Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/323830343a333363633a633030303a3a2f33342d3334203d3e203238363536.roa
File:                     323830343a333363633a633030303a3a2f33342d3334203d3e203238363536.roa (raw, json)
Hash identifier:          ojdsB8WUf83EPxhcKZORi80dN1/6dzN+oIe3L+fTQD0=
Subject key identifier:   0F:D6:94:66:8F:B0:5B:F1:12:96:2C:EB:05:53:38:F8:E7:80:17:A7
Certificate issuer:       /CN=F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C
Certificate serial:       0B52FDE0F71983BE901A60695C56A9F576B9D270
Authority key identifier: F2:CA:5B:5E:6C:5C:A0:EE:4C:8A:02:48:C4:29:5B:B0:25:73:FA:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/323830343a333363633a633030303a3a2f33342d3334203d3e203238363536.roa
Signing time:             Sun 19 Mar 2023 18:00:11 +0000
ROA not before:           Sun 19 Mar 2023 17:55:11 +0000
ROA not after:            Sun 17 Mar 2024 18:00:11 +0000
asID:                     28656
IP address blocks:        2804:33cc:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:52:fd:e0:f7:19:83:be:90:1a:60:69:5c:56:a9:f5:76:b9:d2:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C
        Validity
            Not Before: Mar 19 17:55:11 2023 GMT
            Not After : Mar 17 18:00:11 2024 GMT
        Subject: CN=0FD694668FB05BF112962CEB055338F8E78017A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ba:33:6e:74:53:9f:b8:4a:c5:2e:d8:ec:7c:
                    f7:8c:8a:57:22:04:4a:f6:c6:e7:c9:af:7b:9e:f7:
                    9c:a6:b1:34:e3:8e:26:52:1d:75:44:58:06:dd:b9:
                    7f:ee:f1:7f:88:b8:d4:f1:ec:f8:09:46:61:32:13:
                    b0:e6:60:88:b9:0b:a9:11:6c:e7:4a:13:ab:dc:1c:
                    13:45:0e:85:8b:45:32:d5:8b:0e:12:8b:29:58:05:
                    27:d9:d2:c1:10:9d:5a:9f:5a:9a:3f:d0:72:e2:18:
                    fe:a7:40:e3:be:41:7c:1e:2a:f9:8c:61:6b:4e:a4:
                    e5:e7:0e:d1:ef:c8:96:ed:d3:17:be:b4:c7:0d:47:
                    85:50:76:15:fc:6a:2d:84:6f:57:f0:7e:78:30:fa:
                    04:27:46:62:2c:0e:44:71:c0:05:81:b6:ad:5d:b2:
                    11:39:35:95:36:f8:da:46:5e:7f:5f:77:89:f1:19:
                    69:c8:34:fd:fb:05:31:c6:c0:ec:28:f9:a7:66:09:
                    fe:0f:01:c2:4f:44:7b:05:b0:9a:a9:eb:46:d1:c4:
                    99:14:4f:1c:51:ab:82:68:26:a7:82:30:28:f0:31:
                    6f:4c:67:7b:36:9f:96:f1:b5:1e:f3:9f:14:a9:bc:
                    07:7c:91:c1:b8:38:16:2c:16:f0:0f:f6:d5:77:ce:
                    cb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D6:94:66:8F:B0:5B:F1:12:96:2C:EB:05:53:38:F8:E7:80:17:A7
            X509v3 Authority Key Identifier:
                keyid:F2:CA:5B:5E:6C:5C:A0:EE:4C:8A:02:48:C4:29:5B:B0:25:73:FA:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/323830343a333363633a633030303a3a2f33342d3334203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33cc:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a3:34:22:8d:7a:a1:da:4c:73:47:b7:85:d6:07:13:f6:62:a4:
         4e:f3:e7:70:d6:5d:e7:87:8e:63:c6:f3:30:2a:06:ed:2d:27:
         72:7c:9a:c4:d6:02:6d:be:85:fd:9e:f4:64:79:e4:ef:2c:13:
         b1:37:17:41:84:3e:58:f9:c6:b6:94:97:51:4c:48:ba:93:fb:
         a5:3d:84:8f:cc:4e:6f:47:f9:d6:8c:f7:35:bc:1d:92:fa:53:
         10:61:ed:9d:e9:27:49:37:f4:4b:77:35:1d:90:65:41:c6:25:
         2b:e1:af:74:8d:f7:b8:0f:2f:90:9e:3f:6f:d8:e7:04:44:bc:
         a1:1c:99:8d:42:48:4b:74:f1:bf:da:df:67:98:46:be:e8:38:
         8f:0f:f8:85:91:ef:aa:14:83:35:d0:62:fb:e5:b6:23:7b:4c:
         d3:fb:d4:92:4c:35:a7:05:53:99:a6:75:1d:58:42:65:cc:d8:
         2c:e8:aa:cd:86:8b:56:13:7f:d2:3e:51:71:2d:38:ab:f8:2d:
         ea:05:bc:0c:18:50:07:a6:58:d8:96:fb:61:1d:7b:ea:47:50:
         d2:4b:b6:48:a9:f9:7f:62:2f:5c:22:95:f2:2d:8f:f7:08:d3:
         62:95:f1:d8:fd:d6:00:0f:76:f6:b4:87:6b:03:05:43:cf:38:
         eb:05:66:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org