Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/qWu7cnEbXwe7MQuRVSorCfRVBBeQBeDHXvUaqaXvJB2/0/323830343a333035383a3a2f33322d3332203d3e203238323230.roa
File:                     323830343a333035383a3a2f33322d3332203d3e203238323230.roa (raw, json)
Hash identifier:          alJdyGIUytDXhibtiivZF2P2tOJsARGQjoan+fmsUr4=
Subject key identifier:   D3:24:F3:4B:27:CF:C2:63:2B:E5:6B:36:61:CD:8F:DA:B4:C0:8C:44
Certificate issuer:       /CN=49A342BBF74F7418B0528D1BF0992AB7F6329760
Certificate serial:       0CC4DC73BB5F928CCE545CB0FE7F973604BAF315
Authority key identifier: 49:A3:42:BB:F7:4F:74:18:B0:52:8D:1B:F0:99:2A:B7:F6:32:97:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49A342BBF74F7418B0528D1BF0992AB7F6329760.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/qWu7cnEbXwe7MQuRVSorCfRVBBeQBeDHXvUaqaXvJB2/0/323830343a333035383a3a2f33322d3332203d3e203238323230.roa
Signing time:             Thu 06 Oct 2022 17:40:02 +0000
ROA not before:           Thu 06 Oct 2022 17:35:02 +0000
ROA not after:            Thu 05 Oct 2023 17:40:02 +0000
asID:                     28220
IP address blocks:        2804:3058::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:c4:dc:73:bb:5f:92:8c:ce:54:5c:b0:fe:7f:97:36:04:ba:f3:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49A342BBF74F7418B0528D1BF0992AB7F6329760
        Validity
            Not Before: Oct  6 17:35:02 2022 GMT
            Not After : Oct  5 17:40:02 2023 GMT
        Subject: CN=D324F34B27CFC2632BE56B3661CD8FDAB4C08C44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e2:d5:1a:ac:b6:7c:24:d2:7c:55:2e:22:97:
                    32:74:69:e4:a3:b1:50:0d:65:b6:27:e5:da:55:da:
                    4b:0b:b3:4c:74:54:f7:34:df:63:f7:b2:9a:9f:be:
                    4f:4c:6b:0d:34:07:86:44:6c:29:f4:78:a0:9a:2c:
                    27:36:5a:ad:8f:b7:a2:07:f4:32:03:d7:e6:c9:39:
                    fd:6e:18:73:36:24:4b:38:33:41:fb:c7:a2:d4:85:
                    53:c8:2a:bf:4a:3f:5c:28:2e:a8:d6:2e:a1:cd:ab:
                    3e:af:da:ba:a7:8d:b5:49:cf:4f:14:68:8d:97:13:
                    0e:4c:64:2e:5c:2e:fd:ee:92:31:5c:e0:84:47:0e:
                    dc:48:7f:e3:39:2b:b2:13:8e:48:d4:1f:12:88:98:
                    93:73:b5:32:33:33:94:22:d5:d5:8c:eb:d0:81:3d:
                    7a:87:e0:81:06:94:e3:0d:ba:e2:80:88:e8:8c:2c:
                    9f:bc:51:e5:96:18:86:a7:b3:e7:fb:ea:80:b9:84:
                    fc:bb:b7:aa:0b:8e:8a:90:46:97:0c:06:b6:d8:74:
                    86:07:c2:a5:d1:a3:56:51:55:ca:5e:0e:d3:64:5b:
                    cb:29:dd:65:81:55:a0:3f:c8:df:4a:28:c3:63:9d:
                    e5:60:64:f2:09:9d:dc:1a:eb:c5:e1:e6:f4:89:1f:
                    11:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:24:F3:4B:27:CF:C2:63:2B:E5:6B:36:61:CD:8F:DA:B4:C0:8C:44
            X509v3 Authority Key Identifier:
                keyid:49:A3:42:BB:F7:4F:74:18:B0:52:8D:1B:F0:99:2A:B7:F6:32:97:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/qWu7cnEbXwe7MQuRVSorCfRVBBeQBeDHXvUaqaXvJB2/0/49A342BBF74F7418B0528D1BF0992AB7F6329760.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49A342BBF74F7418B0528D1BF0992AB7F6329760.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/qWu7cnEbXwe7MQuRVSorCfRVBBeQBeDHXvUaqaXvJB2/0/323830343a333035383a3a2f33322d3332203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3058::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:4c:cc:e9:3f:58:dd:13:3f:d8:0f:74:d3:c3:ef:41:8c:94:
         83:ec:0e:51:a9:a6:db:06:49:b6:f8:c5:a9:6e:16:3a:25:40:
         27:a8:18:cc:b1:9b:b6:2a:a7:49:45:a9:79:ef:14:9e:d2:3f:
         03:f5:d5:5d:2b:b0:96:9e:e6:40:17:16:a6:d8:46:e8:1d:47:
         19:5e:4a:7d:10:b7:8c:d7:49:a8:25:4f:5b:d2:6e:21:b8:82:
         47:8b:5e:9a:5d:13:3d:b4:4f:24:17:e5:76:21:04:5b:13:57:
         c1:ef:fc:59:ce:9e:72:18:f5:fc:cd:c4:33:f4:41:ab:ad:3e:
         2a:72:3d:30:22:15:34:0d:74:4e:53:f8:30:f3:ad:ba:98:5e:
         f6:05:a7:ac:63:9a:f5:28:a1:06:99:ab:e4:1e:9f:eb:ae:51:
         38:44:a5:eb:be:b1:7c:b7:a9:44:15:31:4e:d8:5e:f1:cb:28:
         bd:f0:06:f3:47:e0:92:ca:3c:d5:04:40:7a:90:18:c9:5a:91:
         74:cb:9a:39:ce:a7:66:d8:28:16:62:65:9b:83:d8:f6:23:ea:
         10:c9:67:48:b4:1b:a2:a2:20:7b:04:c7:e1:a7:65:57:04:56:
         74:5d:c8:c0:fd:90:76:2a:c1:f4:73:ec:6c:0a:08:ab:66:fb:
         f0:ea:dd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org