Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/323830343a353139383a3a2f33322d313238203d3e20323638343634.roa
File:                     323830343a353139383a3a2f33322d313238203d3e20323638343634.roa (raw, json)
Hash identifier:          nsiKcQEp2mLEsm+7DadPzF8arVfVpRhlPqtBvn0OsJQ=
Subject key identifier:   2D:68:7B:3C:7F:75:1F:46:CC:9B:BD:23:14:96:F6:96:FC:38:5F:63
Certificate issuer:       /CN=3031188AB6BEC48612DEFA14DBF67C31676B0E40
Certificate serial:       5D0CB4FB966B934CBFE6D912C8D74F58FB65D901
Authority key identifier: 30:31:18:8A:B6:BE:C4:86:12:DE:FA:14:DB:F6:7C:31:67:6B:0E:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3031188AB6BEC48612DEFA14DBF67C31676B0E40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/323830343a353139383a3a2f33322d313238203d3e20323638343634.roa
Signing time:             Sat 17 Feb 2024 06:23:53 +0000
ROA not before:           Sat 17 Feb 2024 06:18:53 +0000
ROA not after:            Sat 15 Feb 2025 06:23:53 +0000
asID:                     268464
IP address blocks:        2804:5198::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:0c:b4:fb:96:6b:93:4c:bf:e6:d9:12:c8:d7:4f:58:fb:65:d9:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3031188AB6BEC48612DEFA14DBF67C31676B0E40
        Validity
            Not Before: Feb 17 06:18:53 2024 GMT
            Not After : Feb 15 06:23:53 2025 GMT
        Subject: CN=2D687B3C7F751F46CC9BBD231496F696FC385F63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:29:52:1b:2b:35:56:39:ef:15:cd:94:bd:2d:
                    38:2a:3b:f5:cb:a6:7a:95:47:21:77:4c:8c:29:03:
                    3a:32:a6:89:74:0f:dd:cb:be:b4:9a:de:e7:71:52:
                    b0:91:bd:68:6e:07:de:70:2c:97:c6:06:95:64:16:
                    4c:66:a7:de:98:6c:d7:60:2e:4b:5c:a2:5f:7f:8f:
                    0b:6e:13:08:37:e8:9c:ed:ce:57:d1:be:56:82:14:
                    55:ef:a2:14:df:20:86:e6:e3:84:a1:0b:31:50:44:
                    dc:63:80:da:e8:82:1f:47:48:0f:21:2c:2c:79:39:
                    d3:cf:98:a5:f1:1d:9e:01:c5:12:2f:b3:88:7d:fd:
                    66:e1:15:ce:c6:17:0d:8b:76:c7:78:bf:2a:a5:39:
                    15:0d:02:e4:95:ca:75:8a:b1:91:3d:58:a5:27:c9:
                    8e:e6:dd:aa:1f:f9:65:c7:47:5b:c3:08:2a:7e:93:
                    9b:9a:30:35:4c:9d:5b:5c:12:87:be:1a:b5:f7:bd:
                    59:7a:5a:6d:81:7f:96:1f:66:5b:43:66:0d:85:33:
                    c7:f8:eb:5b:4b:d4:b9:41:7f:c6:31:f2:c7:04:1f:
                    de:7c:57:f0:60:91:48:97:34:11:11:3b:14:48:fd:
                    e4:42:0e:fb:50:f0:bf:69:75:a6:7a:85:f7:5c:00:
                    72:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:68:7B:3C:7F:75:1F:46:CC:9B:BD:23:14:96:F6:96:FC:38:5F:63
            X509v3 Authority Key Identifier:
                keyid:30:31:18:8A:B6:BE:C4:86:12:DE:FA:14:DB:F6:7C:31:67:6B:0E:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/3031188AB6BEC48612DEFA14DBF67C31676B0E40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3031188AB6BEC48612DEFA14DBF67C31676B0E40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/323830343a353139383a3a2f33322d313238203d3e20323638343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5198::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:b2:2f:95:8c:3e:21:67:08:cc:3a:d8:bf:70:7f:2d:0e:75:
         37:5f:86:5c:14:48:f4:35:69:59:a4:9e:49:d0:f3:a5:22:d3:
         b8:81:37:ff:dd:e2:c1:8b:d1:04:47:f7:30:a9:5a:69:ff:2c:
         3f:7d:24:71:06:f0:27:a9:a0:10:5a:d6:36:a3:34:a3:ed:bf:
         65:20:ce:a2:ef:65:b4:87:df:63:8a:93:66:35:93:19:be:c7:
         2b:6a:4f:ca:63:df:27:54:5b:8b:d8:83:5a:6e:8d:53:fd:d1:
         24:9c:b0:7b:20:bc:a0:3d:d8:dc:34:b3:22:df:7a:8a:40:06:
         27:98:9b:a4:b6:b7:ff:69:30:2b:31:c2:92:26:40:58:03:e7:
         9f:fb:f4:79:75:e7:67:d5:9f:d6:92:b1:09:9a:bd:48:4d:05:
         b5:e8:0c:4d:6f:9e:0c:48:37:57:b2:a8:bb:e6:c4:01:5d:36:
         ff:f4:e3:32:04:f4:18:f5:0d:00:5e:b2:aa:4a:9d:92:19:f9:
         ef:d0:db:00:0b:4b:52:42:4b:b0:5f:60:b5:79:ae:53:f6:bf:
         12:cf:0c:c0:e0:5a:56:1c:52:07:22:5b:d1:19:c1:86:73:76:
         67:9d:d2:e0:9e:97:64:f9:5d:c7:f7:10:e2:33:3c:3b:09:a9:
         4d:0e:75:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org