Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/323830343a323938303a3a2f33322d313238203d3e203533313732.roa
File:                     323830343a323938303a3a2f33322d313238203d3e203533313732.roa (raw, json)
Hash identifier:          mmHUgrmCwaTn3EHv66UozwsPLMyrZLJVoMUsbSNZlg8=
Subject key identifier:   61:D9:FF:72:C9:25:D9:34:F7:32:49:19:3D:B9:48:E4:EA:12:62:1E
Certificate issuer:       /CN=65EAAE564E4409FEE94B16BABD0C211A8B235616
Certificate serial:       2219CC0EDDEC6CAB85C260630B852A80C4B79264
Authority key identifier: 65:EA:AE:56:4E:44:09:FE:E9:4B:16:BA:BD:0C:21:1A:8B:23:56:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65EAAE564E4409FEE94B16BABD0C211A8B235616.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/323830343a323938303a3a2f33322d313238203d3e203533313732.roa
Signing time:             Wed 26 Jul 2023 14:41:58 +0000
ROA not before:           Wed 26 Jul 2023 14:36:58 +0000
ROA not after:            Wed 24 Jul 2024 14:41:58 +0000
asID:                     53172
IP address blocks:        2804:2980::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:19:cc:0e:dd:ec:6c:ab:85:c2:60:63:0b:85:2a:80:c4:b7:92:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65EAAE564E4409FEE94B16BABD0C211A8B235616
        Validity
            Not Before: Jul 26 14:36:58 2023 GMT
            Not After : Jul 24 14:41:58 2024 GMT
        Subject: CN=61D9FF72C925D934F73249193DB948E4EA12621E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:cf:48:a4:d5:b2:81:a0:ce:3f:48:b9:bd:5d:
                    52:7a:78:b3:45:20:d4:1b:22:5a:c9:a0:5e:01:09:
                    5b:fc:3a:e8:c9:48:f9:0c:09:44:f9:8c:3e:76:f5:
                    fe:4d:ef:18:2c:01:e5:af:63:52:37:2f:08:23:92:
                    7c:15:fd:b3:3a:d7:45:ba:ec:ec:68:a3:1d:44:55:
                    df:c7:c3:cf:26:c7:51:bc:e0:0f:88:95:f3:d7:0e:
                    a9:f9:1c:35:57:17:5a:4c:ba:d0:ea:11:19:04:d4:
                    c8:24:29:d6:50:2a:38:a8:35:44:a5:64:ac:f9:ec:
                    b9:0b:8b:ed:b4:77:8a:21:72:8a:a1:73:c2:3f:e8:
                    ae:82:22:17:41:11:65:8f:5b:e4:38:8b:28:c5:0a:
                    81:eb:d0:b5:5e:9d:9f:3f:e4:e1:b3:ce:9e:60:4d:
                    e0:0c:5b:64:c6:52:76:df:1b:13:a5:e5:bf:e6:9d:
                    aa:8b:4e:21:6e:b7:28:37:a8:23:36:5c:cf:bb:e3:
                    06:e4:27:0c:cc:6a:c4:79:f2:43:c4:f9:4f:53:cc:
                    7f:13:d9:53:bc:69:96:66:6d:05:96:83:3b:81:84:
                    21:52:c7:3d:2b:68:0c:53:3c:33:8f:dd:fc:50:0c:
                    eb:9b:89:f2:85:23:29:a9:cb:65:62:a4:b6:16:d4:
                    3c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D9:FF:72:C9:25:D9:34:F7:32:49:19:3D:B9:48:E4:EA:12:62:1E
            X509v3 Authority Key Identifier:
                keyid:65:EA:AE:56:4E:44:09:FE:E9:4B:16:BA:BD:0C:21:1A:8B:23:56:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/65EAAE564E4409FEE94B16BABD0C211A8B235616.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65EAAE564E4409FEE94B16BABD0C211A8B235616.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/323830343a323938303a3a2f33322d313238203d3e203533313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2980::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:6f:77:7c:a1:76:8d:fd:1a:47:05:60:f8:06:18:ac:f0:80:
         2a:be:98:bf:73:34:7b:70:c6:e4:f8:39:de:eb:4a:65:68:e6:
         13:97:b6:3f:d4:99:10:dc:17:01:bf:a3:e8:bc:4c:fa:27:93:
         bb:23:57:bb:44:62:b9:f0:2e:c5:57:c6:f2:08:2d:82:fc:81:
         3e:f9:f0:51:48:3b:3f:83:7e:1a:a1:14:c3:57:b4:16:99:a1:
         9b:22:ea:1e:43:75:28:2b:3a:66:7c:5c:be:dd:70:d8:b1:f0:
         89:3a:d5:89:71:a0:5d:7a:4b:74:af:ba:77:41:ee:c2:38:cc:
         97:74:f1:08:08:cc:9a:0f:fc:4e:12:ec:80:8a:4d:5b:63:bf:
         c2:d7:59:1f:d5:26:65:11:d5:73:66:08:14:47:ca:34:85:fe:
         63:0a:b5:32:54:0e:49:91:5a:9f:2f:36:b2:1d:56:9b:48:2e:
         27:c0:93:63:93:fe:37:87:67:e8:75:62:1a:e9:2e:6b:8b:15:
         d5:d5:a2:15:48:0b:e6:c1:f2:c2:0e:f2:d9:53:9f:df:14:51:
         38:45:d9:df:ad:d3:62:78:07:29:ed:0b:0a:5c:78:5e:cd:03:
         50:06:68:2a:3f:0f:cc:8e:61:2e:67:90:cb:2a:5d:1d:0c:1a:
         ed:1d:21:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org