Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/323830343a356239633a343230303a3a2f34302d3430203d3e20323638383538.roa
File:                     323830343a356239633a343230303a3a2f34302d3430203d3e20323638383538.roa (raw, json)
Hash identifier:          /GiWMhNJYCAXTBkrjNdYgRxUrJLbA+RuDmc51VElT70=
Subject key identifier:   22:61:5F:60:06:12:9B:D8:64:56:EA:AF:1B:DE:D9:65:E3:99:0D:0B
Certificate issuer:       /CN=C514D08EB668AD6D569B52F363DFFB0D6D5BB212
Certificate serial:       0CA01C75FEAED69A0625241888502F0EB4A84789
Authority key identifier: C5:14:D0:8E:B6:68:AD:6D:56:9B:52:F3:63:DF:FB:0D:6D:5B:B2:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C514D08EB668AD6D569B52F363DFFB0D6D5BB212.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/323830343a356239633a343230303a3a2f34302d3430203d3e20323638383538.roa
Signing time:             Tue 05 Mar 2024 20:10:30 +0000
ROA not before:           Tue 05 Mar 2024 20:05:30 +0000
ROA not after:            Tue 04 Mar 2025 20:10:30 +0000
asID:                     268858
IP address blocks:        2804:5b9c:4200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:a0:1c:75:fe:ae:d6:9a:06:25:24:18:88:50:2f:0e:b4:a8:47:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C514D08EB668AD6D569B52F363DFFB0D6D5BB212
        Validity
            Not Before: Mar  5 20:05:30 2024 GMT
            Not After : Mar  4 20:10:30 2025 GMT
        Subject: CN=22615F6006129BD86456EAAF1BDED965E3990D0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f0:26:7b:7f:1e:46:cf:a4:2d:d8:11:21:a9:
                    a1:9d:06:9d:cf:65:21:6a:b1:18:c6:b9:36:a9:85:
                    05:32:aa:09:16:6f:bd:90:ab:1e:a0:93:bb:fb:b5:
                    8f:81:3a:14:13:eb:2e:0f:0e:71:77:14:7d:76:b7:
                    39:02:3a:f2:ab:b9:6c:fc:e7:9f:8e:c7:d5:98:3d:
                    0b:2a:8d:56:0a:18:60:ac:b5:fb:ad:e0:53:45:4e:
                    34:e6:91:84:98:03:56:72:62:44:2b:79:41:8a:ed:
                    be:33:f9:0b:37:53:2e:95:e0:33:8c:9d:33:8f:33:
                    d5:cd:d4:7e:7d:36:38:52:4a:39:ca:5f:8e:5d:86:
                    56:13:8b:19:fc:5a:ef:c6:12:96:86:c2:6d:d7:82:
                    70:08:e2:31:c0:98:c1:52:34:0c:8f:7b:a0:0b:65:
                    79:41:ad:9d:69:5a:b6:a5:2d:0a:32:1c:b2:ee:c4:
                    a9:4b:a0:b1:76:a4:92:c7:da:5e:f8:50:e2:3f:6a:
                    08:99:cd:c0:84:41:81:f9:7e:b7:46:1f:34:89:e6:
                    47:47:11:60:dc:3d:9d:16:09:c8:07:05:ca:b7:24:
                    6b:f9:e7:34:f2:5e:20:cb:d2:11:e5:2b:66:8b:0c:
                    88:f7:b5:09:0b:53:43:eb:28:b9:48:a2:b6:14:ce:
                    29:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:61:5F:60:06:12:9B:D8:64:56:EA:AF:1B:DE:D9:65:E3:99:0D:0B
            X509v3 Authority Key Identifier:
                keyid:C5:14:D0:8E:B6:68:AD:6D:56:9B:52:F3:63:DF:FB:0D:6D:5B:B2:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/C514D08EB668AD6D569B52F363DFFB0D6D5BB212.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C514D08EB668AD6D569B52F363DFFB0D6D5BB212.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/323830343a356239633a343230303a3a2f34302d3430203d3e20323638383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b9c:4200::/40

    Signature Algorithm: sha256WithRSAEncryption
         29:69:85:68:18:69:38:cb:fd:4a:54:7b:5c:ee:a7:bc:73:f0:
         bb:c4:10:0f:03:03:93:f8:30:18:11:95:43:bc:d6:8d:21:7e:
         55:82:b2:44:93:71:94:7d:1b:e3:55:7f:2a:79:da:ce:b8:a2:
         44:1c:79:9a:e5:e3:51:ef:6e:d1:48:13:63:0c:ed:35:82:b8:
         36:9e:44:95:6e:bd:57:2d:62:f1:30:88:24:d8:50:b7:d5:60:
         c1:e9:79:d6:92:6f:8d:ef:fb:88:9e:6e:cc:6c:7b:9e:57:8d:
         bc:33:03:3a:f7:ea:06:ee:94:4a:c7:64:36:f0:09:fc:4b:ad:
         29:22:97:8e:ee:46:f5:b2:b9:64:ed:3c:d0:6c:f4:d7:11:01:
         b3:b0:1f:56:ef:9c:90:93:d3:50:c6:53:81:39:fd:ae:08:c8:
         93:94:ce:7a:16:6c:77:93:e8:ed:68:6d:7a:12:33:d9:4a:27:
         e4:01:a0:c6:44:ce:f2:77:f5:f0:13:b7:61:90:44:5a:1d:85:
         78:e3:50:b6:8d:f8:46:9c:9f:76:7d:f8:6f:eb:bc:3e:d1:03:
         c6:de:08:54:12:15:dc:d1:f8:93:54:d7:24:8d:3f:3a:86:23:
         e6:fa:aa:70:70:01:0e:96:72:41:6c:6e:0e:06:e2:95:8a:00:
         c7:50:31:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:10 2024 by rpki-client on console-fra.rpki-client.org