Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/323830343a353437343a3a2f33322d3332203d3e20323638363531.roa
File:                     323830343a353437343a3a2f33322d3332203d3e20323638363531.roa (raw, json)
Hash identifier:          O8zYPAzs93sFCKRBqfy0cQSGIFfGg59dVCo7msbdZ6I=
Subject key identifier:   6F:61:08:50:10:24:B4:98:E5:6E:1D:87:23:5E:A7:81:3B:25:29:76
Certificate issuer:       /CN=D63F65BC868A989F5016FC5F923857D26EE2A068
Certificate serial:       5B19C080A5BF50A2286B67D9D1E908B95FD8F704
Authority key identifier: D6:3F:65:BC:86:8A:98:9F:50:16:FC:5F:92:38:57:D2:6E:E2:A0:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D63F65BC868A989F5016FC5F923857D26EE2A068.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/323830343a353437343a3a2f33322d3332203d3e20323638363531.roa
Signing time:             Sun 07 Apr 2024 17:00:01 +0000
ROA not before:           Sun 07 Apr 2024 16:55:01 +0000
ROA not after:            Sun 06 Apr 2025 17:00:01 +0000
asID:                     268651
IP address blocks:        2804:5474::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:19:c0:80:a5:bf:50:a2:28:6b:67:d9:d1:e9:08:b9:5f:d8:f7:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D63F65BC868A989F5016FC5F923857D26EE2A068
        Validity
            Not Before: Apr  7 16:55:01 2024 GMT
            Not After : Apr  6 17:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:bf:27:b4:6e:86:1f:b1:5f:8a:59:e4:6e:b1:
                    79:ca:9f:8d:a8:c1:e8:d8:99:a6:a7:ab:28:95:b3:
                    a6:20:ed:6b:05:11:b5:f5:c6:04:a4:0f:7a:dd:1b:
                    82:85:22:6a:d5:4f:58:f0:10:11:91:7d:fc:10:36:
                    e3:44:d8:14:6d:9a:d1:10:ad:45:a8:12:65:08:51:
                    a0:b9:70:23:2c:10:c4:da:69:6d:e2:7d:44:9a:60:
                    89:ac:39:75:fa:34:09:a8:95:b8:09:79:03:e4:8b:
                    b5:60:24:e4:02:92:b8:ba:7c:ea:b1:3e:eb:cc:5e:
                    66:a6:a6:4a:ed:5f:c4:41:e0:3c:37:12:45:21:d8:
                    0d:4b:e2:a5:47:02:74:82:8f:a6:a6:95:7f:29:b3:
                    37:63:51:d2:46:fc:53:f8:a2:70:af:48:8f:58:1d:
                    8a:86:03:69:c8:b4:2f:2d:8f:7f:83:d8:aa:ba:69:
                    7b:35:ab:c3:6a:fc:a9:b2:3a:14:8c:0f:92:ee:ce:
                    d4:35:41:8d:b5:5e:76:9d:16:15:dc:46:f0:71:34:
                    f7:9e:e7:fe:16:0d:b3:1c:57:f9:3a:c0:15:18:a8:
                    58:17:19:60:af:99:2f:5c:a1:39:fc:76:88:d0:91:
                    6d:7f:c9:08:f2:2d:fe:d2:66:58:c4:0b:72:02:5e:
                    d7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:61:08:50:10:24:B4:98:E5:6E:1D:87:23:5E:A7:81:3B:25:29:76
            X509v3 Authority Key Identifier:
                keyid:D6:3F:65:BC:86:8A:98:9F:50:16:FC:5F:92:38:57:D2:6E:E2:A0:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/D63F65BC868A989F5016FC5F923857D26EE2A068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D63F65BC868A989F5016FC5F923857D26EE2A068.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/323830343a353437343a3a2f33322d3332203d3e20323638363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5474::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:38:c6:02:74:52:65:04:4b:33:50:83:47:08:ef:12:7b:96:
         12:ed:2e:71:91:91:e7:a6:40:83:22:fa:ff:99:b9:d6:77:63:
         71:c6:dd:64:fe:d0:b7:00:02:17:b5:16:5e:f8:45:c0:fc:6a:
         b9:f5:95:50:33:53:91:86:c1:96:83:67:3f:ce:af:4c:94:27:
         3e:b8:ab:68:89:ec:ea:c1:91:3c:6f:88:58:72:d7:41:89:73:
         a1:ea:32:44:bf:01:c3:e1:52:cb:21:4d:71:d1:f4:83:ff:c4:
         60:09:f3:37:b6:26:3f:e1:44:67:cc:48:10:39:c0:db:da:86:
         12:ac:e7:01:3e:86:fe:4b:dd:1e:a0:8f:b4:42:b2:59:4d:44:
         77:82:9b:18:19:09:72:2e:5d:3f:cb:52:d2:f9:26:b6:c2:c1:
         ed:51:c2:93:c7:06:28:01:72:67:c7:37:27:5e:a6:4f:53:3d:
         0f:61:9a:e6:06:22:ba:ce:69:b3:ca:a0:9d:35:65:15:b3:a9:
         a4:03:17:75:54:a5:9f:c6:e5:93:0c:4c:68:74:c2:a2:75:c0:
         5c:9e:cd:83:41:07:82:29:3c:7d:ba:ea:54:5f:88:c0:4e:ca:
         5b:3f:11:a4:85:71:83:f0:90:56:82:b8:0b:3e:2a:a8:32:f4:
         65:49:a3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org