Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/0/323830343a353832303a3a2f33322d3634203d3e20323638313038.roa
File:                     323830343a353832303a3a2f33322d3634203d3e20323638313038.roa (raw, json)
Hash identifier:          mdWRqFoWzO3ezaaqqzDDbma4V4EDj9pbzfPF/e1gKwg=
Subject key identifier:   4F:68:58:2A:61:2A:BF:25:46:A1:BC:CE:AD:D5:0E:E0:CE:9D:D3:E1
Certificate issuer:       /CN=3AD5529CA1BEDB0641BC7182E97E664EAFEC22C8
Certificate serial:       5481FBF591CDA2E1D05B10DFEB0320351AFFF0A9
Authority key identifier: 3A:D5:52:9C:A1:BE:DB:06:41:BC:71:82:E9:7E:66:4E:AF:EC:22:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AD5529CA1BEDB0641BC7182E97E664EAFEC22C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/0/323830343a353832303a3a2f33322d3634203d3e20323638313038.roa
Signing time:             Mon 06 Nov 2023 13:46:25 +0000
ROA not before:           Mon 06 Nov 2023 13:41:25 +0000
ROA not after:            Mon 04 Nov 2024 13:46:25 +0000
asID:                     268108
IP address blocks:        2804:5820::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:81:fb:f5:91:cd:a2:e1:d0:5b:10:df:eb:03:20:35:1a:ff:f0:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AD5529CA1BEDB0641BC7182E97E664EAFEC22C8
        Validity
            Not Before: Nov  6 13:41:25 2023 GMT
            Not After : Nov  4 13:46:25 2024 GMT
        Subject: CN=4F68582A612ABF2546A1BCCEADD50EE0CE9DD3E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fd:35:95:a8:ee:08:28:5f:ec:b7:9e:79:b1:
                    82:60:ac:6c:0e:0a:28:55:ed:e6:86:6c:d3:08:5b:
                    f2:70:56:24:4b:7f:bc:82:d2:10:bb:c5:8a:22:64:
                    19:3d:ed:d8:eb:ee:ee:cb:9c:97:72:3f:f7:d4:91:
                    75:fb:2b:b6:af:7a:06:35:8c:6d:b0:8c:cf:23:57:
                    f8:48:d6:32:35:79:5b:d9:cb:5b:20:e6:15:0e:58:
                    93:e5:c3:b2:f3:41:72:f7:33:ed:fe:18:24:6e:a2:
                    01:3b:fe:83:7e:92:b2:7e:17:1d:86:5b:1a:ea:01:
                    b0:c9:9a:87:00:7b:61:5c:ce:22:e9:0d:1e:41:4f:
                    84:0c:45:6d:67:cf:ab:5c:90:87:c5:84:c7:84:0a:
                    a8:b5:af:c4:35:c7:be:cc:c3:1d:a0:a0:2c:0b:b4:
                    0e:9d:b2:b7:fb:69:1e:15:fe:cd:4e:7a:97:e3:28:
                    f9:fa:cb:04:9e:f6:31:a7:4d:51:ed:30:57:2c:55:
                    e8:a1:ab:50:fa:16:9b:9b:47:d7:4d:25:e0:f8:e0:
                    4a:a1:9c:21:5f:17:13:39:0c:6f:0e:4d:0d:bc:da:
                    ea:4d:cf:27:4b:02:7e:04:5f:f4:1e:2f:b5:10:0c:
                    3e:93:37:fd:25:54:4f:08:28:57:79:08:f4:98:07:
                    a7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:68:58:2A:61:2A:BF:25:46:A1:BC:CE:AD:D5:0E:E0:CE:9D:D3:E1
            X509v3 Authority Key Identifier:
                keyid:3A:D5:52:9C:A1:BE:DB:06:41:BC:71:82:E9:7E:66:4E:AF:EC:22:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/0/3AD5529CA1BEDB0641BC7182E97E664EAFEC22C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AD5529CA1BEDB0641BC7182E97E664EAFEC22C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/0/323830343a353832303a3a2f33322d3634203d3e20323638313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5820::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:5c:1e:43:7e:7f:08:af:8f:73:fa:21:21:94:89:b8:f3:0b:
         14:c7:00:3b:0a:cf:68:2e:68:10:4a:ed:f8:41:20:e2:c0:e3:
         c7:46:30:0e:a0:ac:dd:f7:76:e5:2b:64:c9:c7:91:0c:ec:d7:
         f3:b2:dd:ae:9f:15:c4:96:cf:4b:76:45:2d:6f:e1:99:04:cd:
         1f:37:62:f5:4a:1d:b3:9b:47:4b:2c:ce:31:2a:41:33:16:c6:
         af:45:28:e0:7c:7d:45:98:10:fd:d3:73:9f:77:b0:e5:03:07:
         70:9a:66:33:e2:ac:29:d8:56:3b:84:08:c1:c0:d6:4b:e6:56:
         08:91:d5:81:e8:5c:71:6d:ed:ec:a1:e4:1e:d9:50:9b:b6:9a:
         e7:09:e7:20:13:77:c3:d8:3f:76:e7:bf:bd:2d:ed:2f:b7:9c:
         e2:42:09:c0:da:de:50:45:88:c7:27:2b:c8:1a:98:85:5f:2e:
         ea:d9:90:f1:f4:ad:cb:af:0d:a5:3e:47:4f:c0:16:13:bc:93:
         d4:71:30:a9:40:ad:ce:1e:b2:1a:eb:2f:21:f7:f7:06:27:55:
         7f:d2:4e:50:7b:30:24:08:fd:d4:83:71:78:fc:d8:90:e6:49:
         d1:1b:6c:b9:3c:43:19:14:5a:cb:c2:f8:6e:dc:86:02:49:2c:
         84:ab:f6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org