BE90367692A6D8B7DAB380ACA7E01721B14724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b1:74:e3:cc:47:5d:08:5a:3f:3b:db:62:f5:
                    02:f6:8d:16:ce:10:e7:cd:cd:4c:86:9f:e1:9d:5d:
                    7d:46:2f:4a:13:bf:1c:61:57:92:55:76:57:a3:e6:
                    b3:17:d6:b5:ab:28:d2:a0:41:c1:55:ae:f1:80:f0:
                    1b:2d:2a:88:a3:87:ef:42:81:4a:9d:0f:e3:6d:a6:
                    03:65:23:e5:50:f6:d6:e5:bf:19:67:44:52:80:8d:
                    a0:9f:0a:65:fb:38:b9:8c:a5:89:0c:ce:10:a0:13:
                    74:1c:47:78:35:4c:99:8b:82:e2:cb:9c:7a:c1:5d:
                    fb:49:b4:d0:2c:0c:01:38:14:97:7c:1f:98:09:c4:
                    f4:fb:0b:0d:78:15:de:ef:db:0c:02:cf:48:df:6f:
                    7f:99:54:4f:33:ad:37:3a:5e:b2:b8:06:b1:20:4d:
                    14:2c:da:e5:56:7d:a7:54:91:c9:ab:b8:0b:e3:63:
                    44:7c:b9:ec:a9:ff:e0:4e:21:b9:bd:d3:31:90:b5:
                    c9:9e:2b:72:49:d8:03:5c:fd:af:78:94:c3:8d:08:
                    74:97:59:75:ef:3c:a3:8b:f7:44:7a:0a:a7:2a:3a:
                    15:bb:38:e5:5a:d2:41:13:35:6d:d3:e5:dc:be:12:
                    a6:04:34:09:85:46:66:b0:cc:b0:8e:a3:5d:e1:8f:
                    a1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:BE:90:36:76:92:A6:D8:B7:DA:B3:80:AC:A7:E0:17:21:B1:47:24
            X509v3 Authority Key Identifier:
                keyid:15:8A:EF:27:B3:C6:3D:34:A7:E2:96:54:ED:FC:AF:89:1E:75:0A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/158AEF27B3C63D34A7E29654EDFCAF891E750A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/158AEF27B3C63D34A7E29654EDFCAF891E750A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/323830343a366535303a3a2f33322d313238203d3e20323730353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e50::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:84:fe:9b:fb:01:ad:28:bc:fd:1f:22:00:5d:e2:ce:b0:2a:
         73:da:f0:3b:6f:ec:c3:5f:fa:65:70:da:bd:6e:02:77:c0:2b:
         51:a6:46:59:ca:1d:6b:c6:5d:6d:1c:44:60:91:df:27:0d:af:
         bb:0a:2e:c9:53:cd:3b:2a:cc:3a:d3:f9:bd:9c:3a:a1:38:e4:
         f9:f5:22:09:af:99:2c:65:6c:b2:de:cc:35:63:0d:06:19:9b:
         53:3b:80:b2:93:5e:77:a6:2d:8b:81:74:d9:18:61:49:ae:4d:
         75:ce:7b:24:a8:1e:d8:c4:8a:64:c1:6f:48:2d:e7:31:42:74:
         36:fc:ba:9c:09:51:6d:25:c2:b8:35:45:e1:d4:92:75:aa:ba:
         7b:d3:08:9e:58:33:7b:cc:2f:d3:5c:a0:b4:2b:1b:94:db:a1:
         0e:bf:5e:14:b8:13:c6:5b:33:f6:d9:5e:7a:3d:e7:b7:53:5b:
         46:e1:b9:9d:28:c0:78:00:35:93:54:2e:61:eb:40:28:6a:26:
         ec:55:e1:d9:97:e0:ff:66:42:54:0d:15:7d:ce:7f:ab:86:fc:
         b8:33:7c:0b:57:a2:f1:6d:be:23:cf:41:43:c9:fa:56:1d:69:
         9d:d9:77:a9:ac:0a:15:43:31:e6:72:84:98:52:e6:79:87:2b:
         0c:52:6a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org