Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/0/323830343a333065343a3a2f33322d313238203d3e20323632373732.roa
File:                     323830343a333065343a3a2f33322d313238203d3e20323632373732.roa (raw, json)
Hash identifier:          oVicKlbxcBFXb+nU/AGNLJsogSA++lcfuHFF/AzcOfY=
Subject key identifier:   43:27:11:E5:4B:94:02:3E:21:84:85:71:90:01:A1:DF:A1:B9:8A:B9
Certificate issuer:       /CN=5EB537A15FD53CD0621615B69D55DB7153896898
Certificate serial:       4590DC1282E4D7AE6E72BC493F17063B4FAE0B94
Authority key identifier: 5E:B5:37:A1:5F:D5:3C:D0:62:16:15:B6:9D:55:DB:71:53:89:68:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5EB537A15FD53CD0621615B69D55DB7153896898.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/0/323830343a333065343a3a2f33322d313238203d3e20323632373732.roa
Signing time:             Fri 15 Dec 2023 13:12:51 +0000
ROA not before:           Fri 15 Dec 2023 13:07:51 +0000
ROA not after:            Fri 13 Dec 2024 13:12:51 +0000
asID:                     262772
IP address blocks:        2804:30e4::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:90:dc:12:82:e4:d7:ae:6e:72:bc:49:3f:17:06:3b:4f:ae:0b:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EB537A15FD53CD0621615B69D55DB7153896898
        Validity
            Not Before: Dec 15 13:07:51 2023 GMT
            Not After : Dec 13 13:12:51 2024 GMT
        Subject: CN=432711E54B94023E218485719001A1DFA1B98AB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:84:e6:6b:76:4e:2c:af:ee:9f:b7:a7:83:25:
                    b1:cd:78:f4:f4:bb:ae:28:0c:76:5f:99:a0:f1:53:
                    ca:9b:37:32:dc:ea:c9:f6:a8:cf:c7:22:1c:21:0d:
                    63:24:ec:49:08:7d:1e:bc:55:61:fd:9b:90:30:c3:
                    35:56:45:9d:e7:41:55:af:a3:69:55:ff:af:78:04:
                    a2:58:e6:33:fe:68:c0:9f:f5:a0:59:3b:06:9e:0c:
                    35:a0:ad:b2:c4:97:cf:7a:d2:c0:37:66:00:96:6c:
                    ca:8b:d4:ea:39:ae:c2:57:07:01:0c:08:93:cc:d9:
                    32:b5:8b:37:4d:a9:c9:f2:69:c6:31:f1:2c:33:78:
                    08:dc:8d:ab:57:43:30:fc:6f:34:2d:5f:79:ce:f7:
                    eb:f2:43:87:f6:86:ae:8e:96:24:1e:bb:0b:c5:d3:
                    ad:69:bb:cf:ba:1d:ec:67:b8:71:16:e7:f7:b9:3a:
                    8d:36:2c:78:98:e0:44:d6:72:a4:11:3a:42:b1:4c:
                    aa:a2:8a:65:b3:04:a2:a6:4c:85:56:10:0e:c6:b0:
                    0c:a0:8b:c0:c4:07:91:35:45:62:d0:e0:e0:9d:0a:
                    a9:22:c4:7f:77:46:eb:ce:00:33:ea:c4:8c:fc:35:
                    83:a8:7a:15:89:ef:0b:e9:ee:be:b4:ca:2d:a8:4d:
                    be:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:27:11:E5:4B:94:02:3E:21:84:85:71:90:01:A1:DF:A1:B9:8A:B9
            X509v3 Authority Key Identifier:
                keyid:5E:B5:37:A1:5F:D5:3C:D0:62:16:15:B6:9D:55:DB:71:53:89:68:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/0/5EB537A15FD53CD0621615B69D55DB7153896898.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5EB537A15FD53CD0621615B69D55DB7153896898.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/0/323830343a333065343a3a2f33322d313238203d3e20323632373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:30e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:f2:43:eb:46:5a:1b:d7:d0:f1:a6:d7:41:20:9a:99:b4:0b:
         a4:10:ba:d0:5f:74:66:a2:bd:f6:33:6c:cd:0a:80:7a:c6:43:
         c0:40:d6:1d:77:fd:a8:8a:b8:1b:44:5f:d1:ad:5e:18:a7:23:
         f9:1b:c0:58:95:58:34:e1:44:8c:ff:19:7a:8b:df:69:05:1c:
         ba:ba:92:19:7e:4d:c5:23:71:32:b1:cb:21:3c:97:e6:f0:6d:
         4f:f0:b1:9d:07:03:fc:b7:93:67:2d:61:a0:6d:d1:5e:01:1d:
         3b:6a:6e:f2:fd:47:a9:f6:78:c9:89:e7:28:36:fc:fd:da:53:
         44:19:21:50:14:14:06:fb:92:86:4b:86:cb:b7:28:75:90:ae:
         31:e3:c0:0f:cb:77:22:4c:07:a3:8d:8d:0d:d0:9a:d4:e8:21:
         fb:39:ab:bc:f3:cc:68:e4:6a:ae:d6:42:89:ae:ac:1d:51:f1:
         39:19:d6:54:c0:e0:81:ec:d2:50:fb:ba:f7:f5:c8:97:08:ff:
         e9:04:03:f7:6f:ac:0c:a3:64:e3:16:2c:12:4f:4e:a8:8d:71:
         fa:6a:a0:6f:73:e3:23:ce:fd:b8:e2:e0:20:60:57:54:2c:52:
         4c:36:49:4c:4c:50:e3:75:31:9d:dc:ea:0e:8c:b1:37:81:d1:
         ef:04:6d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org