Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/0/323830343a323334343a3a2f33322d3334203d3e20323634313532.roa
File:                     323830343a323334343a3a2f33322d3334203d3e20323634313532.roa (raw, json)
Hash identifier:          If93KITj7EqTn17kO2EQI7GXVJPx7RYQNEZlYOalTw0=
Subject key identifier:   C4:23:19:4E:17:0E:1F:75:25:2E:3C:17:7F:50:6F:12:0A:4B:5C:B1
Certificate issuer:       /CN=18F05335DD8EFAA613957AA5D82CBFE6D5E13608
Certificate serial:       40114E5DCBFC680680A3A413CCBFB03B3CEB80
Authority key identifier: 18:F0:53:35:DD:8E:FA:A6:13:95:7A:A5:D8:2C:BF:E6:D5:E1:36:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18F05335DD8EFAA613957AA5D82CBFE6D5E13608.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/0/323830343a323334343a3a2f33322d3334203d3e20323634313532.roa
Signing time:             Mon 18 Dec 2023 18:00:00 +0000
ROA not before:           Mon 18 Dec 2023 17:55:00 +0000
ROA not after:            Mon 16 Dec 2024 18:00:00 +0000
asID:                     264152
IP address blocks:        2804:2344::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:11:4e:5d:cb:fc:68:06:80:a3:a4:13:cc:bf:b0:3b:3c:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18F05335DD8EFAA613957AA5D82CBFE6D5E13608
        Validity
            Not Before: Dec 18 17:55:00 2023 GMT
            Not After : Dec 16 18:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d0:7c:ad:3e:06:ad:f6:6b:15:9b:ec:d5:bc:
                    b4:ce:ac:2a:a9:cd:08:2c:b4:86:d3:f2:41:70:96:
                    61:0d:1d:71:e2:19:d8:54:70:3c:50:45:e1:6f:d5:
                    fe:77:63:81:24:36:cc:1a:c0:43:95:10:c8:00:bc:
                    a1:4d:f1:98:1a:d3:fc:89:4a:da:79:5f:27:3f:19:
                    a7:49:33:e3:e9:8c:32:a6:4b:14:14:35:f7:ef:c0:
                    a3:01:94:82:fa:81:d7:8d:cf:27:0a:f5:8e:f4:c0:
                    55:02:ba:c8:0a:b4:75:fe:a7:33:6c:16:bb:41:e1:
                    92:f9:10:dd:40:c8:f0:49:3d:b2:5c:4d:f5:f0:25:
                    f9:f9:0b:d5:83:27:fa:cd:1b:5c:5e:fb:c9:1e:51:
                    dd:2a:f8:37:d0:04:c4:a3:ae:be:6b:df:68:d3:7f:
                    5f:8b:c7:c5:17:b8:f9:64:d0:fe:4d:d6:32:43:a2:
                    01:94:63:59:29:23:b2:3d:38:98:cf:c4:94:ba:8f:
                    ee:1c:88:a2:23:50:b8:bb:e7:80:81:0c:a2:2b:ea:
                    ec:91:0f:ed:66:11:58:99:63:e5:63:bf:9c:4e:87:
                    93:44:88:f2:ca:ae:6e:08:67:43:d2:c9:a2:06:ab:
                    2f:74:25:06:c4:e2:dd:cc:e2:96:b9:6c:15:27:79:
                    d3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:23:19:4E:17:0E:1F:75:25:2E:3C:17:7F:50:6F:12:0A:4B:5C:B1
            X509v3 Authority Key Identifier:
                keyid:18:F0:53:35:DD:8E:FA:A6:13:95:7A:A5:D8:2C:BF:E6:D5:E1:36:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/0/18F05335DD8EFAA613957AA5D82CBFE6D5E13608.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18F05335DD8EFAA613957AA5D82CBFE6D5E13608.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/0/323830343a323334343a3a2f33322d3334203d3e20323634313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2344::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:7c:28:c1:6c:c9:4c:57:6e:47:c2:5c:3c:76:f0:c3:fe:88:
         e0:76:53:f5:7f:7f:dd:e6:09:44:14:61:dc:a7:02:0d:1d:6b:
         6f:c0:19:9c:c6:59:95:9e:46:97:56:5e:14:ba:da:3c:a0:79:
         37:30:cd:2c:2e:bc:49:ff:ab:a6:60:6a:01:95:28:22:1b:24:
         e9:e2:b7:b8:4f:93:05:6e:7c:08:84:e4:95:3b:17:96:04:b6:
         ec:c9:bb:41:75:5d:34:ae:a8:cb:5d:df:96:29:eb:e2:68:ee:
         b3:43:d7:3b:92:01:92:7a:57:43:30:8e:54:4c:19:ca:46:81:
         b4:e2:34:10:e1:65:83:bb:cc:5c:e1:a5:43:df:8a:23:48:8e:
         ca:f2:85:0f:62:a8:d8:c5:fc:61:11:34:22:d2:00:10:d3:24:
         e5:be:66:6b:d7:19:84:e4:90:54:be:53:2b:0a:df:0a:62:d6:
         3a:35:d2:d2:82:74:01:c6:fc:46:25:84:f9:40:35:f4:ea:fd:
         9c:4b:e1:fa:29:d8:3d:c6:30:b7:93:a8:99:a3:7e:ce:24:52:
         6b:e4:7b:42:78:1a:fd:0a:fd:c1:8d:d3:a4:c6:3d:0b:39:98:
         45:e2:73:58:cb:e9:f5:50:c0:25:31:dc:c6:06:ad:b3:12:97:
         20:a1:85:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org