Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/0/323830343a6666383a613030303a3a2f33352d3335203d3e20323633363131.roa
File:                     323830343a6666383a613030303a3a2f33352d3335203d3e20323633363131.roa (raw, json)
Hash identifier:          YVsSUOeTWL/NzWcNo92wUEjDHaNS4bfvSmFYErexxEA=
Subject key identifier:   93:9C:60:DA:0D:67:93:E1:06:A7:82:E7:3E:A0:DD:D4:B0:C8:9F:C7
Certificate issuer:       /CN=2A1F2B47869FBF318E0082CA9DD6DEBA04780283
Certificate serial:       25BCFA2147F51B901338C44AC1F6184CA6FA6C6C
Authority key identifier: 2A:1F:2B:47:86:9F:BF:31:8E:00:82:CA:9D:D6:DE:BA:04:78:02:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A1F2B47869FBF318E0082CA9DD6DEBA04780283.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/0/323830343a6666383a613030303a3a2f33352d3335203d3e20323633363131.roa
Signing time:             Tue 22 Aug 2023 19:46:42 +0000
ROA not before:           Tue 22 Aug 2023 19:41:42 +0000
ROA not after:            Tue 20 Aug 2024 19:46:42 +0000
asID:                     263611
IP address blocks:        2804:ff8:a000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:bc:fa:21:47:f5:1b:90:13:38:c4:4a:c1:f6:18:4c:a6:fa:6c:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A1F2B47869FBF318E0082CA9DD6DEBA04780283
        Validity
            Not Before: Aug 22 19:41:42 2023 GMT
            Not After : Aug 20 19:46:42 2024 GMT
        Subject: CN=939C60DA0D6793E106A782E73EA0DDD4B0C89FC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fb:23:1e:54:a7:ca:10:26:81:7b:51:81:2d:
                    f1:e5:83:14:c9:d0:cd:d3:ae:e0:eb:95:d9:c6:5b:
                    84:6b:1c:85:2a:cc:9c:30:fd:3a:cc:a5:29:1b:6a:
                    16:c5:7f:d0:2a:16:71:af:a9:b9:0f:42:89:3d:33:
                    7c:84:39:92:b3:91:9f:87:5b:25:32:dd:f4:b1:42:
                    7e:61:d2:a5:af:2c:da:f6:99:09:2e:ef:e5:71:ac:
                    f9:e0:0d:77:9d:39:11:bf:b8:98:23:8e:05:b6:2a:
                    ec:b8:50:9d:58:f7:2b:20:5d:0a:8e:ee:d5:09:47:
                    30:c2:5e:64:c7:f1:b1:b8:5d:65:88:3b:f5:3f:67:
                    ab:b4:20:5e:11:45:88:a0:87:23:06:53:49:c5:c7:
                    e8:51:fd:e4:81:32:10:83:49:69:65:5a:48:a7:33:
                    85:7a:b3:28:db:e1:ef:df:71:a9:d0:66:ce:fb:8d:
                    30:f6:91:1a:5e:be:90:d8:4b:0f:ad:63:1f:15:3d:
                    a0:d3:3c:4e:c4:3e:82:c4:be:a5:ee:6e:ea:6f:89:
                    75:5c:92:16:82:cf:98:ac:dc:30:18:be:16:66:fe:
                    31:42:53:f3:95:95:86:18:22:06:9f:b9:94:8f:e1:
                    06:03:3e:a6:3f:43:1b:aa:92:b9:6c:7a:9c:41:51:
                    34:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:9C:60:DA:0D:67:93:E1:06:A7:82:E7:3E:A0:DD:D4:B0:C8:9F:C7
            X509v3 Authority Key Identifier:
                keyid:2A:1F:2B:47:86:9F:BF:31:8E:00:82:CA:9D:D6:DE:BA:04:78:02:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/0/2A1F2B47869FBF318E0082CA9DD6DEBA04780283.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A1F2B47869FBF318E0082CA9DD6DEBA04780283.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/0/323830343a6666383a613030303a3a2f33352d3335203d3e20323633363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ff8:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         4d:b4:55:e8:49:ec:32:10:98:12:76:23:94:0b:a1:34:aa:bc:
         8e:03:9b:78:01:de:fd:72:c8:71:d5:17:44:7a:87:6b:dd:bf:
         51:6b:d7:f6:5e:df:b7:cc:a2:e0:7d:37:ae:d9:42:03:e9:d8:
         81:e1:db:af:8d:83:04:80:cb:72:d4:bd:a9:9a:b0:b2:0a:4d:
         c3:80:2c:0f:9b:dd:43:b2:53:76:4d:c8:cf:70:5d:78:af:ae:
         26:e9:26:8c:c8:b7:2e:b4:ec:6e:d0:85:c9:b5:da:d2:a0:87:
         d4:23:1a:8f:27:17:29:1b:16:2d:eb:7f:91:06:8c:12:a4:e5:
         c2:36:e3:e7:5a:77:d7:a4:8a:5e:d4:19:29:24:7c:e9:bd:74:
         36:9d:63:4a:86:02:5d:e0:31:98:82:0d:e4:e0:1c:c4:52:8c:
         0e:ab:a1:37:b1:82:8d:55:f5:19:17:08:ef:bf:9f:32:8c:60:
         d9:b0:41:60:10:6c:5d:fe:c6:c1:49:a9:03:8e:42:fd:30:f8:
         44:45:a8:7a:ce:b0:86:d7:85:0a:b3:e3:e7:d0:99:dc:52:3c:
         75:85:21:1c:39:1c:42:c9:41:79:38:bf:ae:f3:66:03:3c:36:
         17:43:2f:6d:0e:53:43:8d:fa:47:a0:c8:27:27:76:2b:72:5f:
         d0:f1:6e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org