Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/323830343a316234343a383030303a3a2f33352d3335203d3e203631373137.roa
File:                     323830343a316234343a383030303a3a2f33352d3335203d3e203631373137.roa (raw, json)
Hash identifier:          V6jAkn1MFnCTKcHdr17B7riSrbVY3HdfYBuGM2F719w=
Subject key identifier:   D0:49:16:03:32:0D:7D:98:EA:4F:22:D9:2E:B7:6F:49:EA:06:46:09
Certificate issuer:       /CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
Certificate serial:       01E2440DE3D629C71948EFFC346E06B8F90EA339
Authority key identifier: 5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/323830343a316234343a383030303a3a2f33352d3335203d3e203631373137.roa
Signing time:             Sat 09 Dec 2023 13:03:42 +0000
ROA not before:           Sat 09 Dec 2023 12:58:42 +0000
ROA not after:            Sat 07 Dec 2024 13:03:42 +0000
asID:                     61717
IP address blocks:        2804:1b44:8000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:e2:44:0d:e3:d6:29:c7:19:48:ef:fc:34:6e:06:b8:f9:0e:a3:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
        Validity
            Not Before: Dec  9 12:58:42 2023 GMT
            Not After : Dec  7 13:03:42 2024 GMT
        Subject: CN=D0491603320D7D98EA4F22D92EB76F49EA064609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d4:7d:f5:dd:f7:6a:fe:b8:b3:d1:8e:b7:6b:
                    5e:d9:07:7a:f8:9f:f9:4e:5a:13:6e:5a:26:d6:7f:
                    36:ec:54:b7:5d:85:e8:9b:e2:3d:13:fc:fb:41:39:
                    62:d8:51:bf:05:d1:52:d9:84:e7:c0:03:5e:91:7d:
                    94:d8:65:1e:2d:fd:d1:c1:2a:4c:bc:03:a0:26:88:
                    26:46:69:68:2f:38:2e:92:50:94:b8:15:ea:f3:c2:
                    45:18:5f:71:93:27:35:94:15:45:1e:77:53:91:22:
                    e5:44:78:5e:4e:a6:c8:b6:c8:b6:12:15:0b:ef:b8:
                    73:05:ce:05:bf:fd:b3:51:f0:ad:b7:34:7e:66:07:
                    7c:e5:b9:25:bc:53:08:e2:75:48:91:5a:8a:f9:a4:
                    5f:97:2c:94:ab:96:a6:56:dd:d8:fd:e0:d5:bc:d6:
                    48:48:51:96:13:6e:3c:b3:52:09:b4:f3:db:45:1a:
                    04:e7:eb:40:7d:ee:7e:95:37:31:96:49:3f:d2:84:
                    10:4c:6e:d7:20:00:df:7d:3f:e5:1c:e2:29:3a:d1:
                    01:df:b3:3b:fc:3b:37:65:21:e1:5b:62:03:2c:6b:
                    23:94:c0:b0:bf:cd:9e:6a:d7:eb:33:d5:89:e3:0a:
                    87:9f:46:c6:9b:4f:54:c9:dc:d4:45:59:a4:ff:e5:
                    f0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:49:16:03:32:0D:7D:98:EA:4F:22:D9:2E:B7:6F:49:EA:06:46:09
            X509v3 Authority Key Identifier:
                keyid:5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/323830343a316234343a383030303a3a2f33352d3335203d3e203631373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b44:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         22:9a:e0:cf:17:4f:44:a1:8d:50:4e:d2:ac:88:dc:a1:97:69:
         e0:92:c9:0a:06:92:9b:44:ba:c1:a7:b1:5e:33:26:63:4b:b2:
         ce:0a:d8:7a:5e:86:f4:8c:e0:78:4f:52:c7:ea:2c:5d:15:a9:
         23:ea:57:59:4e:77:33:f0:c5:c2:62:e8:93:8b:36:2c:83:50:
         25:58:94:aa:11:d8:4a:0d:1b:cc:26:ad:db:ab:ce:03:ac:52:
         24:55:75:5a:77:8c:48:0a:f3:a5:57:67:31:73:85:93:1e:9b:
         cc:a4:02:c9:47:6a:b4:de:10:e6:37:9e:79:00:2a:da:fc:cf:
         ab:6d:75:36:8b:70:2c:ca:7b:b3:e1:b5:e9:ee:b7:dd:3b:8c:
         53:12:3e:ce:dc:80:fa:9e:15:98:9d:95:25:3d:04:60:30:1c:
         e3:1b:d6:c9:ec:45:99:1a:ef:13:f7:a1:93:e3:e3:e4:50:0f:
         4b:85:40:53:a5:3b:6f:5f:80:4f:c6:cc:f9:e0:94:9e:48:2c:
         15:58:b9:9c:b9:96:62:34:1b:9d:25:6e:fd:16:51:7b:e6:ff:
         d3:e3:ff:c9:0f:50:c6:26:a3:07:60:d5:f0:68:44:f6:82:65:
         c5:dc:ff:73:77:30:47:21:d3:0d:23:6e:60:41:a4:fc:b5:4f:
         45:da:6f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:44 2024 by rpki-client on console-fra.rpki-client.org