Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/323830343a316466633a363030303a3a2f33362d3336203d3e20323632373635.roa
File:                     323830343a316466633a363030303a3a2f33362d3336203d3e20323632373635.roa (raw, json)
Hash identifier:          rZy33+BMKYvByWOi765m6zWIxrIvfgBTV0V1CFitdZA=
Subject key identifier:   8E:37:D3:D9:FF:39:C5:D5:2C:04:A5:89:C7:7A:76:EB:BF:65:DE:9C
Certificate issuer:       /CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
Certificate serial:       411AF6F92E7A2E2198DC5E8214CBD46D8F149F92
Authority key identifier: 5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/323830343a316466633a363030303a3a2f33362d3336203d3e20323632373635.roa
Signing time:             Tue 20 Jun 2023 13:53:25 +0000
ROA not before:           Tue 20 Jun 2023 13:48:25 +0000
ROA not after:            Tue 18 Jun 2024 13:53:25 +0000
asID:                     262765
IP address blocks:        2804:1dfc:6000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:1a:f6:f9:2e:7a:2e:21:98:dc:5e:82:14:cb:d4:6d:8f:14:9f:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
        Validity
            Not Before: Jun 20 13:48:25 2023 GMT
            Not After : Jun 18 13:53:25 2024 GMT
        Subject: CN=8E37D3D9FF39C5D52C04A589C77A76EBBF65DE9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5b:d4:0a:e9:d1:34:36:29:47:37:6b:a0:ef:
                    98:52:74:65:5e:2b:a5:a1:95:3c:bb:42:0e:1d:47:
                    8c:89:39:34:ce:0f:0d:53:a0:05:ff:d3:9f:0c:bb:
                    38:f8:21:a5:35:cb:ac:cc:6f:71:bb:0b:c4:0a:c5:
                    e5:06:1d:b7:bc:1d:18:e1:61:e0:39:a9:3a:70:81:
                    05:b3:f2:69:b9:f9:2a:36:0f:1d:ac:f9:90:a8:bf:
                    06:ea:da:f4:7c:27:af:1f:85:26:94:55:5b:ed:7f:
                    cd:20:99:ae:09:e7:9c:e0:ae:b3:f6:8d:8f:a7:b0:
                    ce:80:d5:b0:f7:fb:ea:dd:63:62:68:64:e2:ab:db:
                    2f:5c:95:ae:4f:70:37:a9:b1:f2:9e:2e:f1:c4:ea:
                    db:44:64:05:c9:6d:80:ba:c2:f2:59:c5:ab:fa:74:
                    f4:7b:27:b5:58:f3:89:5d:e5:65:71:a3:be:c2:a9:
                    ed:d4:56:9b:f2:22:73:02:ff:b8:07:27:8b:aa:de:
                    c2:6e:3a:3b:a4:3c:de:88:39:cd:db:f2:3e:aa:bf:
                    c7:ad:a8:18:a0:e7:94:0a:59:90:df:0c:1b:e8:90:
                    59:7f:08:0f:a8:2c:b6:06:21:36:97:38:a4:4e:e8:
                    53:13:96:23:bc:eb:37:7e:71:f8:17:8b:99:3c:7c:
                    c0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:37:D3:D9:FF:39:C5:D5:2C:04:A5:89:C7:7A:76:EB:BF:65:DE:9C
            X509v3 Authority Key Identifier:
                keyid:5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/323830343a316466633a363030303a3a2f33362d3336203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dfc:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         44:68:72:40:2c:d7:d9:98:64:68:d4:1b:71:2b:19:63:8e:80:
         e4:36:4f:6c:4f:8c:38:20:2f:fb:4f:89:5c:71:e0:14:d2:8f:
         a7:5c:b4:2e:e0:d6:0d:cc:e9:bd:16:37:7f:89:f7:71:d3:a1:
         98:e2:fb:a0:b5:e2:91:18:dc:f3:a1:c2:3d:1b:5b:c3:18:8b:
         38:73:2e:08:92:23:88:be:d6:1f:dd:22:71:ec:ba:13:17:fd:
         cd:2c:e9:4a:2b:69:fb:41:f5:e8:ef:f0:f4:40:2e:4a:70:eb:
         c2:73:34:77:bf:3c:20:91:c6:1c:34:3f:55:cc:a1:85:05:2a:
         15:54:c0:60:c6:b4:dd:c1:61:65:56:5f:08:cb:6a:09:79:19:
         14:26:86:08:62:fc:9b:f7:45:45:f2:27:e8:aa:b7:2c:48:70:
         5d:07:ce:ca:c4:69:ea:b0:22:54:06:56:e4:07:1d:df:b1:eb:
         ca:85:ed:2a:be:26:1b:50:1d:b2:04:64:37:53:97:4b:13:5b:
         10:75:b3:6a:0c:fa:d6:be:c5:6a:8e:f1:2f:ee:b6:9d:9e:b6:
         ea:c3:80:ea:93:5c:f9:10:e8:b6:9f:58:a3:37:71:27:58:20:
         9d:f5:31:5a:5a:9f:d2:12:a8:94:21:17:77:ac:36:29:93:86:
         0f:9d:fc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org