Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/323830343a6633383a3a2f33322d3334203d3e20323633353731.roa
File:                     323830343a6633383a3a2f33322d3334203d3e20323633353731.roa (raw, json)
Hash identifier:          aao6uqlnmC3vFwJhW5WZHqZ/dpHIcy8DoQAvws54apQ=
Subject key identifier:   A8:D6:34:02:A8:E8:D7:B4:1A:3B:03:AB:95:BF:A5:11:58:ED:15:B9
Certificate issuer:       /CN=41D988C453AB5CA96DA778B690390450C6345EEE
Certificate serial:       7E7BCB2AED373F33DDF96412B37DD9A4EBFF9E3D
Authority key identifier: 41:D9:88:C4:53:AB:5C:A9:6D:A7:78:B6:90:39:04:50:C6:34:5E:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41D988C453AB5CA96DA778B690390450C6345EEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/323830343a6633383a3a2f33322d3334203d3e20323633353731.roa
Signing time:             Wed 27 Dec 2023 16:54:35 +0000
ROA not before:           Wed 27 Dec 2023 16:49:35 +0000
ROA not after:            Wed 25 Dec 2024 16:54:35 +0000
asID:                     263571
IP address blocks:        2804:f38::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:7b:cb:2a:ed:37:3f:33:dd:f9:64:12:b3:7d:d9:a4:eb:ff:9e:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41D988C453AB5CA96DA778B690390450C6345EEE
        Validity
            Not Before: Dec 27 16:49:35 2023 GMT
            Not After : Dec 25 16:54:35 2024 GMT
        Subject: CN=A8D63402A8E8D7B41A3B03AB95BFA51158ED15B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:09:5c:ce:e4:79:19:84:6f:f9:c4:7d:86:48:
                    b6:e1:80:52:a2:56:21:32:e0:03:59:f9:c0:2b:02:
                    9a:b1:d0:ba:47:9f:3e:4b:15:6b:ce:b9:ec:fc:47:
                    c6:94:45:02:dc:e4:e2:bb:7c:b7:a5:4f:0f:6a:00:
                    33:70:35:00:28:1f:35:79:81:2a:27:ff:9a:04:e2:
                    8d:b1:e3:1d:6b:a1:eb:ce:aa:0d:a7:47:64:60:a4:
                    c6:19:19:e2:84:c4:bc:fe:0e:d8:e4:ae:bc:9c:2b:
                    2a:f6:40:e0:45:e2:db:68:2a:85:67:af:a1:e7:91:
                    22:2c:7f:07:34:a5:85:44:36:86:4b:66:6f:57:97:
                    05:7f:89:83:69:7d:b3:f4:fe:a4:5b:5b:7a:e7:ce:
                    6a:0d:7b:c9:ad:00:99:d9:02:ff:3a:dd:90:05:e8:
                    58:13:3d:b3:1f:5d:26:98:72:b9:83:1f:13:91:cb:
                    ce:56:9f:6d:34:47:86:20:94:a7:98:44:68:e9:f7:
                    e0:f9:89:14:29:45:64:34:c5:36:e4:12:1c:fa:bf:
                    3c:28:da:63:9f:20:8c:1f:61:07:f5:b2:ad:57:aa:
                    60:81:fa:59:62:55:d9:7f:ac:ce:28:93:40:41:27:
                    b2:c5:ac:7f:a4:30:d2:f7:58:46:3e:d2:bf:86:91:
                    fe:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D6:34:02:A8:E8:D7:B4:1A:3B:03:AB:95:BF:A5:11:58:ED:15:B9
            X509v3 Authority Key Identifier:
                keyid:41:D9:88:C4:53:AB:5C:A9:6D:A7:78:B6:90:39:04:50:C6:34:5E:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/41D988C453AB5CA96DA778B690390450C6345EEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41D988C453AB5CA96DA778B690390450C6345EEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/323830343a6633383a3a2f33322d3334203d3e20323633353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f38::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:7a:e1:4e:89:49:57:67:d5:21:7e:20:1b:eb:cf:3e:5b:b3:
         9b:b3:1d:31:9d:62:36:e5:08:89:b9:73:5d:ae:31:c5:4e:f5:
         b4:2a:ac:51:cf:11:3d:be:2b:27:b0:b7:59:a6:34:d0:47:3e:
         b4:f8:9a:d8:3f:14:46:2a:d0:6d:d9:78:b5:4d:72:8c:49:f0:
         50:b5:a4:e4:c0:a6:1d:3b:3e:04:02:4a:b4:6d:07:b1:bb:78:
         00:50:26:10:7a:45:45:bb:97:90:3f:1f:3c:bc:8c:57:ed:e8:
         92:f2:0c:8b:e4:f3:0d:c4:09:60:53:1f:7a:19:1a:b1:bb:a8:
         c6:9f:4f:0a:09:0c:68:8b:0c:f1:da:c4:16:c2:5d:b7:f9:e2:
         47:d0:64:11:23:42:7b:f3:8b:2d:ff:75:0c:a9:ec:b6:6d:27:
         28:09:f3:02:2a:0c:67:f5:fb:30:64:77:2f:9a:99:06:c2:63:
         74:83:06:d2:cb:10:f9:16:40:86:91:9c:fc:a9:26:9d:ec:43:
         5b:46:f6:45:86:ae:66:44:24:6f:be:41:b9:2c:4e:d9:16:ce:
         f8:6b:41:70:b7:a6:ac:d6:99:10:33:26:b5:b0:d3:ed:ed:56:
         72:c3:7c:a2:9e:f9:a9:b6:67:68:ec:15:4f:cd:98:a9:19:3e:
         a6:ed:9a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org