Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/323830343a313131303a3a2f33322d3336203d3e20323632393031.roa
File:                     323830343a313131303a3a2f33322d3336203d3e20323632393031.roa (raw, json)
Hash identifier:          XAexDWui8WEkrR0j7nqSQP6YFHaNUefuCAVuPKuDZ5Y=
Subject key identifier:   7E:3A:BE:D0:1F:FC:9D:38:DC:85:0F:34:FD:80:9B:81:E0:19:13:FE
Certificate issuer:       /CN=06881049B94787E5C7A09A8083CA7953DD26CC5E
Certificate serial:       5FBF3A89DA79455915C8448E8385C503FA2B70A7
Authority key identifier: 06:88:10:49:B9:47:87:E5:C7:A0:9A:80:83:CA:79:53:DD:26:CC:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/06881049B94787E5C7A09A8083CA7953DD26CC5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/323830343a313131303a3a2f33322d3336203d3e20323632393031.roa
Signing time:             Thu 22 Feb 2024 16:12:02 +0000
ROA not before:           Thu 22 Feb 2024 16:07:02 +0000
ROA not after:            Thu 20 Feb 2025 16:12:02 +0000
asID:                     262901
IP address blocks:        2804:1110::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:bf:3a:89:da:79:45:59:15:c8:44:8e:83:85:c5:03:fa:2b:70:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06881049B94787E5C7A09A8083CA7953DD26CC5E
        Validity
            Not Before: Feb 22 16:07:02 2024 GMT
            Not After : Feb 20 16:12:02 2025 GMT
        Subject: CN=7E3ABED01FFC9D38DC850F34FD809B81E01913FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1a:ff:39:a5:ef:1b:ba:b4:02:10:34:d2:f2:
                    66:51:53:a0:66:dd:ce:d1:6f:0e:45:9b:75:28:3f:
                    a5:7c:c3:35:ed:4f:dc:73:b3:65:a3:57:54:7b:1a:
                    ad:6e:8c:e9:4b:95:ff:93:a7:3a:83:3d:ba:12:ca:
                    53:3b:51:6f:91:1d:5e:c0:31:fa:26:dc:b3:a8:1a:
                    50:db:24:ba:a7:5d:5a:84:2f:7b:9a:9d:39:0b:2d:
                    db:fb:9a:a9:f9:89:75:9b:8b:2a:96:13:ba:a6:bc:
                    3e:86:62:a8:8c:fb:13:59:1d:ec:90:79:ad:45:39:
                    56:02:54:ba:14:3e:cf:d2:1b:86:89:7c:8e:24:6b:
                    49:e5:c8:20:46:ce:a1:a9:38:66:bb:65:4c:c3:4d:
                    b7:05:f1:a0:47:44:54:23:ff:d9:bc:8b:ca:c3:74:
                    b8:2a:1e:a9:95:5c:e1:11:c4:17:19:c0:e5:b6:f3:
                    38:a6:5b:f3:ed:c9:0b:c5:9d:54:ee:62:64:69:f9:
                    b9:2d:1e:84:b4:f5:d6:c3:e5:33:a6:85:ac:f4:c8:
                    ce:86:dc:40:4b:68:fc:0b:38:e0:7f:16:6c:48:c6:
                    b3:2f:89:42:71:f9:27:29:52:f2:0d:a2:83:dc:3f:
                    c9:f6:1b:6a:50:4a:e0:18:a8:d5:74:f9:0f:c2:ca:
                    38:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:3A:BE:D0:1F:FC:9D:38:DC:85:0F:34:FD:80:9B:81:E0:19:13:FE
            X509v3 Authority Key Identifier:
                keyid:06:88:10:49:B9:47:87:E5:C7:A0:9A:80:83:CA:79:53:DD:26:CC:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/06881049B94787E5C7A09A8083CA7953DD26CC5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/06881049B94787E5C7A09A8083CA7953DD26CC5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/323830343a313131303a3a2f33322d3336203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1110::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:9a:15:75:c5:c4:c1:eb:41:db:66:7e:93:eb:fb:90:d4:04:
         67:5c:9b:98:3c:54:fb:58:b4:e2:62:c0:a6:35:d2:d7:48:a5:
         c4:6e:90:75:0b:fd:ee:14:50:6a:1d:ab:90:c3:7a:3b:2a:39:
         53:16:a1:08:b0:82:40:f1:72:c6:e6:86:ca:b5:c8:ed:9f:1b:
         d6:b0:99:4e:eb:76:4b:20:7e:94:7c:e7:da:7b:74:80:c0:c4:
         7e:65:11:f0:88:20:a0:63:d2:41:ed:75:26:cd:d4:32:25:8c:
         4e:a8:3e:37:81:92:d5:5b:52:ba:ce:ec:ae:72:ac:52:97:32:
         f1:c6:06:4e:e9:de:29:d2:0d:6c:61:d9:ea:dd:5f:ca:7d:22:
         82:e4:4e:31:63:cc:61:58:e6:71:9e:40:ff:18:23:c2:98:02:
         fb:7e:0b:86:f6:9e:87:96:f6:f3:eb:76:31:89:f5:c3:1e:d7:
         42:5f:7e:56:7c:28:82:bd:94:17:1d:49:14:09:4c:26:76:1e:
         83:77:0b:fe:a6:6e:ba:06:a6:8e:8d:cd:d7:b9:e4:65:12:aa:
         f3:76:3c:4a:c0:e7:6f:60:54:40:a8:5a:87:f9:06:40:d7:0e:
         e4:6c:30:fc:b2:d6:ee:73:a9:13:92:57:76:14:14:16:b3:9d:
         33:9a:81:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org