Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/323830343a356563383a3a2f33322d3332203d3e20323639303536.roa
File:                     323830343a356563383a3a2f33322d3332203d3e20323639303536.roa (raw, json)
Hash identifier:          ew9ATx6TbFZktYCWBstxM2oYMmspHcXbtnPwIb66HFs=
Subject key identifier:   C5:58:D0:B2:CF:C5:05:EE:BD:81:87:0E:E3:39:F3:BA:65:42:8A:E1
Certificate issuer:       /CN=3295E3B481EE9D21F4414766870EF17DEDACBAAB
Certificate serial:       274FC1150E537D4FE02B171D5E8190007FB2CE4C
Authority key identifier: 32:95:E3:B4:81:EE:9D:21:F4:41:47:66:87:0E:F1:7D:ED:AC:BA:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3295E3B481EE9D21F4414766870EF17DEDACBAAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/323830343a356563383a3a2f33322d3332203d3e20323639303536.roa
Signing time:             Fri 14 Jul 2023 12:23:38 +0000
ROA not before:           Fri 14 Jul 2023 12:18:38 +0000
ROA not after:            Fri 12 Jul 2024 12:23:38 +0000
asID:                     269056
IP address blocks:        2804:5ec8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:4f:c1:15:0e:53:7d:4f:e0:2b:17:1d:5e:81:90:00:7f:b2:ce:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3295E3B481EE9D21F4414766870EF17DEDACBAAB
        Validity
            Not Before: Jul 14 12:18:38 2023 GMT
            Not After : Jul 12 12:23:38 2024 GMT
        Subject: CN=C558D0B2CFC505EEBD81870EE339F3BA65428AE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:45:d4:00:db:3a:1f:fb:ef:05:f6:66:5d:2b:
                    aa:8d:de:1a:df:98:74:21:73:6e:ec:a8:23:29:17:
                    a2:c4:20:0a:29:76:25:28:7a:2f:b6:d8:15:9b:d7:
                    2e:a8:97:06:72:06:e2:fd:2c:76:36:f1:20:bb:a6:
                    82:d3:d5:c5:bd:7b:17:3e:45:1c:6a:e4:66:df:4c:
                    d5:04:ac:fe:9c:cb:6c:c6:d8:c9:23:6b:6a:c6:ae:
                    a7:87:89:ca:d5:69:a2:70:24:d7:c4:2b:28:ba:9c:
                    00:34:38:56:97:91:4b:4c:c3:1a:3e:f3:ca:18:4f:
                    b1:d2:bc:54:a3:8b:38:c1:33:10:ac:10:57:eb:4d:
                    42:3e:6e:09:a4:74:a3:5f:38:95:1d:b4:52:1a:aa:
                    46:ad:d1:87:3e:7a:c9:20:0d:3d:8b:db:d6:eb:1d:
                    91:3b:86:61:30:a0:81:0a:7e:be:b7:18:43:88:7f:
                    2d:0e:3a:7c:57:55:10:ca:e8:43:2f:ae:6e:8e:4b:
                    07:fe:d8:e1:0c:17:e2:18:bb:0c:fc:46:43:7a:40:
                    c7:df:ff:6e:b9:c2:93:b3:e6:8a:3e:11:50:88:a8:
                    ac:ad:8f:e6:b9:8b:e1:3d:ba:69:59:94:4c:f2:cf:
                    05:8a:0e:72:3f:20:28:65:17:a4:5c:a9:d4:ab:98:
                    91:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:58:D0:B2:CF:C5:05:EE:BD:81:87:0E:E3:39:F3:BA:65:42:8A:E1
            X509v3 Authority Key Identifier:
                keyid:32:95:E3:B4:81:EE:9D:21:F4:41:47:66:87:0E:F1:7D:ED:AC:BA:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/3295E3B481EE9D21F4414766870EF17DEDACBAAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3295E3B481EE9D21F4414766870EF17DEDACBAAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/323830343a356563383a3a2f33322d3332203d3e20323639303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ec8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:76:6f:ba:02:09:04:82:52:c2:33:e5:d3:75:30:04:ac:a1:
         7f:14:fa:26:5f:f3:d6:61:6a:fc:cd:d2:9c:73:62:e1:f1:89:
         be:15:4b:b3:99:08:36:f4:5e:0a:e3:84:43:8e:2d:40:7f:ca:
         f6:36:c7:c2:79:8d:34:b0:03:df:9e:18:4f:85:bb:48:f7:f7:
         73:c1:61:bd:d9:66:80:4c:7a:7a:88:5d:5b:2e:fd:2b:88:f6:
         df:b3:02:b3:d1:5e:a4:57:c0:2e:14:d6:5b:15:f2:fd:25:37:
         72:83:11:9d:23:a7:d1:b3:2f:ad:b9:eb:77:d4:c3:18:6a:b2:
         67:dd:c0:68:4d:a8:7f:12:6e:2f:6a:38:e5:5e:f2:2b:a5:f8:
         b4:c0:f7:83:d3:dc:ae:21:84:c6:3a:6f:07:c0:35:a1:c2:69:
         d3:d4:c8:06:b6:1d:53:b1:dc:53:58:e4:99:aa:6f:9e:c7:49:
         00:ad:00:ad:f8:d2:4c:f8:26:6d:46:32:df:56:29:34:bb:31:
         4c:17:dd:ec:ea:e4:c0:93:0d:db:0d:7a:24:03:b8:0a:6d:aa:
         89:92:07:4b:c5:ce:80:00:40:79:13:2e:c1:eb:36:3a:fa:a5:
         a6:cb:ba:38:10:d5:a1:7c:4c:c6:4d:75:2c:33:25:67:89:08:
         59:27:cb:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org