Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/0/323830343a6666383a633030303a3a2f33342d3334203d3e20323633363131.roa
File:                     323830343a6666383a633030303a3a2f33342d3334203d3e20323633363131.roa (raw, json)
Hash identifier:          fEQosqEipZ2VgiTwFZU1c5btHZUkLyO0rwVe5dKyHz4=
Subject key identifier:   38:51:2E:CF:EE:24:56:D7:B2:36:29:8D:6B:8E:91:B7:40:F7:23:BD
Certificate issuer:       /CN=2A1F2B47869FBF318E0082CA9DD6DEBA04780283
Certificate serial:       697D114CD2CAF2430CD1E405F49591449B96BAE1
Authority key identifier: 2A:1F:2B:47:86:9F:BF:31:8E:00:82:CA:9D:D6:DE:BA:04:78:02:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A1F2B47869FBF318E0082CA9DD6DEBA04780283.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/0/323830343a6666383a633030303a3a2f33342d3334203d3e20323633363131.roa
Signing time:             Tue 22 Aug 2023 19:46:42 +0000
ROA not before:           Tue 22 Aug 2023 19:41:42 +0000
ROA not after:            Tue 20 Aug 2024 19:46:42 +0000
asID:                     263611
IP address blocks:        2804:ff8:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:7d:11:4c:d2:ca:f2:43:0c:d1:e4:05:f4:95:91:44:9b:96:ba:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A1F2B47869FBF318E0082CA9DD6DEBA04780283
        Validity
            Not Before: Aug 22 19:41:42 2023 GMT
            Not After : Aug 20 19:46:42 2024 GMT
        Subject: CN=38512ECFEE2456D7B236298D6B8E91B740F723BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c9:98:f6:4a:f1:5b:26:a1:f5:83:47:46:30:
                    8d:8a:d6:9b:dd:b0:0c:ad:23:0b:b8:ff:9f:e0:be:
                    44:ad:27:fd:bf:fc:6d:03:82:9a:0c:3c:77:75:51:
                    f8:25:b5:c5:1e:89:c5:4f:17:47:88:33:06:88:72:
                    0a:3e:1c:c6:6b:6d:e2:8b:e5:bd:b8:98:0b:fa:a1:
                    90:a0:da:04:f8:2e:96:3d:9d:88:ff:09:21:fa:ad:
                    3a:e8:36:e4:b9:b4:e1:89:84:46:6b:e9:38:45:7a:
                    aa:2e:d6:e2:10:c7:70:37:31:bc:07:ae:9e:07:28:
                    5a:a8:2c:ea:19:d0:a3:53:dc:ad:dc:a5:03:77:12:
                    29:f5:cd:ec:0c:27:a7:20:c1:7f:37:b6:cb:63:75:
                    a3:7b:8e:75:d2:b9:39:2c:75:01:62:59:5b:02:e2:
                    c2:76:4f:1a:16:21:0a:85:6f:80:de:5c:80:04:f7:
                    e5:62:e1:5f:b4:05:9d:de:79:a6:56:58:11:dd:a1:
                    10:9e:0d:e9:7a:04:21:09:fb:04:9a:e9:c8:95:17:
                    5b:19:a9:a3:d1:d0:c2:8a:10:71:8c:c9:a3:c7:67:
                    35:cc:e5:e7:44:5e:39:f7:69:cf:27:3d:13:65:1f:
                    1c:53:6a:21:10:35:e9:64:bb:43:19:6d:40:77:8a:
                    56:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:51:2E:CF:EE:24:56:D7:B2:36:29:8D:6B:8E:91:B7:40:F7:23:BD
            X509v3 Authority Key Identifier:
                keyid:2A:1F:2B:47:86:9F:BF:31:8E:00:82:CA:9D:D6:DE:BA:04:78:02:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/0/2A1F2B47869FBF318E0082CA9DD6DEBA04780283.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A1F2B47869FBF318E0082CA9DD6DEBA04780283.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/0/323830343a6666383a633030303a3a2f33342d3334203d3e20323633363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ff8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         30:04:92:5d:be:83:4b:d0:0c:47:9b:78:1c:ff:b6:34:11:30:
         0b:85:8f:d8:f1:a9:73:a9:a9:ad:82:c1:75:ba:b3:28:13:d0:
         14:33:73:4a:02:0d:e3:18:7f:b0:2e:4e:5d:c3:9c:6a:c2:69:
         5b:ad:3e:9c:cb:fc:76:1f:a7:44:6a:8f:17:94:a7:f2:39:32:
         4d:94:af:3c:b4:1b:88:9e:f7:5e:32:23:19:db:bc:2d:43:e8:
         e1:54:54:97:47:6f:64:a5:46:88:8a:2c:ea:28:a0:92:e7:09:
         a2:b2:8a:c7:16:94:ff:9a:be:17:b6:fa:3f:34:d6:4e:de:25:
         58:0f:7e:99:76:35:b4:e1:ae:ca:ad:75:9b:b9:29:c2:20:79:
         25:a2:26:09:32:02:62:29:fa:50:75:3c:65:5d:67:fd:45:27:
         c1:ae:77:8e:53:92:52:0d:90:76:f8:3e:d2:9a:41:09:75:f0:
         70:45:e8:83:b9:5d:a5:d2:f6:ae:0a:e4:d9:5f:20:ce:14:50:
         e6:4c:a9:63:72:4b:d9:8d:90:2d:5a:94:97:a1:26:ba:9f:97:
         9e:f8:89:1e:23:7d:e3:63:e1:ee:63:5f:8f:0d:aa:19:85:14:
         6d:a8:e9:1b:fe:e8:d2:4d:71:a6:4d:64:6c:23:31:c5:6b:b1:
         3b:2e:42:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org