Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/323830343a316466633a613030303a3a2f33362d3336203d3e20323632373635.roa
File:                     323830343a316466633a613030303a3a2f33362d3336203d3e20323632373635.roa (raw, json)
Hash identifier:          oLc8LHsUkZhIxlEY04LL27CrBw3tsrKYhsjA1A0r6kc=
Subject key identifier:   B0:D3:69:ED:26:1B:2F:FA:33:45:23:00:3E:3E:A5:FC:D4:58:DC:3F
Certificate issuer:       /CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
Certificate serial:       4A9B6947354DA77620A15FC7A6C216E70F94FEE9
Authority key identifier: 5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/323830343a316466633a613030303a3a2f33362d3336203d3e20323632373635.roa
Signing time:             Tue 20 Jun 2023 13:53:27 +0000
ROA not before:           Tue 20 Jun 2023 13:48:27 +0000
ROA not after:            Tue 18 Jun 2024 13:53:27 +0000
asID:                     262765
IP address blocks:        2804:1dfc:a000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:9b:69:47:35:4d:a7:76:20:a1:5f:c7:a6:c2:16:e7:0f:94:fe:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
        Validity
            Not Before: Jun 20 13:48:27 2023 GMT
            Not After : Jun 18 13:53:27 2024 GMT
        Subject: CN=B0D369ED261B2FFA334523003E3EA5FCD458DC3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2e:da:f0:b4:77:3b:c8:a7:b7:ba:5a:8e:68:
                    c1:6b:3f:91:ae:41:3d:d6:45:31:20:8e:2c:0a:05:
                    7a:7f:8c:14:46:b6:5b:7c:79:39:42:9f:66:d5:d0:
                    64:f6:bc:9f:2d:15:3b:ad:6d:1a:c3:01:39:c7:da:
                    d8:d7:f7:b0:74:62:6e:5a:f8:29:df:bf:1e:d0:ba:
                    ab:98:71:52:53:71:17:8a:d1:2f:9e:d9:bc:6b:29:
                    28:92:d9:cb:ef:70:db:4a:af:a1:3f:00:a9:7c:4a:
                    33:1e:e5:72:89:35:31:ef:3f:4b:a9:5c:ba:a9:e0:
                    21:a4:e3:e5:0b:dc:c0:60:99:9c:44:e0:22:fc:97:
                    79:20:3a:bf:ab:7b:80:6b:64:cf:3e:56:7b:88:2a:
                    85:53:db:44:b1:b8:d9:c1:41:5e:00:9e:81:54:4d:
                    5e:7a:6d:f4:2b:14:4a:02:76:c9:41:8e:61:4e:ac:
                    a9:f2:0a:84:e4:5d:2a:23:53:ac:23:60:97:67:7c:
                    8c:5f:9e:0f:42:cc:36:bf:3d:8e:08:4b:a1:b6:6e:
                    a5:0c:17:f2:8f:e0:93:6c:95:ad:91:bc:27:a1:a6:
                    55:16:02:4e:be:bf:bf:94:1a:78:16:9f:18:a5:7b:
                    2a:6b:e4:f4:18:42:e2:60:f9:ce:06:13:4a:a5:e1:
                    32:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D3:69:ED:26:1B:2F:FA:33:45:23:00:3E:3E:A5:FC:D4:58:DC:3F
            X509v3 Authority Key Identifier:
                keyid:5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/323830343a316466633a613030303a3a2f33362d3336203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dfc:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         57:7e:ac:6d:65:cc:23:aa:bb:ac:a9:30:9b:37:7f:9b:4f:2a:
         47:44:56:4b:fc:fd:01:32:59:71:07:8c:cb:25:e9:40:4a:4f:
         14:ba:a6:08:7e:8f:cb:54:4a:59:4e:86:48:4e:87:5d:d6:b6:
         ac:cf:9f:9f:0c:44:1b:55:97:19:6c:30:14:18:20:44:d8:a4:
         2a:3f:37:60:c2:fe:4e:35:aa:9f:ae:4c:d5:eb:4a:51:03:97:
         1e:a0:c3:da:43:b5:4a:c8:de:89:a9:24:e0:03:c6:f7:d6:34:
         3d:a6:08:b8:97:26:cf:13:47:cb:82:bf:11:bb:88:ac:64:42:
         99:74:f6:d6:ec:ab:51:f8:42:54:50:a3:a7:be:97:e2:46:b8:
         26:08:bf:4b:e2:6e:f9:e5:e7:cb:ec:45:bc:73:07:61:ca:e2:
         aa:34:80:bf:e1:80:99:40:9b:8e:13:d8:e8:a8:09:d4:06:be:
         ca:e0:c6:e3:87:6e:14:a3:07:4a:91:d0:05:16:47:14:43:52:
         25:1a:0f:0e:35:3d:40:dc:34:e8:63:74:41:25:1c:5e:c9:0e:
         5c:32:1b:a0:b3:34:7a:a9:a8:6d:e8:0b:c1:1c:12:e9:d2:d9:
         11:f7:db:e8:52:47:0e:e8:3b:5f:02:e3:88:f7:6c:42:25:b7:
         e5:0c:f7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org