Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/1/323830343a3235303a383030303a3a2f33342d3334203d3e20323632383033.roa
File:                     323830343a3235303a383030303a3a2f33342d3334203d3e20323632383033.roa (raw, json)
Hash identifier:          /sPn5uFxV5GxWWwWwaRDIVEW6hSrtiwOx1sjWWHi0ss=
Subject key identifier:   A7:4D:09:D7:72:87:6B:51:08:3E:79:1D:7F:76:54:C3:2D:7E:81:88
Certificate issuer:       /CN=5CE8CC62295E168AEA6DF72A4F79361AE557F0D7
Certificate serial:       6600C166F962B25585B414AD436A5DB9C6DE21A3
Authority key identifier: 5C:E8:CC:62:29:5E:16:8A:EA:6D:F7:2A:4F:79:36:1A:E5:57:F0:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CE8CC62295E168AEA6DF72A4F79361AE557F0D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/1/323830343a3235303a383030303a3a2f33342d3334203d3e20323632383033.roa
Signing time:             Wed 03 Apr 2024 20:41:06 +0000
ROA not before:           Wed 03 Apr 2024 20:36:06 +0000
ROA not after:            Wed 02 Apr 2025 20:41:06 +0000
asID:                     262803
IP address blocks:        2804:250:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:00:c1:66:f9:62:b2:55:85:b4:14:ad:43:6a:5d:b9:c6:de:21:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CE8CC62295E168AEA6DF72A4F79361AE557F0D7
        Validity
            Not Before: Apr  3 20:36:06 2024 GMT
            Not After : Apr  2 20:41:06 2025 GMT
        Subject: CN=A74D09D772876B51083E791D7F7654C32D7E8188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6f:f9:72:75:d9:2a:c0:36:59:1e:d4:15:1a:
                    ab:a8:d6:af:81:e5:01:80:a7:f3:e6:1d:67:df:da:
                    8e:19:6e:97:3c:39:ac:2f:32:d8:94:15:bd:cb:84:
                    1e:dc:9d:85:e5:d2:93:d7:20:fb:17:b0:9c:a3:96:
                    0b:d4:23:9f:ab:1b:04:bc:06:4e:9e:0f:93:31:b5:
                    a2:77:27:38:d9:b4:8a:53:02:0d:d0:ce:2a:fd:bb:
                    0e:84:6c:d4:20:e5:2f:de:f9:32:bc:d9:f5:5e:34:
                    73:cd:66:26:fd:93:43:02:08:ac:ca:32:49:24:79:
                    de:45:89:21:31:53:ea:f0:7a:fa:fb:88:c5:b3:15:
                    b4:a7:f3:69:bd:81:37:e7:75:d4:d2:d0:97:ad:50:
                    00:4b:12:dd:0d:87:6c:ad:e0:41:b2:db:5a:de:5e:
                    8e:8a:c3:36:0a:89:de:09:c3:1d:80:f5:54:e8:0b:
                    7e:e7:1d:94:6e:cb:31:bd:c7:02:a3:54:2e:29:72:
                    ee:7c:a2:69:ce:64:82:f1:b3:18:24:4b:23:e6:03:
                    d4:ea:fe:04:54:6a:d0:c5:01:d5:4c:83:f0:14:4f:
                    a3:44:86:1e:6d:68:2e:38:1a:a9:9e:fe:3d:d1:b6:
                    8e:2c:c2:69:bd:49:03:8b:14:de:47:83:b1:1f:58:
                    cc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:4D:09:D7:72:87:6B:51:08:3E:79:1D:7F:76:54:C3:2D:7E:81:88
            X509v3 Authority Key Identifier:
                keyid:5C:E8:CC:62:29:5E:16:8A:EA:6D:F7:2A:4F:79:36:1A:E5:57:F0:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/1/5CE8CC62295E168AEA6DF72A4F79361AE557F0D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CE8CC62295E168AEA6DF72A4F79361AE557F0D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/1/323830343a3235303a383030303a3a2f33342d3334203d3e20323632383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:250:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5b:bf:7f:49:e2:c0:28:fc:96:29:a8:8d:69:86:0e:bb:7a:f2:
         94:66:c3:4b:f5:59:e6:c0:64:c9:ba:46:c2:c3:4a:77:46:df:
         1b:5d:0b:6e:fb:93:f6:fb:6c:bf:d4:05:d5:41:ed:5e:13:0b:
         87:64:da:a7:50:db:c9:0e:36:02:ca:6d:2b:68:c0:7f:eb:b5:
         0e:65:24:d7:05:f1:3e:e3:f7:7a:79:bb:0b:31:89:19:3d:c0:
         1e:51:7b:17:84:02:ea:53:3d:ee:a4:fe:f7:06:85:03:f5:16:
         ea:54:02:7a:07:8b:de:f9:09:62:b6:60:2c:f4:75:0a:81:07:
         e2:03:d7:e4:db:c4:08:a0:4c:f3:be:b1:8d:c6:f8:af:6f:e8:
         fb:f7:78:c7:a6:e2:3b:3e:8f:3c:c7:cf:33:88:5b:19:60:6d:
         58:fe:2a:3c:3a:29:be:88:3e:ed:e1:e9:ab:d1:ad:b4:dc:b7:
         98:1f:23:8d:7e:4a:26:4f:a8:d8:b1:ec:c6:09:73:73:f3:5f:
         0b:88:a8:4d:74:cd:00:53:4d:86:01:73:79:4c:e0:84:18:45:
         7c:33:79:c4:9d:ad:35:58:26:e8:bc:95:79:af:ab:9b:9b:c5:
         32:94:5a:79:b0:40:89:78:ac:29:20:91:63:e9:b0:c2:88:4f:
         60:b4:02:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org