Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/323830343a383736383a3a2f33322d3336203d3e20323732373037.roa
File:                     323830343a383736383a3a2f33322d3336203d3e20323732373037.roa (raw, json)
Hash identifier:          njMU8uV0bb/eXUMsz7fS6Xl7ElCATK0yyt/sV4T3dmc=
Subject key identifier:   43:D1:F4:2E:BE:31:20:0C:DB:0B:F3:08:96:8B:14:DB:F6:5D:AE:DC
Certificate issuer:       /CN=14945FB8256310020FB33CBB0208C3D3EE0DC64A
Certificate serial:       5E1D70377DEE6326E4A4663181BD6CEA85B1009A
Authority key identifier: 14:94:5F:B8:25:63:10:02:0F:B3:3C:BB:02:08:C3:D3:EE:0D:C6:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14945FB8256310020FB33CBB0208C3D3EE0DC64A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/323830343a383736383a3a2f33322d3336203d3e20323732373037.roa
Signing time:             Mon 20 Nov 2023 17:56:03 +0000
ROA not before:           Mon 20 Nov 2023 17:51:03 +0000
ROA not after:            Mon 18 Nov 2024 17:56:03 +0000
asID:                     272707
IP address blocks:        2804:8768::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:1d:70:37:7d:ee:63:26:e4:a4:66:31:81:bd:6c:ea:85:b1:00:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14945FB8256310020FB33CBB0208C3D3EE0DC64A
        Validity
            Not Before: Nov 20 17:51:03 2023 GMT
            Not After : Nov 18 17:56:03 2024 GMT
        Subject: CN=43D1F42EBE31200CDB0BF308968B14DBF65DAEDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3c:60:8d:be:d6:2d:a0:36:5b:10:97:76:15:
                    56:e8:f8:ae:96:58:8c:44:48:93:f9:48:35:23:a8:
                    5d:b8:be:3a:fa:3c:2b:39:d8:30:38:84:2a:b4:81:
                    76:24:c3:47:d7:2c:df:13:85:93:49:ea:f7:95:e2:
                    bc:b7:2b:54:b8:d9:fa:2a:ac:86:d2:59:6e:4e:5f:
                    c2:49:04:f5:67:25:40:72:49:7c:0e:99:a2:db:9a:
                    d2:1b:56:e5:a4:53:01:0e:bb:fd:2b:d6:be:30:0c:
                    16:45:3a:c4:73:3c:df:3a:03:7d:8f:e8:2f:40:88:
                    49:5f:2e:91:df:9f:ae:0c:0c:9e:89:ac:bb:1d:54:
                    a6:b8:ab:76:55:a2:96:35:9b:d1:21:4c:30:f4:05:
                    f9:b5:39:c3:82:c2:0d:41:63:a0:21:72:54:d8:7a:
                    6a:a4:40:ff:f4:4e:c6:9c:61:de:4c:06:f9:81:dd:
                    02:b8:e9:c8:5e:96:d8:e5:61:60:fb:9f:b1:ce:fe:
                    34:33:d9:c6:70:c6:26:32:ad:d3:7d:58:2a:69:b2:
                    85:88:f5:59:c2:4d:2a:8d:27:dd:d0:62:31:99:4e:
                    94:35:03:9f:cf:16:c6:97:b3:6d:fd:d5:b6:d4:ab:
                    0a:99:b4:4b:77:52:79:d1:3d:f3:ef:4e:8f:18:a2:
                    e7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D1:F4:2E:BE:31:20:0C:DB:0B:F3:08:96:8B:14:DB:F6:5D:AE:DC
            X509v3 Authority Key Identifier:
                keyid:14:94:5F:B8:25:63:10:02:0F:B3:3C:BB:02:08:C3:D3:EE:0D:C6:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/14945FB8256310020FB33CBB0208C3D3EE0DC64A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14945FB8256310020FB33CBB0208C3D3EE0DC64A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/323830343a383736383a3a2f33322d3336203d3e20323732373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8768::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:ba:a8:a5:a5:95:b9:09:b0:7f:72:c5:7a:ee:e1:40:c9:bf:
         fc:05:1b:cf:41:f2:0b:10:8c:0b:80:80:80:00:f9:b5:87:26:
         0f:12:3e:20:18:be:fa:48:3b:9b:53:14:1f:47:bb:ce:8f:81:
         16:a7:c2:41:b0:24:ff:1a:24:54:5a:8d:15:5f:d2:26:e5:3b:
         47:40:07:df:f6:75:1e:90:c9:41:4b:c6:0a:c4:4a:00:5b:6c:
         43:57:70:e6:64:15:9c:9c:25:a4:98:aa:ab:8d:2c:9e:a1:d3:
         ea:a7:67:f4:b7:dd:87:aa:ef:00:bc:0b:8e:3e:b0:c3:de:31:
         a3:68:69:dd:51:af:82:42:49:87:3c:2f:cc:f1:a3:27:bc:f9:
         b9:a6:09:07:a1:08:88:9b:a3:e6:56:2e:42:8b:1f:1c:53:94:
         44:9e:99:58:e0:d4:e3:e4:dc:88:8d:58:4a:f6:ef:be:57:c3:
         a6:b4:be:22:cd:dc:aa:6b:9f:62:34:7e:ef:d0:10:72:a9:d7:
         c7:c6:2b:6d:94:58:ea:0c:48:ff:a1:fc:84:58:78:3a:e0:f9:
         4e:70:cf:50:08:c6:2c:21:59:b4:ad:c2:9b:98:63:ba:95:8f:
         dd:9b:87:32:5f:dc:46:e3:7b:1a:ec:09:75:ae:78:9c:59:91:
         25:30:30:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org