Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/323830343a313038383a3a2f34382d3438203d3e203532393133.roa
File:                     323830343a313038383a3a2f34382d3438203d3e203532393133.roa (raw, json)
Hash identifier:          d0vhvgNihO8txZWCDOoRJTs0uVwh+cEmgyr5oAKeJc8=
Subject key identifier:   A5:E9:CD:9A:45:42:A5:5A:1E:A0:20:B2:25:7F:BE:4A:84:9B:6F:04
Certificate issuer:       /CN=E0626FB8C39A95F9AA766E296D3F64784A5EEA2B
Certificate serial:       536C621F9E1EDA5EFB03AA53CECB40BCF2669855
Authority key identifier: E0:62:6F:B8:C3:9A:95:F9:AA:76:6E:29:6D:3F:64:78:4A:5E:EA:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/323830343a313038383a3a2f34382d3438203d3e203532393133.roa
Signing time:             Tue 12 Mar 2024 22:19:39 +0000
ROA not before:           Tue 12 Mar 2024 22:14:39 +0000
ROA not after:            Tue 11 Mar 2025 22:19:39 +0000
asID:                     52913
IP address blocks:        2804:1088::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:6c:62:1f:9e:1e:da:5e:fb:03:aa:53:ce:cb:40:bc:f2:66:98:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0626FB8C39A95F9AA766E296D3F64784A5EEA2B
        Validity
            Not Before: Mar 12 22:14:39 2024 GMT
            Not After : Mar 11 22:19:39 2025 GMT
        Subject: CN=A5E9CD9A4542A55A1EA020B2257FBE4A849B6F04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:65:be:7e:9d:f2:33:c3:f8:57:28:1d:67:41:
                    cf:86:d6:d3:af:cc:8f:2e:1a:66:6c:56:6c:5d:f5:
                    28:6f:0b:2a:82:84:13:8a:73:2c:91:c4:3d:1e:67:
                    a6:1a:07:5c:03:73:3f:f2:a7:c8:ec:0c:1f:bc:ba:
                    89:44:8f:67:dd:74:6a:6a:65:43:93:0f:f8:84:0b:
                    17:0e:9b:cd:8a:a3:89:55:37:ac:24:ab:2c:c7:10:
                    76:fe:0b:85:7d:e1:57:fa:a4:a2:f7:00:66:81:7f:
                    f8:d7:3e:b3:d4:f0:1e:42:21:7c:4f:85:fe:f8:5a:
                    5e:d0:a9:02:ef:6d:a7:32:9d:18:81:51:8e:58:c9:
                    ba:ff:2f:da:44:86:50:3c:64:d4:eb:20:a4:9c:5d:
                    b9:ad:c2:e2:cf:e7:5b:ab:15:f6:71:c0:61:60:38:
                    9d:64:33:61:67:49:14:eb:32:c7:47:d8:90:58:33:
                    c6:e3:da:2c:e2:20:0a:5e:53:02:46:0f:0c:82:f3:
                    39:7e:3d:10:e4:25:6c:ea:ce:5b:3c:0b:e2:2b:c7:
                    83:51:1b:c5:4f:a5:69:d5:fd:d9:06:e8:0f:c2:45:
                    f6:07:b8:10:11:69:a9:aa:64:b1:34:14:a3:d8:67:
                    4c:db:fa:fc:b6:66:f6:14:f3:58:72:56:2b:ea:85:
                    b7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E9:CD:9A:45:42:A5:5A:1E:A0:20:B2:25:7F:BE:4A:84:9B:6F:04
            X509v3 Authority Key Identifier:
                keyid:E0:62:6F:B8:C3:9A:95:F9:AA:76:6E:29:6D:3F:64:78:4A:5E:EA:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/323830343a313038383a3a2f34382d3438203d3e203532393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1088::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:a1:d5:2e:34:02:e4:8e:22:2d:b3:3d:fe:a9:72:fc:78:89:
         5f:1e:3e:fc:84:91:28:39:02:ef:ae:70:8e:3b:f2:62:88:6b:
         4b:a3:e8:27:06:85:de:14:57:02:87:85:0f:bc:84:e7:10:54:
         38:d6:d2:eb:8c:f2:8b:54:7e:77:67:49:17:5d:71:cb:c6:ad:
         fd:48:1b:86:ff:38:9a:16:77:87:c8:d3:00:18:97:25:de:cc:
         8d:c9:f0:e4:0b:86:8d:8c:ea:1c:fb:5f:dc:17:fb:43:51:00:
         47:39:5d:4d:38:f8:f8:1b:c7:05:2b:fc:db:86:10:a4:bf:38:
         2d:40:c0:f7:6f:e9:10:bd:ad:18:15:d1:de:37:4e:67:12:6d:
         b0:9b:bb:3e:47:29:9c:f5:f8:8b:d9:ec:e3:85:40:0d:5d:0a:
         24:85:ca:34:48:f7:15:a3:a7:a8:f9:04:b3:d7:a3:16:88:3b:
         78:97:7b:67:9a:fb:a0:7b:72:ef:3e:a6:f8:80:fa:47:32:eb:
         47:f7:a0:cf:18:0a:9b:df:11:f6:4b:82:ef:6c:7e:e8:8e:1b:
         36:b6:c0:7f:42:df:d3:13:cd:7e:a7:ae:06:a5:0f:c0:3e:38:
         ab:e8:e4:d9:82:7f:62:35:26:19:42:26:8a:83:93:9d:50:3b:
         07:30:7c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org