Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/323830343a323438383a3a2f33322d3438203d3e20323634323238.roa
File:                     323830343a323438383a3a2f33322d3438203d3e20323634323238.roa (raw, json)
Hash identifier:          C70BSHlR5e/SxIAuYhCHr3wi9CLWpDJtFu6kBpJDjwk=
Subject key identifier:   5D:65:2C:31:4D:EA:6B:67:AD:3A:29:FA:55:DD:6D:05:80:43:FD:45
Certificate issuer:       /CN=3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA
Certificate serial:       779E927D27BC9C848D225A75D022535819EA5430
Authority key identifier: 3C:FE:E7:CF:39:A3:16:A9:0F:BA:59:02:55:22:0C:BC:EB:5B:BE:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/323830343a323438383a3a2f33322d3438203d3e20323634323238.roa
Signing time:             Mon 27 Mar 2023 15:16:52 +0000
ROA not before:           Mon 27 Mar 2023 15:11:52 +0000
ROA not after:            Mon 25 Mar 2024 15:16:52 +0000
asID:                     264228
IP address blocks:        2804:2488::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:9e:92:7d:27:bc:9c:84:8d:22:5a:75:d0:22:53:58:19:ea:54:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA
        Validity
            Not Before: Mar 27 15:11:52 2023 GMT
            Not After : Mar 25 15:16:52 2024 GMT
        Subject: CN=5D652C314DEA6B67AD3A29FA55DD6D058043FD45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a1:d6:22:1c:9e:01:95:9c:f4:e5:40:28:cc:
                    a6:6a:db:28:05:cb:66:7a:bc:5d:68:d9:2e:35:cd:
                    44:a2:92:36:36:b9:6a:37:57:59:74:a6:c6:8d:b7:
                    7f:d0:dd:67:80:28:81:44:23:85:09:57:5e:ea:b9:
                    35:84:6f:54:f8:b1:57:f4:89:77:0c:9e:83:23:72:
                    92:aa:ad:8c:ba:f7:64:5c:0b:fa:f8:b9:35:8a:56:
                    2f:b6:31:3b:14:f6:cf:34:23:55:00:fc:46:7f:df:
                    b6:bb:fd:95:5b:1c:e7:81:59:81:3a:0e:dd:d6:06:
                    6a:8b:d4:5e:17:3b:38:68:59:f6:ec:9d:e9:33:a4:
                    ab:4b:0b:00:3f:24:f7:62:0b:03:24:a9:07:ed:02:
                    8b:7e:38:ff:19:c4:7a:bb:29:50:8c:b3:55:6e:c4:
                    e1:ea:e2:66:74:23:86:16:e3:a0:8c:d9:30:4d:96:
                    11:47:aa:b9:6a:ae:12:b9:e1:29:b3:12:9c:d6:68:
                    7e:85:1e:de:39:3d:df:f2:73:34:fb:4e:2f:7a:e1:
                    25:32:67:12:19:84:22:06:5c:8b:c6:c4:e7:62:e8:
                    f5:e1:a4:3a:a8:f9:8b:48:37:6e:8b:66:17:33:23:
                    ce:dd:a9:c7:89:7a:b1:66:bb:63:dc:76:f9:14:3b:
                    ab:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:65:2C:31:4D:EA:6B:67:AD:3A:29:FA:55:DD:6D:05:80:43:FD:45
            X509v3 Authority Key Identifier:
                keyid:3C:FE:E7:CF:39:A3:16:A9:0F:BA:59:02:55:22:0C:BC:EB:5B:BE:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/323830343a323438383a3a2f33322d3438203d3e20323634323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2488::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:0c:c9:27:60:7a:39:ef:54:08:87:7d:e0:12:60:00:2f:ce:
         4b:3b:80:95:3b:c0:ec:a0:cb:5c:87:14:eb:74:7d:5d:bc:cc:
         78:51:03:b2:4b:12:f1:3c:82:6e:4f:ae:1c:12:22:07:3d:21:
         cd:b3:8b:33:93:69:6a:9b:89:1b:5c:90:63:ae:d6:4f:87:31:
         01:ed:16:5d:31:f1:94:d8:25:2d:ae:65:51:05:d7:31:02:c1:
         99:bd:29:ae:c3:c9:1b:4b:d8:e6:4b:f3:0b:f8:cd:3b:33:b9:
         82:e6:29:2a:d3:24:08:3c:81:10:13:3c:71:ab:76:ff:d1:b0:
         4a:2b:12:62:fb:0e:ec:2b:86:fd:67:7e:45:5b:6e:d5:9c:6d:
         53:df:35:5a:5c:1c:16:b9:82:b5:cb:75:0e:8c:bd:ae:6e:9b:
         45:64:5e:6c:f2:fe:56:43:cc:28:3a:66:06:8d:76:f3:6f:c4:
         87:3e:af:6a:38:e7:17:2a:6d:f4:61:12:83:e7:9f:0e:3f:4a:
         e6:4b:2a:80:5e:35:5f:7a:4c:f6:fe:4c:d0:06:a7:dc:78:ed:
         75:e2:9b:4d:db:3e:18:f6:d1:e3:7d:61:01:03:1d:58:2c:37:
         1a:99:8c:42:8b:23:ce:24:78:bf:ed:69:f8:13:97:8f:80:9d:
         dd:9c:7f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org