Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/tnF2HwQqQZKxzeuGVAo1PtvXvWhhiHJbz5rMnN1Ko9R/0/323830343a343263343a653030353a3a2f34382d3438203d3e20323637353234.roa
File:                     323830343a343263343a653030353a3a2f34382d3438203d3e20323637353234.roa (raw, json)
Hash identifier:          /xrtAZZy2MixkpHcefx11Yfx06KyjhyXSgFAiM2m8Wo=
Subject key identifier:   44:BB:D7:E8:E4:18:63:12:4A:EB:88:E6:F7:14:86:AF:D0:A3:50:F2
Certificate issuer:       /CN=5489051296CE799761D50A1125A05964C2356CDC
Certificate serial:       3443D0859912ADCAD47D511098BEF6D84EB1CE28
Authority key identifier: 54:89:05:12:96:CE:79:97:61:D5:0A:11:25:A0:59:64:C2:35:6C:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5489051296CE799761D50A1125A05964C2356CDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/tnF2HwQqQZKxzeuGVAo1PtvXvWhhiHJbz5rMnN1Ko9R/0/323830343a343263343a653030353a3a2f34382d3438203d3e20323637353234.roa
Signing time:             Tue 12 Oct 2021 02:00:01 +0000
ROA not before:           Tue 12 Oct 2021 01:55:01 +0000
ROA not after:            Tue 11 Oct 2022 02:00:01 +0000
asID:                     267524
IP address blocks:        2804:42c4:e005::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:43:d0:85:99:12:ad:ca:d4:7d:51:10:98:be:f6:d8:4e:b1:ce:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5489051296CE799761D50A1125A05964C2356CDC
        Validity
            Not Before: Oct 12 01:55:01 2021 GMT
            Not After : Oct 11 02:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8e:46:78:78:23:87:41:d2:ae:0d:f6:4e:54:
                    87:7f:63:7c:a1:db:be:d3:4e:07:d8:b7:96:6e:45:
                    98:c0:54:00:98:d2:3a:b4:bf:63:6f:2c:b4:0a:05:
                    41:2e:5c:33:5b:02:0d:f4:02:6c:27:b8:27:92:f4:
                    a7:89:5b:f8:fa:6a:ad:4e:a1:b1:4a:60:1a:17:57:
                    2b:10:e0:45:ec:be:9f:d1:29:1b:63:e2:ff:7f:ff:
                    fa:31:1d:07:8f:91:6f:d8:fb:1b:0b:08:03:c5:65:
                    43:a9:5e:16:84:18:f5:ba:ee:78:ab:97:d9:76:e0:
                    12:12:5a:10:a3:d9:3d:bf:c1:8b:10:0f:de:8b:1c:
                    ad:40:fe:80:2d:2f:05:b6:71:dd:68:06:38:c4:71:
                    fb:d9:e7:3a:88:11:de:ee:d6:6c:a6:42:a0:4e:3f:
                    85:0e:55:7b:98:45:d6:f6:a2:d4:c3:fb:04:13:65:
                    1f:0f:50:b2:78:e9:3e:b8:c5:b0:fa:e3:53:94:12:
                    92:ec:95:bc:39:13:e0:cd:7e:7d:11:0e:1f:6d:64:
                    6f:3f:d4:08:70:ec:01:40:24:d0:43:a2:80:e5:92:
                    32:82:fc:cb:3d:de:69:2d:d6:74:f0:3b:df:68:26:
                    69:2e:e8:63:ba:09:8b:13:33:ec:79:c8:0a:9d:7f:
                    52:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:BB:D7:E8:E4:18:63:12:4A:EB:88:E6:F7:14:86:AF:D0:A3:50:F2
            X509v3 Authority Key Identifier:
                keyid:54:89:05:12:96:CE:79:97:61:D5:0A:11:25:A0:59:64:C2:35:6C:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/tnF2HwQqQZKxzeuGVAo1PtvXvWhhiHJbz5rMnN1Ko9R/0/5489051296CE799761D50A1125A05964C2356CDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5489051296CE799761D50A1125A05964C2356CDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/tnF2HwQqQZKxzeuGVAo1PtvXvWhhiHJbz5rMnN1Ko9R/0/323830343a343263343a653030353a3a2f34382d3438203d3e20323637353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:42c4:e005::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:f1:78:fe:da:db:b6:f2:6d:3a:c4:e2:e2:52:7a:35:bf:f2:
         f7:6b:6a:24:ec:dc:eb:0d:0a:23:da:61:36:f6:43:34:b2:50:
         38:36:90:58:6f:cb:90:e6:f5:9b:33:3c:4e:15:aa:6a:ba:f9:
         78:ba:06:ba:e8:1d:3c:22:94:3e:15:38:22:50:26:0a:d3:af:
         da:83:11:95:2c:ce:89:b6:2a:5f:40:3a:99:ed:e0:36:64:9d:
         7b:03:2b:4c:92:a3:68:80:d5:f6:e9:99:9c:8e:3a:0d:94:e6:
         bc:8b:8d:fe:54:b8:d2:4b:ca:3e:20:a7:a7:89:f6:7b:b2:92:
         8d:38:c0:59:cc:50:5f:7c:a7:61:52:4a:83:99:79:b9:83:1b:
         5f:06:5e:3c:74:66:fa:ea:40:b6:14:83:02:38:9a:79:f7:40:
         59:a3:17:52:84:19:d6:bb:cc:b2:c4:1c:45:c2:a4:6f:a7:65:
         ed:00:e8:3a:26:4e:4a:5d:8f:f5:d6:38:0d:30:89:55:a9:02:
         7d:77:d7:7b:cc:b7:36:4a:46:be:74:2e:a1:54:ea:7e:d2:55:
         37:98:36:e8:d1:75:44:ad:d3:14:1d:19:cf:bc:0b:37:71:e7:
         a5:68:8b:99:80:50:ce:94:15:9a:f8:c5:90:4a:33:73:7e:ad:
         1f:b7:7f:1d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org