Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/323830343a336132303a3a2f33322d3332203d3e20323636303732.roa
File:                     323830343a336132303a3a2f33322d3332203d3e20323636303732.roa (raw, json)
Hash identifier:          NyJIS9go/0r8JLb1WHLomVf/+dWUg/XDTcHBT6zFQKY=
Subject key identifier:   3B:D3:D8:A5:DD:FE:49:4C:58:00:A6:F6:9E:B4:1F:CC:7B:A2:21:51
Certificate issuer:       /CN=1F5EDF2B6008A7F4A3D751D05AB96AA07B1520A2
Certificate serial:       3D0E1868D5AE9F5D7053DC566D6758104D897821
Authority key identifier: 1F:5E:DF:2B:60:08:A7:F4:A3:D7:51:D0:5A:B9:6A:A0:7B:15:20:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F5EDF2B6008A7F4A3D751D05AB96AA07B1520A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/323830343a336132303a3a2f33322d3332203d3e20323636303732.roa
Signing time:             Tue 12 Sep 2023 14:54:01 +0000
ROA not before:           Tue 12 Sep 2023 14:49:01 +0000
ROA not after:            Tue 10 Sep 2024 14:54:01 +0000
asID:                     266072
IP address blocks:        2804:3a20::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:0e:18:68:d5:ae:9f:5d:70:53:dc:56:6d:67:58:10:4d:89:78:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5EDF2B6008A7F4A3D751D05AB96AA07B1520A2
        Validity
            Not Before: Sep 12 14:49:01 2023 GMT
            Not After : Sep 10 14:54:01 2024 GMT
        Subject: CN=3BD3D8A5DDFE494C5800A6F69EB41FCC7BA22151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a8:c6:bf:53:f0:da:7e:82:31:0a:5a:77:65:
                    ca:8d:00:7e:64:eb:72:20:bc:98:67:cf:59:51:6c:
                    89:b7:57:3c:a7:fe:65:6b:85:7d:22:ed:0e:d4:72:
                    91:0d:6b:95:8b:61:75:9a:0f:37:1d:8a:a0:d4:33:
                    b7:ab:1b:61:85:c2:ad:80:b7:2e:42:e0:a5:6a:e4:
                    f1:6a:ec:49:09:2d:13:40:7d:ae:00:24:46:d6:f6:
                    e3:6a:00:00:b6:1c:a8:cb:b7:15:9f:65:28:ce:bb:
                    6e:32:51:26:00:81:a6:73:75:c0:a0:8f:0a:9d:95:
                    d0:a7:61:94:c7:8a:32:8a:1e:9f:9d:6e:3f:58:be:
                    53:8b:4f:ad:12:33:5d:d4:0a:33:61:5f:ce:5d:a3:
                    43:ba:36:25:6b:e3:60:30:45:4a:75:0d:47:fe:94:
                    88:af:ce:2c:1d:f0:88:d8:10:4a:8b:31:a9:69:c5:
                    c4:d0:81:3e:ad:7e:56:a9:b4:89:de:ce:cb:d2:d0:
                    35:b6:28:7f:6e:b2:20:dc:af:c2:be:2e:c8:cc:ad:
                    2e:26:3f:51:4c:d4:62:52:cb:f7:5a:3f:5d:ad:1f:
                    18:8f:99:b9:65:0f:2b:6a:e1:9e:9e:1f:4a:bd:44:
                    34:a9:a8:63:4b:38:43:72:28:2a:63:de:e1:92:52:
                    39:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D3:D8:A5:DD:FE:49:4C:58:00:A6:F6:9E:B4:1F:CC:7B:A2:21:51
            X509v3 Authority Key Identifier:
                keyid:1F:5E:DF:2B:60:08:A7:F4:A3:D7:51:D0:5A:B9:6A:A0:7B:15:20:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/1F5EDF2B6008A7F4A3D751D05AB96AA07B1520A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F5EDF2B6008A7F4A3D751D05AB96AA07B1520A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/323830343a336132303a3a2f33322d3332203d3e20323636303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a20::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:94:ef:d2:be:e9:6a:86:77:de:12:e2:48:f4:8a:14:a1:67:
         67:f5:6a:32:74:4a:0b:26:76:67:7a:be:7f:6f:95:cf:d1:d6:
         4e:6b:ba:f7:6f:f1:60:56:16:e8:2f:d6:dd:07:59:6d:bd:7d:
         b2:13:3e:c4:a8:33:f9:ff:ae:86:68:0a:5a:58:d2:7d:d2:4d:
         91:93:37:26:8d:dd:98:84:c2:5d:a7:83:e9:88:96:c5:b3:80:
         b4:1c:35:15:b7:3e:28:b3:b1:94:a9:19:5f:5c:f0:5e:ff:79:
         10:2a:03:a9:0d:39:22:79:63:7a:32:d3:6d:be:b5:81:92:bd:
         c5:da:f0:fa:52:b1:40:df:9a:5d:e5:b9:98:9d:06:1d:c4:77:
         78:1c:12:0a:ba:63:d4:b9:eb:e9:9a:39:fe:00:f2:a7:db:14:
         b6:6c:d6:ec:dd:93:02:bf:5c:f7:64:58:d9:bf:35:77:93:32:
         e7:b9:73:a5:7d:f8:12:90:e5:48:5e:dd:15:bd:b0:6f:a3:b4:
         68:91:a3:99:05:de:6e:f1:ec:1a:cc:d2:45:34:27:83:17:c8:
         89:f9:e6:9f:fb:68:5b:23:df:d2:02:ce:25:9e:14:bc:62:47:
         4d:b1:ed:60:a4:94:df:dd:e0:97:cb:71:c6:da:b6:85:2a:a7:
         b8:5b:59:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org