Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/323830343a353130343a3a2f33322d3332203d3e20323638343235.roa
File:                     323830343a353130343a3a2f33322d3332203d3e20323638343235.roa (raw, json)
Hash identifier:          hYH+Ksu6VSvL59L5jgBn/JVqY17rjAtmNZ6Ahpw/Opw=
Subject key identifier:   47:E6:36:B6:E2:3F:F8:23:FD:E2:EB:66:5E:A9:4C:30:EB:D5:43:B5
Certificate issuer:       /CN=8EF256D4FCA01CDB9A770856E1E10926567597F3
Certificate serial:       5FB5A396EBC656519621B5E17F65D8CDB99B378C
Authority key identifier: 8E:F2:56:D4:FC:A0:1C:DB:9A:77:08:56:E1:E1:09:26:56:75:97:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EF256D4FCA01CDB9A770856E1E10926567597F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/323830343a353130343a3a2f33322d3332203d3e20323638343235.roa
Signing time:             Tue 21 Mar 2023 14:36:23 +0000
ROA not before:           Tue 21 Mar 2023 14:31:23 +0000
ROA not after:            Tue 19 Mar 2024 14:36:23 +0000
asID:                     268425
IP address blocks:        2804:5104::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:b5:a3:96:eb:c6:56:51:96:21:b5:e1:7f:65:d8:cd:b9:9b:37:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF256D4FCA01CDB9A770856E1E10926567597F3
        Validity
            Not Before: Mar 21 14:31:23 2023 GMT
            Not After : Mar 19 14:36:23 2024 GMT
        Subject: CN=47E636B6E23FF823FDE2EB665EA94C30EBD543B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:82:3f:81:7f:d6:e2:dc:e4:2c:17:71:b8:65:
                    e4:5f:3e:4d:92:ec:cc:e0:ab:22:54:d2:f7:6f:e2:
                    2a:c1:ee:d5:eb:e3:eb:66:88:e6:a1:81:ef:60:7e:
                    ce:26:2a:be:7f:52:86:f2:84:84:cc:5f:b3:70:65:
                    6c:e2:1d:2d:cf:86:c1:1c:9d:36:07:e3:d1:98:62:
                    4c:dd:30:ff:c7:3a:08:d3:94:89:b3:0e:57:69:4b:
                    49:58:61:e8:a8:dd:77:79:b1:c0:2d:01:54:b3:2c:
                    45:35:e4:da:e8:e8:6a:94:9a:29:25:a9:d6:48:6c:
                    56:f9:7f:52:ce:c6:85:17:4a:d4:69:1a:26:86:8c:
                    c4:82:53:92:8e:58:17:dd:d9:99:f1:2e:03:24:33:
                    84:be:de:0a:37:f6:d4:a6:59:83:c2:8b:b5:5f:4b:
                    42:c0:16:e7:63:25:a9:c0:0d:65:87:d8:a9:f5:c6:
                    50:d3:b8:a9:41:ce:81:61:3d:02:62:1e:f9:43:ad:
                    90:01:47:af:9a:1c:a5:bc:9d:d7:a6:50:12:4e:5b:
                    7d:85:b2:2e:c6:9a:90:15:43:9b:64:51:59:63:d4:
                    1f:28:f6:46:25:86:ad:44:ad:64:91:aa:97:25:36:
                    c1:ad:90:85:3a:f3:b9:ef:b1:37:68:03:ae:2a:0f:
                    34:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E6:36:B6:E2:3F:F8:23:FD:E2:EB:66:5E:A9:4C:30:EB:D5:43:B5
            X509v3 Authority Key Identifier:
                keyid:8E:F2:56:D4:FC:A0:1C:DB:9A:77:08:56:E1:E1:09:26:56:75:97:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/8EF256D4FCA01CDB9A770856E1E10926567597F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EF256D4FCA01CDB9A770856E1E10926567597F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/323830343a353130343a3a2f33322d3332203d3e20323638343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5104::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:0b:05:28:80:cd:f3:56:11:ee:62:48:49:12:27:96:c0:0f:
         3b:b6:ba:85:3e:81:94:98:f7:32:9b:38:f4:22:20:85:45:b7:
         d2:c1:2b:02:b5:39:fa:0f:11:77:82:56:67:c4:84:9f:4a:f1:
         b5:eb:34:4f:4c:51:03:cc:e8:68:29:ae:7c:c6:ca:0e:f1:9c:
         97:32:fb:19:8c:68:16:97:55:72:ec:88:e3:ac:75:8b:d4:2d:
         21:ca:e1:ee:e5:74:eb:b9:5c:a7:d0:19:57:c3:5a:d7:ed:cf:
         24:7c:9c:01:ec:a9:2e:45:51:5d:c0:11:a9:f3:43:ab:ab:d8:
         b1:c0:1b:c4:5c:53:ad:88:f1:16:71:6a:ed:a2:0a:bc:45:72:
         9c:f0:99:5d:1b:d0:01:bf:2d:37:d3:c1:2f:ff:fd:4f:42:6d:
         9a:6f:54:a0:d9:d1:db:87:59:87:86:0b:e0:cb:dc:f1:3c:b2:
         89:91:3b:83:55:09:d4:af:bc:1c:d3:25:28:e6:01:fd:ea:a8:
         d1:02:2b:7d:85:b1:50:c6:96:b5:cf:c0:d3:e1:75:a6:3c:36:
         94:18:8f:60:8d:a5:fb:33:fd:d2:2a:48:4f:80:89:2f:9b:4c:
         c2:2e:f8:31:39:e7:c2:0d:a3:8f:b4:ef:8f:83:69:96:38:95:
         5a:27:d8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org