Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/323830343a313063633a3a2f33322d3336203d3e20323633363530.roa
File:                     323830343a313063633a3a2f33322d3336203d3e20323633363530.roa (raw, json)
Hash identifier:          kALkjOCKvKOCTbWq64UqIhryBnqW9HnQaeGCE5lFJ8c=
Subject key identifier:   49:6B:97:72:36:B8:16:E4:05:3F:1A:1F:EB:D2:12:99:0B:6B:69:DC
Certificate issuer:       /CN=D5E118C26CD1A6C958406265B147D4287D85F5CD
Certificate serial:       363713A1AAB9E9468AA7FB2648D6A0F351B978B1
Authority key identifier: D5:E1:18:C2:6C:D1:A6:C9:58:40:62:65:B1:47:D4:28:7D:85:F5:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5E118C26CD1A6C958406265B147D4287D85F5CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/323830343a313063633a3a2f33322d3336203d3e20323633363530.roa
Signing time:             Fri 15 Mar 2024 19:32:04 +0000
ROA not before:           Fri 15 Mar 2024 19:27:04 +0000
ROA not after:            Fri 14 Mar 2025 19:32:04 +0000
asID:                     263650
IP address blocks:        2804:10cc::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:37:13:a1:aa:b9:e9:46:8a:a7:fb:26:48:d6:a0:f3:51:b9:78:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5E118C26CD1A6C958406265B147D4287D85F5CD
        Validity
            Not Before: Mar 15 19:27:04 2024 GMT
            Not After : Mar 14 19:32:04 2025 GMT
        Subject: CN=496B977236B816E4053F1A1FEBD212990B6B69DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2b:7b:96:7f:6e:1c:d1:59:de:3f:96:80:e7:
                    57:22:a0:cb:01:8c:e2:27:5a:15:7b:30:c8:a0:af:
                    af:1e:ff:7e:ff:b4:6a:7d:01:53:04:71:4d:89:de:
                    8c:a7:dc:01:74:ad:a6:23:b2:c4:b8:32:ee:20:9b:
                    06:a3:f7:f2:b8:98:84:92:fa:81:4a:14:84:0a:75:
                    9f:6c:6d:36:b1:26:c5:99:2c:ae:c0:39:ea:53:b9:
                    3a:d8:25:41:29:27:84:69:1c:ee:69:5b:6c:3a:01:
                    ca:26:db:60:22:4b:4a:c7:8e:ec:ca:1e:f6:7f:75:
                    b7:e8:ec:5a:f9:24:1b:3d:47:69:80:d5:37:54:0a:
                    55:ca:cf:f1:eb:ee:ae:f6:d7:8b:ba:8e:1f:00:4e:
                    62:80:4c:60:88:aa:55:05:c0:d8:10:33:dd:50:cc:
                    95:49:25:68:2e:f4:06:77:0a:d6:5b:80:05:86:3d:
                    dc:b2:32:99:8f:96:e3:9e:2f:77:fc:02:db:0d:b5:
                    ff:32:bf:ba:0c:b1:ec:dc:62:6c:8d:b1:f6:87:d4:
                    87:94:11:56:93:0b:9c:a2:31:cf:0b:22:fa:3c:55:
                    19:bd:5f:13:04:f5:07:5d:27:54:80:2c:92:fe:e1:
                    0c:ff:27:0a:0d:29:2a:e6:2e:7d:aa:d1:d0:ad:ed:
                    60:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:6B:97:72:36:B8:16:E4:05:3F:1A:1F:EB:D2:12:99:0B:6B:69:DC
            X509v3 Authority Key Identifier:
                keyid:D5:E1:18:C2:6C:D1:A6:C9:58:40:62:65:B1:47:D4:28:7D:85:F5:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/D5E118C26CD1A6C958406265B147D4287D85F5CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5E118C26CD1A6C958406265B147D4287D85F5CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/323830343a313063633a3a2f33322d3336203d3e20323633363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:10cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:a5:cf:ff:7b:ca:b1:dc:98:fd:df:86:56:2a:3d:35:86:78:
         14:32:86:b2:44:62:69:81:b0:32:5b:48:61:09:34:ad:4c:ae:
         e4:e4:78:45:47:e8:60:ee:f8:4c:f4:e7:59:69:c1:3b:8a:69:
         76:c9:20:91:71:6f:87:be:37:88:d3:7e:5b:13:26:d2:c1:54:
         39:df:06:29:b0:19:85:02:ed:d7:87:84:5d:c0:33:b9:55:e4:
         aa:dc:c6:55:df:97:fd:9f:6f:b0:fe:82:69:5a:cd:5f:d5:2e:
         42:24:61:e5:a2:3d:92:3f:8a:e0:58:25:0c:f5:ed:42:ff:70:
         ee:fd:e4:5f:d9:75:be:0c:56:21:68:31:95:de:10:a3:d5:68:
         be:97:49:48:71:78:d5:9b:41:d9:c9:b1:a0:0f:46:ca:54:2b:
         8c:51:9c:7e:ff:80:b9:f1:1f:c6:1e:3f:39:e1:2b:ef:1b:16:
         4f:c1:21:82:ea:e7:20:f1:37:2f:98:96:ae:60:90:27:8c:11:
         48:79:7d:2f:88:ad:4e:5c:b3:c7:02:eb:68:a7:58:cd:b0:7c:
         83:d3:50:86:94:84:d5:2f:98:e9:cf:ed:99:7e:d3:b6:18:e1:
         d0:47:63:ef:0a:15:4c:a0:30:49:8e:05:c9:46:de:73:b0:54:
         6f:9e:b3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org