Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/323830343a313563633a343030303a3a2f33342d3334203d3e20323633343131.roa
File:                     323830343a313563633a343030303a3a2f33342d3334203d3e20323633343131.roa (raw, json)
Hash identifier:          UPPC8nx43UoF0mYZ/NkfumoveXThLTArbfzHwRmI+iA=
Subject key identifier:   58:A6:20:C0:9C:BD:EF:A1:E6:67:B5:7E:07:24:B9:8B:B8:2A:7F:52
Certificate issuer:       /CN=8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9
Certificate serial:       72AD8EA1110220CBF042F6E4055A7AADD2190749
Authority key identifier: 8B:D2:57:0B:5B:ED:55:7C:41:9B:EB:CE:A4:FB:95:AD:83:68:F7:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/323830343a313563633a343030303a3a2f33342d3334203d3e20323633343131.roa
Signing time:             Tue 30 Jan 2024 14:56:09 +0000
ROA not before:           Tue 30 Jan 2024 14:51:09 +0000
ROA not after:            Tue 28 Jan 2025 14:56:09 +0000
asID:                     263411
IP address blocks:        2804:15cc:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ad:8e:a1:11:02:20:cb:f0:42:f6:e4:05:5a:7a:ad:d2:19:07:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9
        Validity
            Not Before: Jan 30 14:51:09 2024 GMT
            Not After : Jan 28 14:56:09 2025 GMT
        Subject: CN=58A620C09CBDEFA1E667B57E0724B98BB82A7F52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:13:fe:ad:fe:55:ac:df:7e:a8:4d:a8:af:35:
                    be:51:81:9a:9d:f8:ce:7b:9e:a9:a6:8c:11:9a:3a:
                    c7:81:13:2c:48:01:74:33:68:c4:80:1d:b1:e3:c7:
                    72:1f:59:fb:bf:d3:53:24:74:6f:bd:5f:f4:17:ad:
                    35:dc:96:a8:f6:a6:c6:5c:40:31:b7:87:8d:df:ef:
                    6a:e6:be:17:e7:e3:a5:c0:0f:7b:6d:57:ac:c4:cc:
                    1b:23:8a:4c:75:4b:9a:c2:40:64:f8:b0:a3:ed:7c:
                    b1:f0:35:25:39:23:09:02:df:25:44:f8:49:21:2a:
                    91:33:ad:6d:7e:d3:e5:65:e4:29:06:78:be:7d:e2:
                    1b:a8:72:01:b0:e5:d9:09:29:7d:ef:7f:6f:8b:99:
                    4d:30:bd:06:01:c2:67:bd:dc:48:fb:83:bc:42:92:
                    0e:2d:62:54:9e:7d:a1:27:c6:42:7d:31:e9:b2:98:
                    27:87:3c:f1:78:66:c6:01:29:e3:be:cf:e7:63:b7:
                    16:c9:b6:49:8e:e9:3e:71:73:92:aa:42:04:71:19:
                    b6:84:b7:9c:33:3d:2c:f5:a2:f1:46:f5:fa:36:1c:
                    2c:4e:09:d5:f1:c4:28:68:cf:06:d9:63:47:02:c6:
                    08:86:65:c2:51:0b:43:98:09:71:36:53:1d:9a:f8:
                    69:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A6:20:C0:9C:BD:EF:A1:E6:67:B5:7E:07:24:B9:8B:B8:2A:7F:52
            X509v3 Authority Key Identifier:
                keyid:8B:D2:57:0B:5B:ED:55:7C:41:9B:EB:CE:A4:FB:95:AD:83:68:F7:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/323830343a313563633a343030303a3a2f33342d3334203d3e20323633343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:15cc:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8d:11:55:a8:f2:25:ab:c5:01:60:b3:48:da:c2:54:64:99:19:
         45:4d:26:c7:c0:1a:fa:7e:75:81:bd:64:4d:fb:59:0f:83:2b:
         aa:fc:72:d8:ee:39:82:ef:a0:54:af:0c:5f:bb:3e:09:ff:16:
         ff:67:fc:58:82:96:1d:62:40:6c:93:07:82:3b:17:9a:d7:6a:
         cc:65:bb:14:28:97:5e:7a:d6:3b:87:cf:b4:73:97:d5:3a:b9:
         29:7c:cc:5e:40:0f:99:c6:97:ea:6d:b5:7c:21:b8:c7:58:73:
         94:41:96:b6:59:d0:1d:47:51:00:8c:97:a4:80:18:94:89:75:
         7f:48:81:8e:35:40:be:2a:85:0d:19:d6:4d:b4:db:d8:5a:3b:
         f0:f8:9c:50:f0:43:2c:65:fd:e2:90:74:3b:ab:d8:4f:5f:a8:
         80:f7:d2:c1:67:fc:25:94:c3:cd:44:c1:0c:d3:4b:40:91:ed:
         45:3b:f2:f3:04:71:9e:96:c9:7b:8e:7d:18:e7:5b:a7:41:8f:
         05:4e:bf:3b:ae:33:38:c4:0c:72:db:cb:32:f0:12:8e:51:d4:
         cc:cb:ed:ab:93:b4:41:c3:74:23:0f:ee:82:6c:97:61:43:07:
         8c:49:4b:ee:c6:3c:d8:ce:a9:3d:dc:e0:4f:cc:98:08:2c:c9:
         35:5a:db:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org