Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/323830343a6663633a3a2f33322d3332203d3e20323633363034.roa
File:                     323830343a6663633a3a2f33322d3332203d3e20323633363034.roa (raw, json)
Hash identifier:          D2DwKM5s2sy2TkffjAlTF3Fbx0NT2rx19py0opb6tQE=
Subject key identifier:   61:14:89:D9:F7:0B:AA:60:10:3E:F8:52:9F:FE:67:63:3A:77:E9:4E
Certificate issuer:       /CN=496659D2A113157B4BED7E1189FFAEA19CE9E6F4
Certificate serial:       6E103B731CEFC2DB4406FDB60E7E994577102297
Authority key identifier: 49:66:59:D2:A1:13:15:7B:4B:ED:7E:11:89:FF:AE:A1:9C:E9:E6:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/496659D2A113157B4BED7E1189FFAEA19CE9E6F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/323830343a6663633a3a2f33322d3332203d3e20323633363034.roa
Signing time:             Tue 19 Dec 2023 17:10:16 +0000
ROA not before:           Tue 19 Dec 2023 17:05:16 +0000
ROA not after:            Tue 17 Dec 2024 17:10:16 +0000
asID:                     263604
IP address blocks:        2804:fcc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:10:3b:73:1c:ef:c2:db:44:06:fd:b6:0e:7e:99:45:77:10:22:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=496659D2A113157B4BED7E1189FFAEA19CE9E6F4
        Validity
            Not Before: Dec 19 17:05:16 2023 GMT
            Not After : Dec 17 17:10:16 2024 GMT
        Subject: CN=611489D9F70BAA60103EF8529FFE67633A77E94E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6a:a5:c5:57:d7:44:5b:75:14:e1:a1:2f:ad:
                    5e:1f:d0:0f:7e:85:82:36:dd:72:0c:b8:bb:f7:44:
                    7c:df:9d:87:22:c4:d9:d1:19:1c:e8:38:49:05:9a:
                    de:ca:4c:b5:41:2c:e9:fd:1d:b9:0f:8e:ff:82:a6:
                    fc:48:92:a8:a1:bb:c6:0a:57:25:1b:12:a2:89:d4:
                    07:dd:45:57:06:2c:80:a2:dc:d3:a1:06:fb:78:ea:
                    86:15:60:01:0c:6a:89:81:d0:7a:84:44:f6:92:21:
                    b6:39:fd:34:f2:6f:7a:37:a3:b3:94:75:d2:31:67:
                    46:d0:f4:42:66:40:05:fe:8d:97:78:bd:f8:96:9c:
                    b9:9e:48:19:64:35:84:7f:5f:1b:4d:d5:c3:db:fa:
                    a8:35:1f:57:90:2a:31:21:59:d9:ac:fe:aa:6b:fa:
                    8a:35:2b:9f:85:26:fc:41:a3:28:8e:d7:d0:a5:e1:
                    7f:3e:6c:c0:5a:b8:b3:3b:81:a8:ee:e9:36:a6:1f:
                    bb:97:c2:9d:fa:82:a8:b3:90:59:e7:e2:d6:c4:04:
                    4c:39:52:a7:67:6a:26:c6:3d:1c:62:c2:09:4b:1e:
                    2f:21:6d:95:18:c7:82:b5:d9:c3:ee:52:2f:8c:6e:
                    72:9b:72:22:57:4d:24:64:08:66:eb:d2:a0:d8:a8:
                    22:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:14:89:D9:F7:0B:AA:60:10:3E:F8:52:9F:FE:67:63:3A:77:E9:4E
            X509v3 Authority Key Identifier:
                keyid:49:66:59:D2:A1:13:15:7B:4B:ED:7E:11:89:FF:AE:A1:9C:E9:E6:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/496659D2A113157B4BED7E1189FFAEA19CE9E6F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/496659D2A113157B4BED7E1189FFAEA19CE9E6F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/323830343a6663633a3a2f33322d3332203d3e20323633363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fcc::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:aa:6b:9a:e8:6d:23:65:a2:15:ca:bd:ca:9b:84:46:1b:7e:
         42:a7:50:62:8e:a4:07:b1:50:28:10:15:17:6b:d8:80:7f:84:
         3a:57:81:c3:e0:46:48:31:5a:21:77:31:02:8b:fe:8d:6b:1a:
         49:3c:5c:ba:c3:05:ca:5a:c7:47:ad:36:7d:fa:ad:26:02:be:
         1c:ab:05:71:be:16:50:59:c8:6d:a6:bc:53:d0:8e:c5:09:5a:
         e8:6e:22:5b:5d:99:99:f1:03:7d:4e:fe:16:78:0a:85:0f:f2:
         2a:26:80:d9:07:36:44:67:e4:64:47:0a:e8:e4:11:c2:12:48:
         59:a4:64:dc:36:44:ba:e5:c3:08:e9:b9:8d:9f:37:2a:a4:69:
         37:c7:d8:ee:25:ec:bf:67:d7:0b:56:2f:74:f8:ae:31:de:e2:
         04:7c:37:11:d8:2d:14:d1:07:be:e3:76:47:39:ed:63:34:cf:
         65:c9:7e:4d:f0:a5:c3:a5:cd:e8:f1:ca:b3:4a:85:1b:d6:fa:
         ad:a7:4f:19:0d:63:64:73:1e:20:08:93:83:7e:76:9d:f4:4d:
         4a:7c:a1:1f:db:60:7d:19:40:81:5a:57:9c:42:c8:ac:70:1b:
         e0:41:b5:17:bb:7f:2e:7d:a7:f5:d7:f4:40:bd:7d:a5:8f:8a:
         8b:75:9c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org