Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/323830343a356363343a3a2f33332d3336203d3e20323638393239.roa
File:                     323830343a356363343a3a2f33332d3336203d3e20323638393239.roa (raw, json)
Hash identifier:          hTQ0lVw1NurOQwKzPLF6gS74w2Uw32XDsnI01jLFcjc=
Subject key identifier:   57:29:60:40:22:2A:19:E3:AF:65:F8:53:6F:32:89:45:C4:2F:B1:B6
Certificate issuer:       /CN=6567B8933DD6155850B7ED35B2E5AE75B6525A78
Certificate serial:       5B24A1FA3E8B90D022D42AAE322DAE392AD752C7
Authority key identifier: 65:67:B8:93:3D:D6:15:58:50:B7:ED:35:B2:E5:AE:75:B6:52:5A:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6567B8933DD6155850B7ED35B2E5AE75B6525A78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/323830343a356363343a3a2f33332d3336203d3e20323638393239.roa
Signing time:             Thu 27 Jul 2023 16:46:54 +0000
ROA not before:           Thu 27 Jul 2023 16:41:54 +0000
ROA not after:            Thu 25 Jul 2024 16:46:54 +0000
asID:                     268929
IP address blocks:        2804:5cc4::/33 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:24:a1:fa:3e:8b:90:d0:22:d4:2a:ae:32:2d:ae:39:2a:d7:52:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6567B8933DD6155850B7ED35B2E5AE75B6525A78
        Validity
            Not Before: Jul 27 16:41:54 2023 GMT
            Not After : Jul 25 16:46:54 2024 GMT
        Subject: CN=57296040222A19E3AF65F8536F328945C42FB1B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9a:83:b2:6a:7e:67:ca:11:c9:4f:0f:fc:e6:
                    02:b2:3e:18:fc:f8:8a:6e:14:5d:e1:da:e8:97:c0:
                    07:e6:6f:db:41:4c:d5:63:3a:1e:0f:3a:0a:86:b0:
                    12:2b:3b:7c:2f:75:30:1c:e3:97:16:0a:61:b4:25:
                    e0:51:43:5f:42:e5:f7:2e:cc:59:84:cd:09:1b:08:
                    27:40:98:8f:1c:7c:40:a6:0b:d4:c5:86:95:99:cb:
                    33:fd:7d:7f:cc:51:72:31:db:83:23:0f:8b:1e:d5:
                    7e:8c:a0:9b:d9:67:d6:5a:e0:61:97:2a:99:4e:ca:
                    89:4d:42:32:b3:65:13:e4:b9:0f:62:2e:68:37:e0:
                    e8:79:b7:2d:e4:95:84:43:d7:13:d7:f3:8d:d4:9d:
                    84:bb:2c:eb:20:5e:53:1d:3f:f7:6b:f5:6b:c1:6f:
                    62:97:9e:50:b8:8b:27:30:c6:38:60:94:ac:5a:38:
                    68:15:47:ea:72:9f:d0:86:9d:24:57:c6:67:9b:5f:
                    64:04:3f:05:da:9c:69:d0:a6:42:d1:a2:d6:09:69:
                    fb:bb:6f:31:d1:43:f4:29:e4:70:9d:bd:69:b1:4c:
                    d9:d3:80:33:bb:23:41:81:71:81:ea:b9:5b:33:b8:
                    21:29:b4:db:6c:da:ae:8a:cb:fb:ff:39:d0:3b:ca:
                    4e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:29:60:40:22:2A:19:E3:AF:65:F8:53:6F:32:89:45:C4:2F:B1:B6
            X509v3 Authority Key Identifier:
                keyid:65:67:B8:93:3D:D6:15:58:50:B7:ED:35:B2:E5:AE:75:B6:52:5A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/6567B8933DD6155850B7ED35B2E5AE75B6525A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6567B8933DD6155850B7ED35B2E5AE75B6525A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/323830343a356363343a3a2f33332d3336203d3e20323638393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5cc4::/33

    Signature Algorithm: sha256WithRSAEncryption
         0b:b9:50:1a:42:3e:33:50:e4:90:d9:70:12:40:1f:b8:b7:84:
         c7:56:d6:e5:8c:7e:1e:55:41:03:49:ae:13:c5:ac:d3:8e:68:
         99:5f:85:4f:43:84:56:04:f2:78:51:cc:7b:e0:1c:12:da:88:
         00:a4:b4:a7:6c:4f:17:cc:cf:c1:e8:cd:42:26:bb:ce:ab:8c:
         52:95:01:d3:e8:cc:d5:e2:33:e7:08:56:ef:26:0d:50:6d:3f:
         06:57:b5:c1:e4:6f:9a:ab:43:35:55:9b:fc:76:3a:24:3b:37:
         85:bf:29:88:27:fa:64:cf:81:b1:f2:4e:ea:f4:a5:25:32:cb:
         dc:56:ef:f2:ac:c5:6d:64:45:17:40:95:0d:99:14:3a:d0:f5:
         d2:ca:e8:48:50:dd:b0:cd:59:dc:73:40:97:12:9f:72:1c:8a:
         0d:fb:6b:ba:17:4e:d2:bc:e7:bd:09:88:15:4c:69:7b:b2:ee:
         b2:f9:8b:f7:0c:11:0f:37:b5:44:0b:46:ad:18:08:60:a7:1b:
         97:fb:87:38:7d:8f:f9:04:42:a8:69:8b:bc:60:56:24:eb:2d:
         d6:69:e6:5d:76:e8:c9:38:e0:21:fb:c1:62:56:5a:a7:e0:05:
         81:aa:99:4a:9f:23:1a:ef:7e:00:42:16:c7:c2:26:ba:0f:74:
         81:80:2c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org