Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/323830343a313333383a353a3a2f34382d3438203d3e20323633353232.roa
File:                     323830343a313333383a353a3a2f34382d3438203d3e20323633353232.roa (raw, json)
Hash identifier:          fU+pzgpXdORbO2WzIUsnX5okuiFyEBV5WdzApRiw8VE=
Subject key identifier:   38:AC:45:36:FF:41:7A:63:32:D5:7F:71:57:D4:60:69:EC:DA:13:8A
Certificate issuer:       /CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
Certificate serial:       435BAD80CA63962B1CD9C249C57109D103CEBA26
Authority key identifier: 6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/323830343a313333383a353a3a2f34382d3438203d3e20323633353232.roa
Signing time:             Thu 28 Dec 2023 17:10:00 +0000
ROA not before:           Thu 28 Dec 2023 17:05:00 +0000
ROA not after:            Thu 26 Dec 2024 17:10:00 +0000
asID:                     263522
IP address blocks:        2804:1338:5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:5b:ad:80:ca:63:96:2b:1c:d9:c2:49:c5:71:09:d1:03:ce:ba:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
        Validity
            Not Before: Dec 28 17:05:00 2023 GMT
            Not After : Dec 26 17:10:00 2024 GMT
        Subject: CN=38AC4536FF417A6332D57F7157D46069ECDA138A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:94:a5:5c:a8:13:ff:70:c6:7a:87:50:d8:4c:
                    06:63:5e:c7:f3:ae:cc:b3:57:c3:d2:a8:86:2b:1f:
                    0e:ee:83:28:f8:07:a0:a8:58:45:fc:89:c0:46:ef:
                    4a:63:47:21:ac:16:24:c9:8b:6b:5c:e5:bb:c8:85:
                    cf:20:85:54:17:9e:40:0e:e0:a6:b4:c7:8f:45:98:
                    31:fb:08:1d:9a:16:f2:ec:68:07:7c:58:7f:48:79:
                    f0:82:22:56:b7:94:1b:7f:51:93:51:f7:c0:96:d1:
                    aa:93:7f:83:80:c7:a5:f9:4f:47:55:fd:72:4a:95:
                    27:ca:4d:22:e7:e4:4b:a6:8f:27:b6:27:3b:c5:cd:
                    95:dc:2f:7d:53:1d:08:6a:a8:4d:2b:33:ca:36:94:
                    94:33:e1:76:01:f6:5c:61:3e:91:ce:f6:d6:32:77:
                    03:b8:6e:be:56:7f:4a:49:99:3e:0e:15:90:e2:d9:
                    ca:ea:ac:39:ce:e2:68:77:74:93:d8:d8:65:17:e6:
                    83:14:50:01:96:bc:9a:64:03:e6:36:c3:ee:51:0f:
                    c7:d3:4e:b8:4e:44:a7:d6:4c:8b:87:35:d6:6e:23:
                    b2:9f:d2:ac:cf:7d:cf:81:8f:5e:12:94:aa:8b:06:
                    8e:c8:0e:48:56:1e:56:b7:59:10:36:14:e3:36:bb:
                    a7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:AC:45:36:FF:41:7A:63:32:D5:7F:71:57:D4:60:69:EC:DA:13:8A
            X509v3 Authority Key Identifier:
                keyid:6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/323830343a313333383a353a3a2f34382d3438203d3e20323633353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1338:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:32:c1:a6:5b:4c:ec:51:e1:b2:04:20:c1:27:fd:0b:15:f1:
         8d:76:a7:6d:db:55:c6:ec:99:a7:65:cd:36:bc:bb:01:0d:fc:
         81:d8:2f:b3:9d:01:47:bd:46:5d:c8:ff:bf:a6:86:7d:42:13:
         2d:08:a1:3f:9e:cf:a8:4e:18:db:db:bc:70:8a:08:7e:bc:d5:
         7d:41:2b:e6:1f:6a:64:ff:31:0f:5f:40:08:82:41:65:1f:74:
         50:4a:68:e6:80:03:72:38:bf:cb:e0:7f:54:04:e7:a8:ad:e4:
         18:ec:f6:ad:2f:8b:47:5e:75:fa:ca:74:5e:3c:54:a6:1e:70:
         c4:50:22:ca:b2:56:e4:c6:18:37:64:5c:80:81:34:62:35:43:
         ee:51:2a:9c:77:30:84:ec:a1:9d:e3:03:0a:08:90:b0:5c:a1:
         98:20:90:90:ab:43:b3:e3:c1:db:14:96:3a:22:26:6d:00:5c:
         26:22:cb:9f:11:38:be:fc:16:ec:32:ca:12:7f:7d:d3:c8:44:
         24:3d:4f:63:dd:83:da:e3:a9:d1:85:8c:b9:37:45:db:7e:8d:
         a6:00:3c:d0:83:ab:8b:3a:6d:f5:84:9f:b0:88:f6:3d:a0:0d:
         81:3e:c0:75:d2:ca:0e:84:d0:ef:fc:21:63:38:1c:a0:e3:79:
         08:13:f7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:10 2024 by rpki-client on console-fra.rpki-client.org