Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/323830343a343239383a3430303a3a2f33382d3338203d3e20323637353131.roa
File:                     323830343a343239383a3430303a3a2f33382d3338203d3e20323637353131.roa (raw, json)
Hash identifier:          +lmP+m8iygk4jS4tpF2mbJRBJZfvq6RUu/ZortsGExU=
Subject key identifier:   2F:76:FF:A3:DF:22:8E:2F:21:9B:68:A6:20:E9:3E:6A:B9:24:C5:FC
Certificate issuer:       /CN=58EB51309446697469911D6A209F194B8F572048
Certificate serial:       7E0EC712494913B22A9465982586F2845C9EA6E1
Authority key identifier: 58:EB:51:30:94:46:69:74:69:91:1D:6A:20:9F:19:4B:8F:57:20:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/58EB51309446697469911D6A209F194B8F572048.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/323830343a343239383a3430303a3a2f33382d3338203d3e20323637353131.roa
Signing time:             Mon 15 Jan 2024 14:35:30 +0000
ROA not before:           Mon 15 Jan 2024 14:30:30 +0000
ROA not after:            Mon 13 Jan 2025 14:35:30 +0000
asID:                     267511
IP address blocks:        2804:4298:400::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:0e:c7:12:49:49:13:b2:2a:94:65:98:25:86:f2:84:5c:9e:a6:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58EB51309446697469911D6A209F194B8F572048
        Validity
            Not Before: Jan 15 14:30:30 2024 GMT
            Not After : Jan 13 14:35:30 2025 GMT
        Subject: CN=2F76FFA3DF228E2F219B68A620E93E6AB924C5FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fe:6e:d4:c7:ff:e1:ac:60:e7:5b:a1:6f:df:
                    ba:65:1d:64:c8:c1:0e:76:07:21:22:d2:5b:57:48:
                    fa:35:2c:20:8f:4e:da:73:41:ba:98:d1:48:a8:84:
                    c1:38:04:c5:8f:bc:6a:86:26:cd:50:27:0b:85:b0:
                    62:e7:0d:22:54:28:b8:b3:88:bd:35:45:c5:ed:83:
                    71:1d:93:67:e2:64:2c:1e:b4:91:89:a6:45:80:a8:
                    f5:cd:98:25:af:3a:7d:ce:67:cc:c4:4a:d5:0b:e9:
                    4b:94:03:99:9e:bb:22:bb:70:da:cf:5c:b3:8c:d6:
                    c3:31:78:9c:9e:17:b8:e7:bb:05:f5:c2:2e:c9:6c:
                    99:dc:4a:95:28:1a:5b:2e:92:ab:51:4f:03:af:6f:
                    ea:c1:24:24:df:ab:99:69:c8:63:d1:cb:81:b7:10:
                    f8:5c:7e:18:a4:a5:d9:1c:a0:42:01:0e:ee:c5:9e:
                    94:66:7a:2e:55:9c:fb:08:c3:4a:c9:1c:25:ab:c0:
                    d0:35:d8:93:94:c1:a7:47:7b:4a:7b:c1:3b:97:f2:
                    21:72:0b:d8:31:b6:27:cd:c6:e3:8d:ff:8a:e9:d7:
                    b2:d7:ea:05:94:f5:64:e2:28:6d:d0:95:8d:dc:99:
                    9a:a6:1f:c9:d7:90:4b:44:77:0b:00:37:dc:e4:72:
                    58:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:76:FF:A3:DF:22:8E:2F:21:9B:68:A6:20:E9:3E:6A:B9:24:C5:FC
            X509v3 Authority Key Identifier:
                keyid:58:EB:51:30:94:46:69:74:69:91:1D:6A:20:9F:19:4B:8F:57:20:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/58EB51309446697469911D6A209F194B8F572048.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/58EB51309446697469911D6A209F194B8F572048.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/323830343a343239383a3430303a3a2f33382d3338203d3e20323637353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4298:400::/38

    Signature Algorithm: sha256WithRSAEncryption
         42:8b:6c:a8:9b:26:6a:e5:5d:38:70:e2:ab:59:9f:eb:6d:d2:
         0c:54:52:15:53:2f:5a:72:22:8a:56:32:b6:f9:11:62:05:2f:
         1b:f0:5b:44:51:d4:f1:32:a9:5a:82:36:a2:6e:41:e1:02:40:
         64:0a:91:fb:f8:0d:96:c9:3d:73:77:9c:77:86:44:84:0e:4f:
         cd:c2:9d:5b:86:e6:c0:fe:dd:10:a0:07:73:6d:d6:d4:e7:6a:
         fe:4c:ee:cc:c4:66:f9:31:7c:f2:34:e6:4a:1f:68:dc:98:a5:
         21:b6:64:20:48:45:47:76:d4:0e:fc:72:e1:06:fc:07:2b:38:
         ab:49:d8:2e:98:c8:db:8a:39:aa:e8:ca:53:6d:ec:ab:8c:74:
         e5:08:2b:ed:8b:73:6b:01:c2:40:3b:4a:f6:95:d8:d8:90:b2:
         d6:c3:c3:f2:7b:af:0e:3b:1c:4e:0f:00:8f:94:82:b5:03:74:
         ee:c0:29:09:01:b7:7a:17:80:92:ec:92:fb:6e:87:d4:c7:ff:
         00:bb:6c:11:17:85:56:14:75:83:44:13:b6:14:3c:d7:96:34:
         81:a0:f2:30:ca:5c:97:f4:65:99:a8:7a:a9:b1:b1:af:3c:11:
         db:b3:9f:18:05:3d:1b:bf:66:ba:77:df:3d:aa:5a:11:4a:2f:
         bc:c5:5d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:02 2024 by rpki-client on console-ams.rpki-client.org