Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/1/323830343a6365343a3a2f33322d3438203d3e203532353733.roa
File:                     323830343a6365343a3a2f33322d3438203d3e203532353733.roa (raw, json)
Hash identifier:          1bIqUG1a3V56QLyv/GeNMldxlZ+zq62v2bngfAwxWhE=
Subject key identifier:   FB:07:F3:23:A1:84:F9:CC:57:E1:57:EF:98:39:94:26:B5:69:CE:5C
Certificate issuer:       /CN=854124E28FF4349920ECC8D4C1EE16AF1B636A47
Certificate serial:       585F08E1620959713CD0F7738402AAF5A1273FDF
Authority key identifier: 85:41:24:E2:8F:F4:34:99:20:EC:C8:D4:C1:EE:16:AF:1B:63:6A:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/854124E28FF4349920ECC8D4C1EE16AF1B636A47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/1/323830343a6365343a3a2f33322d3438203d3e203532353733.roa
Signing time:             Wed 03 Apr 2024 23:58:32 +0000
ROA not before:           Wed 03 Apr 2024 23:53:32 +0000
ROA not after:            Wed 02 Apr 2025 23:58:32 +0000
asID:                     52573
IP address blocks:        2804:ce4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:5f:08:e1:62:09:59:71:3c:d0:f7:73:84:02:aa:f5:a1:27:3f:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=854124E28FF4349920ECC8D4C1EE16AF1B636A47
        Validity
            Not Before: Apr  3 23:53:32 2024 GMT
            Not After : Apr  2 23:58:32 2025 GMT
        Subject: CN=FB07F323A184F9CC57E157EF98399426B569CE5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:14:a6:22:1e:40:06:f2:01:5f:c5:39:cf:73:
                    14:af:b0:ef:c2:c8:e4:4f:44:6e:5f:01:d8:ea:36:
                    3b:b9:8f:03:d3:e7:49:1e:e6:27:63:cc:9a:a9:d0:
                    e6:b0:ed:32:af:ae:51:28:77:74:0f:64:d5:1c:ad:
                    91:25:94:00:63:ee:6b:1b:ac:c1:44:0e:a2:53:b0:
                    1c:b3:bd:25:9f:7e:b2:b3:7f:fe:44:0e:09:77:0b:
                    bf:5b:d7:f4:6d:87:32:a3:17:07:39:50:a7:68:63:
                    04:9a:53:5f:02:48:00:2e:59:44:f1:e3:53:b5:c4:
                    4c:57:61:a3:92:4b:28:1c:99:73:c7:19:a0:42:50:
                    61:2a:7a:4c:29:98:07:be:0d:11:9a:28:92:97:86:
                    70:a2:5d:41:f9:b5:8d:74:3f:35:5f:fb:b8:0b:f2:
                    65:ca:cc:34:3e:ee:2b:fb:16:5d:b2:85:ff:48:2b:
                    6b:d8:a5:ee:77:df:33:5d:9c:ae:1a:95:8e:f0:d8:
                    8a:6b:52:ae:6c:32:4f:5a:ac:c5:0c:5e:da:9c:26:
                    53:a6:31:f4:04:c1:c9:f1:5a:0d:9e:60:5f:8c:20:
                    49:4a:ba:23:3b:46:21:99:30:24:08:e0:53:65:10:
                    61:1d:10:78:20:f4:66:ab:66:07:19:c7:ce:a9:ab:
                    11:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:07:F3:23:A1:84:F9:CC:57:E1:57:EF:98:39:94:26:B5:69:CE:5C
            X509v3 Authority Key Identifier:
                keyid:85:41:24:E2:8F:F4:34:99:20:EC:C8:D4:C1:EE:16:AF:1B:63:6A:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/1/854124E28FF4349920ECC8D4C1EE16AF1B636A47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/854124E28FF4349920ECC8D4C1EE16AF1B636A47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/1/323830343a6365343a3a2f33322d3438203d3e203532353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ce4::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:89:f4:e2:6f:7c:b7:e5:a5:be:11:5b:59:88:60:ce:e3:b1:
         fa:46:55:5f:0d:58:dd:a0:75:0c:21:82:45:ed:84:76:10:c5:
         1a:f8:db:ae:a3:d2:bd:87:22:c5:14:49:7e:38:7e:12:a5:f8:
         ff:a7:7d:1e:1d:7d:7e:b4:8a:60:2d:4b:9a:e2:af:3d:d4:2e:
         57:b8:1a:d4:a0:d8:c9:ba:70:57:7d:78:84:34:19:1f:ac:14:
         08:da:c2:f0:d3:47:61:d6:57:62:cb:e8:d0:73:16:ec:47:28:
         91:80:84:81:81:fc:8d:15:dd:29:41:88:67:d8:3c:4f:ab:32:
         5c:d6:ab:f4:15:aa:08:06:78:eb:fe:fc:ea:55:a9:d5:39:cf:
         f0:c8:80:aa:9f:e3:61:04:1c:48:a5:e3:07:1f:28:1e:7a:59:
         16:66:a5:2d:7a:7c:24:d1:1f:71:1d:50:75:e0:29:cc:c4:bc:
         9d:c8:2d:8f:b4:d5:34:12:b2:4d:c5:07:94:d8:cb:cc:a2:bb:
         40:44:f7:f7:b3:a4:72:04:3a:16:f9:af:40:25:ce:ad:00:d4:
         28:ca:18:30:e5:67:a9:20:de:9c:39:c5:38:ec:10:4e:cb:d6:
         8a:3e:db:df:34:ad:2b:1c:0b:cd:cc:c7:7e:38:ac:be:1f:85:
         d8:83:63:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 02:17:08 2024 by rpki-client on console-fra.rpki-client.org