Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/323830343a316466633a373030303a3a2f33362d3336203d3e20323632373635.roa
File:                     323830343a316466633a373030303a3a2f33362d3336203d3e20323632373635.roa (raw, json)
Hash identifier:          jzODAMCm2wOPFy7I33HQinT4SKVd6ecVYPoBck3Mgxs=
Subject key identifier:   3D:A3:28:A5:88:AB:F3:54:FA:8A:A0:78:4F:02:C2:52:32:AE:55:69
Certificate issuer:       /CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
Certificate serial:       625C13DF1E98852C9E6FFE46FF3B7FC1322859A0
Authority key identifier: 5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/323830343a316466633a373030303a3a2f33362d3336203d3e20323632373635.roa
Signing time:             Tue 20 Jun 2023 13:53:18 +0000
ROA not before:           Tue 20 Jun 2023 13:48:18 +0000
ROA not after:            Tue 18 Jun 2024 13:53:18 +0000
asID:                     262765
IP address blocks:        2804:1dfc:7000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:5c:13:df:1e:98:85:2c:9e:6f:fe:46:ff:3b:7f:c1:32:28:59:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
        Validity
            Not Before: Jun 20 13:48:18 2023 GMT
            Not After : Jun 18 13:53:18 2024 GMT
        Subject: CN=3DA328A588ABF354FA8AA0784F02C25232AE5569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:74:dc:4c:42:b9:ac:a1:e4:26:56:20:13:f6:
                    d6:3d:46:c0:d3:58:fb:7b:ae:2d:3f:6e:b8:b0:0c:
                    e1:0c:4d:92:ae:53:b0:dc:36:19:17:3a:b5:f0:29:
                    13:a5:64:d2:66:00:ad:52:df:e2:70:11:0a:09:3e:
                    8b:2c:77:fb:da:1c:87:aa:26:64:15:4c:57:3a:1c:
                    f0:40:98:25:1a:a5:0d:40:a8:63:a4:59:c8:67:23:
                    ef:4a:73:33:04:e1:6f:c9:33:a0:1d:de:48:6f:91:
                    82:0d:b6:c6:36:10:53:0b:43:f5:93:20:8a:72:f1:
                    cd:1f:e4:22:69:b8:e3:56:25:02:71:3b:4d:c9:44:
                    71:4b:7b:3e:df:8e:86:b4:36:65:81:7d:90:1e:61:
                    c7:00:7d:2b:fb:16:77:1b:d6:93:7b:de:f7:41:d8:
                    49:59:0f:e4:a3:66:a3:3d:79:71:8a:cf:e6:7c:0a:
                    96:e7:fb:1a:b4:91:70:67:38:08:5a:53:a2:60:0f:
                    54:9f:ba:39:d2:57:6a:9c:ad:7c:39:36:3c:fd:aa:
                    96:db:4d:9d:d3:90:ec:b5:c6:17:e9:3a:70:80:9f:
                    31:bd:54:d5:9a:8f:5d:ca:45:86:fc:60:03:fe:ef:
                    89:67:e3:a2:3c:60:68:f2:ca:ef:a8:e0:b9:2d:e6:
                    67:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A3:28:A5:88:AB:F3:54:FA:8A:A0:78:4F:02:C2:52:32:AE:55:69
            X509v3 Authority Key Identifier:
                keyid:5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/323830343a316466633a373030303a3a2f33362d3336203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dfc:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1a:07:a4:76:2b:52:70:9a:94:30:39:1d:6c:38:e1:dc:11:5d:
         43:58:d8:2d:30:65:f3:b0:f1:04:36:53:90:50:e6:83:0a:b9:
         16:c4:dd:6e:ed:f3:c0:45:d9:1b:83:56:33:d0:5b:af:b7:fd:
         6c:dc:7d:3f:a6:f3:fb:76:d2:a7:90:7d:79:53:92:f6:0f:b5:
         e1:21:fb:49:3c:cc:98:c7:c5:e8:a6:08:c5:28:76:86:00:ec:
         95:f4:e5:bf:97:fe:8f:09:16:ec:c0:53:d8:62:aa:49:52:75:
         c2:08:4d:fc:cf:bb:dc:2e:e6:d8:3f:8b:70:1a:55:01:8e:24:
         a3:20:f1:49:d9:4c:0a:a3:21:b1:24:7f:4b:03:fc:a2:ef:ef:
         d1:25:c1:50:22:65:35:01:8e:4a:62:2f:3b:8d:1f:ca:01:de:
         1b:69:08:d3:e0:36:a2:da:56:35:db:4a:98:26:38:13:41:b0:
         ca:b1:47:11:d2:5e:8a:45:4c:3e:5d:32:a0:b8:47:7a:60:41:
         28:09:a5:45:cb:75:ef:df:82:cb:e5:0d:d6:f0:4f:13:20:ca:
         27:41:99:86:6f:59:f2:6b:1d:ea:5b:02:8c:0b:6a:b9:1a:5e:
         bd:ef:58:a5:f0:49:48:72:a9:ac:50:65:b4:51:35:a2:03:df:
         7c:71:c1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org