Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/0/323830343a6466343a3a2f33332d3333203d3e203532353331.roa
File:                     323830343a6466343a3a2f33332d3333203d3e203532353331.roa (raw, json)
Hash identifier:          b79++4eUE5DRPCiLjMXLVHSTe1lJUxmK1SWhjlqX2c0=
Subject key identifier:   AC:13:7B:B6:04:D9:BD:EF:3D:63:A7:4C:64:4A:31:8B:00:A9:94:F4
Certificate issuer:       /CN=1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6
Certificate serial:       6007DE70757F815A719EAC5B30E4E4D6A5A45821
Authority key identifier: 1F:70:DC:41:83:49:AC:E5:BE:FB:F0:07:29:BD:28:DD:4A:C2:5C:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/0/323830343a6466343a3a2f33332d3333203d3e203532353331.roa
Signing time:             Fri 08 Dec 2023 16:58:27 +0000
ROA not before:           Fri 08 Dec 2023 16:53:27 +0000
ROA not after:            Fri 06 Dec 2024 16:58:27 +0000
asID:                     52531
IP address blocks:        2804:df4::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:07:de:70:75:7f:81:5a:71:9e:ac:5b:30:e4:e4:d6:a5:a4:58:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6
        Validity
            Not Before: Dec  8 16:53:27 2023 GMT
            Not After : Dec  6 16:58:27 2024 GMT
        Subject: CN=AC137BB604D9BDEF3D63A74C644A318B00A994F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8a:4f:3c:73:a3:54:43:f2:28:fc:ca:58:cb:
                    36:84:96:f4:79:1c:b4:d2:43:fc:8d:df:41:53:12:
                    4d:16:08:13:be:4a:af:37:cb:f2:fa:00:8e:31:39:
                    fc:8b:68:b9:90:81:d2:4c:80:2a:f1:4c:45:ec:31:
                    4f:ac:29:53:ca:93:11:82:46:0c:42:19:4c:3e:27:
                    0d:c2:f8:2d:91:ee:0c:4a:a2:f2:a8:96:f4:53:b4:
                    48:f1:3c:82:1c:23:e9:59:e2:12:2a:0b:9f:e9:93:
                    ed:a9:71:0f:a4:5c:2c:9e:30:83:fb:df:c8:67:25:
                    c4:25:6d:90:d4:57:ee:09:2a:9c:f1:c1:f6:ed:70:
                    2b:c7:56:20:9d:99:9c:bd:6d:c4:5f:e0:e9:f2:7c:
                    22:35:f1:0d:d7:1b:51:cd:7f:69:67:c8:b6:ed:70:
                    1d:67:1e:0d:2d:61:38:87:9e:28:d9:20:b9:94:87:
                    90:6b:fd:3a:54:9a:78:d0:78:43:78:01:fe:a9:a3:
                    8b:d5:fd:9c:42:32:50:7b:73:52:23:e7:66:77:5b:
                    ac:fd:94:34:52:8b:fd:81:02:70:04:15:98:cc:c4:
                    78:75:0d:10:71:55:46:47:9c:6a:69:c1:51:b3:44:
                    1b:a2:79:9c:c8:1d:62:61:69:2c:2a:d9:a0:2a:74:
                    d2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:13:7B:B6:04:D9:BD:EF:3D:63:A7:4C:64:4A:31:8B:00:A9:94:F4
            X509v3 Authority Key Identifier:
                keyid:1F:70:DC:41:83:49:AC:E5:BE:FB:F0:07:29:BD:28:DD:4A:C2:5C:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/0/1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/0/323830343a6466343a3a2f33332d3333203d3e203532353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:df4::/33

    Signature Algorithm: sha256WithRSAEncryption
         c2:6d:3e:ea:f8:46:aa:c2:6f:84:12:d6:5e:72:6a:60:c0:c6:
         f1:71:82:41:51:1b:fc:5a:ee:2b:29:b6:a1:67:6f:10:40:1f:
         c7:78:7e:b2:a3:ff:ef:c0:9a:7c:02:e6:87:58:bb:f3:12:47:
         bf:b6:de:96:d6:c1:1b:b6:8e:10:32:09:8b:d1:44:fc:56:b6:
         22:88:64:88:6d:d4:ae:77:5a:ab:25:1f:a2:4e:92:c4:3f:83:
         47:3a:f0:25:d3:9b:d8:e5:38:57:10:f5:9e:bd:f1:e8:a8:8b:
         4f:09:6c:4c:73:92:62:3a:d7:7e:83:c9:ce:5c:a9:41:7c:68:
         56:f8:af:6a:2b:a2:6e:12:92:a0:77:d9:12:86:66:39:11:ee:
         d4:d2:b1:70:01:b2:47:d5:af:f6:57:5b:f8:6b:dc:bd:e0:5c:
         71:73:a3:aa:c0:18:7a:bf:98:c5:cf:49:09:19:6f:be:f1:c8:
         6f:fd:6a:e9:c7:eb:97:4a:73:62:dd:38:b5:3c:54:48:3b:0b:
         ce:ff:a0:3d:20:f2:38:5e:45:7e:05:58:f9:41:4c:d0:e1:28:
         74:7b:2c:99:c2:24:76:73:6c:e4:f4:07:72:bf:a0:3a:8f:0f:
         d0:8e:4a:42:af:87:74:bd:3e:0b:00:77:9c:9f:13:5e:02:ce:
         3b:4e:87:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org