Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/323830343a316466633a623030303a3a2f33362d3336203d3e20323632373635.roa
File:                     323830343a316466633a623030303a3a2f33362d3336203d3e20323632373635.roa (raw, json)
Hash identifier:          SwB0JVuyvL4tforMKE74nJAK1Kj+Vh2Kv0bMKJ8B90c=
Subject key identifier:   49:EB:84:52:68:33:84:10:60:E9:D3:36:39:8C:2A:19:F6:42:25:4E
Certificate issuer:       /CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
Certificate serial:       34F38F8B373607468A814EDDF1681D86483474D3
Authority key identifier: 5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/323830343a316466633a623030303a3a2f33362d3336203d3e20323632373635.roa
Signing time:             Tue 20 Jun 2023 13:53:22 +0000
ROA not before:           Tue 20 Jun 2023 13:48:22 +0000
ROA not after:            Tue 18 Jun 2024 13:53:22 +0000
asID:                     262765
IP address blocks:        2804:1dfc:b000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f3:8f:8b:37:36:07:46:8a:81:4e:dd:f1:68:1d:86:48:34:74:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
        Validity
            Not Before: Jun 20 13:48:22 2023 GMT
            Not After : Jun 18 13:53:22 2024 GMT
        Subject: CN=49EB84526833841060E9D336398C2A19F642254E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d6:97:e3:6d:f7:35:89:db:db:c9:8a:32:fe:
                    76:02:4b:4f:c9:60:5f:9a:05:9f:d9:18:48:37:41:
                    f3:f7:4d:ff:00:ee:7b:6d:07:bc:14:ac:d9:46:8f:
                    6c:f4:3e:dd:d4:90:ce:59:88:53:bb:2f:f8:89:e9:
                    9c:1c:50:5b:4d:31:cc:bc:cd:5c:a4:92:c3:43:72:
                    ab:c5:c3:a2:97:c9:b3:a0:6a:b2:56:5c:c4:04:97:
                    b6:32:68:87:89:86:57:a2:e5:c5:57:3e:b2:a5:73:
                    2d:e2:a2:db:65:a7:3d:37:cc:5f:c9:66:81:e9:ae:
                    f9:f3:a3:2a:9f:91:ba:aa:2b:e9:bc:bb:d8:1b:90:
                    aa:14:f3:d6:7a:e9:23:98:b1:ac:32:76:7e:b6:ce:
                    d9:ca:45:bc:74:19:a4:3d:52:b0:03:27:ad:3c:90:
                    27:44:fb:36:c0:78:70:4b:5f:37:f3:88:0d:20:cc:
                    82:a6:b4:3e:91:bb:e0:ea:cb:9b:f5:6b:e2:16:68:
                    5a:72:f9:a2:48:fc:36:49:00:74:0a:9d:44:0e:e4:
                    02:e0:56:d4:4e:52:3a:a7:c8:b5:cd:76:69:7a:80:
                    14:10:58:8c:d0:64:38:f8:68:49:61:1d:64:bf:55:
                    e2:e5:d3:21:94:71:cf:7c:ff:86:0e:56:b9:87:03:
                    4a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:EB:84:52:68:33:84:10:60:E9:D3:36:39:8C:2A:19:F6:42:25:4E
            X509v3 Authority Key Identifier:
                keyid:5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/323830343a316466633a623030303a3a2f33362d3336203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dfc:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         60:45:00:8b:88:d0:c2:8e:ae:6a:10:7f:db:59:31:9a:0a:d9:
         08:4d:51:d5:9e:38:d2:5d:70:2b:9b:04:dc:e5:2c:28:ba:20:
         b7:35:32:13:c0:b3:b2:b2:25:ca:2d:ef:a8:7f:f8:41:15:c5:
         0f:06:ed:8a:92:9b:c7:60:c9:0f:77:99:49:4c:fa:1c:68:58:
         15:ad:c4:06:6e:6e:ea:0d:9f:e8:6f:f4:a7:67:cb:c7:60:15:
         86:cd:2b:1f:c9:7e:ab:46:96:69:4e:ff:0c:3b:ee:6e:a6:0e:
         4d:e5:9c:de:55:59:f4:5e:e7:28:2a:e1:47:33:d9:29:bf:1b:
         ae:e1:ab:00:12:73:de:52:51:25:04:80:97:8e:7d:d3:dc:7f:
         e9:53:d6:4f:a0:81:93:e7:52:7b:2e:4a:53:6f:40:45:4f:5a:
         60:f4:2b:2f:34:07:49:5a:1c:5f:bd:ce:7c:71:21:37:5c:62:
         83:9e:93:0c:93:58:7a:db:73:4e:46:70:90:e2:a5:c5:37:e4:
         60:be:c1:58:ec:92:91:64:73:24:4d:6c:ee:6b:74:3e:83:88:
         4d:b3:0f:bf:0f:ba:39:10:13:fc:12:4c:95:7b:ba:bd:0f:b1:
         bb:52:7c:94:d1:65:10:56:a7:42:4f:d8:69:5f:fe:89:6a:cd:
         7f:d3:3a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:36 2024 by rpki-client on console-ams.rpki-client.org