Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/1/323830343a3235303a343030303a3a2f33342d3334203d3e20323632383033.roa
File:                     323830343a3235303a343030303a3a2f33342d3334203d3e20323632383033.roa (raw, json)
Hash identifier:          fw6cWo93C309SLOXcfjrquJ3DspJBU7ST6s0Oqj+Pmw=
Subject key identifier:   C6:FC:BA:18:2C:D7:99:11:75:A5:AA:BA:A5:E7:E8:7A:57:69:10:B4
Certificate issuer:       /CN=5CE8CC62295E168AEA6DF72A4F79361AE557F0D7
Certificate serial:       6317817BA81E66DEC246BB3C57F172124478322D
Authority key identifier: 5C:E8:CC:62:29:5E:16:8A:EA:6D:F7:2A:4F:79:36:1A:E5:57:F0:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CE8CC62295E168AEA6DF72A4F79361AE557F0D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/1/323830343a3235303a343030303a3a2f33342d3334203d3e20323632383033.roa
Signing time:             Wed 03 Apr 2024 20:41:06 +0000
ROA not before:           Wed 03 Apr 2024 20:36:06 +0000
ROA not after:            Wed 02 Apr 2025 20:41:06 +0000
asID:                     262803
IP address blocks:        2804:250:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:17:81:7b:a8:1e:66:de:c2:46:bb:3c:57:f1:72:12:44:78:32:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CE8CC62295E168AEA6DF72A4F79361AE557F0D7
        Validity
            Not Before: Apr  3 20:36:06 2024 GMT
            Not After : Apr  2 20:41:06 2025 GMT
        Subject: CN=C6FCBA182CD7991175A5AABAA5E7E87A576910B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c3:47:ad:7e:bf:18:62:cb:fe:47:41:46:9d:
                    e4:38:5f:61:b5:7e:5e:b2:15:da:b5:74:75:b6:20:
                    71:c1:c7:5d:e9:a7:b1:10:ad:f4:ae:6c:e7:40:26:
                    7c:85:f2:1a:e7:18:32:ac:1c:06:ba:bc:c6:f1:b3:
                    19:24:d8:85:c7:1f:82:4b:a9:8f:f4:73:eb:e6:e5:
                    6d:f8:f2:95:ea:2d:09:67:9b:d6:34:30:d4:44:c1:
                    bc:59:95:07:cb:7b:f4:62:24:a3:00:ff:64:b8:1a:
                    16:97:33:86:1a:17:e8:6d:1e:b7:bb:2e:aa:fa:17:
                    f7:4c:b1:01:2a:20:09:be:f2:bd:8d:f5:1f:b0:9a:
                    6d:57:4f:1d:eb:8d:91:9d:f4:64:14:0e:5b:d0:c2:
                    09:11:f8:cf:82:f2:a9:1d:b4:fd:b2:1b:c9:12:93:
                    ca:a5:e0:de:59:6f:2e:01:a3:33:d2:0b:22:b4:59:
                    34:3f:1b:34:db:77:3b:12:b0:a1:80:38:06:90:22:
                    d6:a2:3d:d2:28:b8:51:ac:26:65:e8:f8:14:db:f0:
                    5f:4c:fc:6e:9e:66:a1:d7:e2:a1:dc:0e:ca:e5:1a:
                    7d:ad:fb:58:77:bb:18:00:ff:30:e3:cf:70:e9:be:
                    13:4c:49:26:91:45:a8:44:45:44:68:c4:84:b4:86:
                    a9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:FC:BA:18:2C:D7:99:11:75:A5:AA:BA:A5:E7:E8:7A:57:69:10:B4
            X509v3 Authority Key Identifier:
                keyid:5C:E8:CC:62:29:5E:16:8A:EA:6D:F7:2A:4F:79:36:1A:E5:57:F0:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/1/5CE8CC62295E168AEA6DF72A4F79361AE557F0D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CE8CC62295E168AEA6DF72A4F79361AE557F0D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/1/323830343a3235303a343030303a3a2f33342d3334203d3e20323632383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:250:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4e:2a:fa:30:14:64:fa:97:4e:b7:1e:6f:a8:6c:1b:32:0a:c3:
         bc:ec:a8:16:3c:fd:70:97:33:ff:d9:f1:e6:12:36:5f:4b:ec:
         80:20:67:49:02:93:57:cb:fa:3b:c9:0a:3c:a4:60:76:cd:f9:
         3f:d7:a5:08:7f:8b:34:00:e1:f1:ca:22:6c:a3:cb:66:4c:52:
         a7:d0:a7:de:f9:30:c4:50:06:2e:39:83:95:1d:d1:46:23:67:
         4d:5e:d9:35:64:aa:56:c8:c2:54:63:ba:92:d6:1d:5e:c5:72:
         33:91:b3:cb:07:f4:a8:31:09:25:c0:38:be:8d:90:d1:4c:a9:
         79:3a:0a:d5:37:61:32:df:33:45:45:3f:f0:ae:e6:28:2a:4a:
         6d:4e:a1:4f:f4:d9:ca:1b:3f:a5:3c:bf:c9:8b:7b:59:2b:17:
         e6:9e:79:77:fc:6b:d1:aa:6b:45:2a:72:1a:8c:51:4b:e3:09:
         fc:23:11:40:72:0f:62:1d:5f:d3:f5:50:f4:ea:10:1a:d5:7c:
         71:63:e7:1f:d5:60:57:85:f2:ff:0c:e9:78:07:6f:a0:87:9f:
         3d:df:b1:50:1d:8c:9d:e3:86:26:d7:b8:d3:e5:3c:f7:89:ca:
         83:4c:41:90:7d:b2:35:32:d7:e5:1f:78:76:34:1a:57:36:71:
         09:4d:27:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org