Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/323830343a313131303a323030303a3a2f33362d3336203d3e20323632393031.roa
File:                     323830343a313131303a323030303a3a2f33362d3336203d3e20323632393031.roa (raw, json)
Hash identifier:          uf+LKKPFopKP8OLL3XrAHB4h8dHTdcl94sPExuvHYV4=
Subject key identifier:   FF:C5:2E:91:D3:08:CD:E0:39:A6:CA:B1:90:73:A2:8E:B9:25:1E:A2
Certificate issuer:       /CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
Certificate serial:       1D860C30D341C1AC86EB6E95493D35D9AB7ED8F1
Authority key identifier: 15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/323830343a313131303a323030303a3a2f33362d3336203d3e20323632393031.roa
Signing time:             Mon 04 Dec 2023 19:44:17 +0000
ROA not before:           Mon 04 Dec 2023 19:39:17 +0000
ROA not after:            Mon 02 Dec 2024 19:44:17 +0000
asID:                     262901
IP address blocks:        2804:1110:2000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:86:0c:30:d3:41:c1:ac:86:eb:6e:95:49:3d:35:d9:ab:7e:d8:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
        Validity
            Not Before: Dec  4 19:39:17 2023 GMT
            Not After : Dec  2 19:44:17 2024 GMT
        Subject: CN=FFC52E91D308CDE039A6CAB19073A28EB9251EA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:46:08:93:fd:78:f0:c5:dc:8c:b0:3c:b8:02:
                    3d:07:49:32:5e:56:77:e2:bc:32:4c:ae:ec:4d:0d:
                    74:22:d7:5b:6b:13:c9:6a:8f:f8:c4:41:37:4d:e1:
                    bd:18:de:27:9d:ae:c8:c3:7c:da:f0:b2:12:fc:c8:
                    e8:78:71:79:df:d7:ab:95:20:7a:de:4d:9e:0d:45:
                    07:02:ff:5e:f9:a4:99:90:01:be:87:48:9d:b6:04:
                    fd:bc:a9:16:37:64:59:b3:8c:b8:09:28:18:dd:94:
                    7f:f6:22:9f:d1:3b:ca:21:17:89:d7:5b:e3:db:bc:
                    4d:f0:7c:5e:8b:97:e7:5b:26:a6:05:08:c2:4a:4b:
                    20:2b:cd:29:4c:72:d1:9f:f5:71:b4:28:30:8f:33:
                    55:79:fb:f1:b3:27:16:89:0f:bd:61:42:03:4a:78:
                    3d:c8:ae:22:2e:7f:8e:ab:55:1b:1f:dd:cf:01:99:
                    2e:d2:84:dd:99:16:48:59:48:5f:c2:95:3b:04:47:
                    a7:72:ed:b3:a7:12:5c:13:a6:ac:ea:cd:48:32:94:
                    b4:e4:5f:b9:4d:9c:9a:f9:78:a8:01:d2:91:16:79:
                    40:a5:93:0c:c3:ec:2f:81:82:34:c5:ff:96:c4:a4:
                    7e:e4:f4:78:2f:b6:bc:a3:41:f9:38:86:7d:60:4d:
                    29:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C5:2E:91:D3:08:CD:E0:39:A6:CA:B1:90:73:A2:8E:B9:25:1E:A2
            X509v3 Authority Key Identifier:
                keyid:15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/323830343a313131303a323030303a3a2f33362d3336203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1110:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6f:2a:50:1c:7a:a7:ec:13:81:23:f0:3e:62:38:50:e8:da:40:
         be:93:4b:34:19:13:06:e0:b8:b3:e9:77:87:4f:bd:08:08:2f:
         bf:66:aa:eb:ee:83:41:10:9d:10:0d:c0:f4:d5:5e:62:14:60:
         71:37:67:79:e1:1a:40:2a:ac:a3:74:d6:b7:17:b8:59:03:2e:
         a0:27:3f:70:a4:24:35:f4:1f:e2:3d:5a:8f:cb:e5:0e:c5:c5:
         25:bb:b3:e2:2f:e2:47:5d:82:32:f4:0d:32:f3:01:8a:aa:38:
         de:ac:6c:0e:49:f3:45:17:6c:6c:24:b8:f0:26:09:24:07:7b:
         ab:de:9b:ae:09:22:51:42:0b:2f:f3:a1:34:58:b1:51:3c:be:
         c7:bc:ff:cb:89:55:7f:40:bb:7b:82:c9:3c:1e:b4:e5:d8:de:
         ea:33:1b:75:68:1a:e2:1a:8c:34:46:8a:fd:4b:45:ae:dd:47:
         90:7a:a4:b9:a3:72:60:43:87:d5:8c:0c:f0:5f:2c:44:d2:9e:
         93:13:77:ad:6e:e0:a0:0f:c7:d9:3d:29:a5:48:aa:b8:62:41:
         d6:f1:50:20:25:95:ec:31:7b:b4:3c:5d:73:4f:d3:39:1e:cf:
         c8:3e:7f:a2:ac:c1:43:bd:31:d5:b6:5a:91:34:fe:07:00:68:
         73:19:73:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org