Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/323830343a356365383a3a2f33322d3332203d3e20323638393338.roa
File:                     323830343a356365383a3a2f33322d3332203d3e20323638393338.roa (raw, json)
Hash identifier:          mfQJ5MWNYiGieri2V4IDhHgKkFzDmLxDIzc9W3Ylte4=
Subject key identifier:   69:B2:9D:00:F8:37:F6:EB:D2:26:CD:ED:C9:42:16:93:3A:88:25:68
Certificate issuer:       /CN=128E6FAF19CE8C823CD70DA58CEF1F1B54332142
Certificate serial:       5B8BF417278F92B09F6DF98D652E9B857542EF58
Authority key identifier: 12:8E:6F:AF:19:CE:8C:82:3C:D7:0D:A5:8C:EF:1F:1B:54:33:21:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/128E6FAF19CE8C823CD70DA58CEF1F1B54332142.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/323830343a356365383a3a2f33322d3332203d3e20323638393338.roa
Signing time:             Thu 01 Feb 2024 20:29:40 +0000
ROA not before:           Thu 01 Feb 2024 20:24:40 +0000
ROA not after:            Thu 30 Jan 2025 20:29:40 +0000
asID:                     268938
IP address blocks:        2804:5ce8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:8b:f4:17:27:8f:92:b0:9f:6d:f9:8d:65:2e:9b:85:75:42:ef:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128E6FAF19CE8C823CD70DA58CEF1F1B54332142
        Validity
            Not Before: Feb  1 20:24:40 2024 GMT
            Not After : Jan 30 20:29:40 2025 GMT
        Subject: CN=69B29D00F837F6EBD226CDEDC94216933A882568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:23:ce:10:84:90:92:86:0e:08:9d:26:39:61:
                    38:04:06:c4:16:14:b8:94:dc:bf:a6:c1:b3:e5:c6:
                    5c:17:95:00:e1:4e:50:ce:4a:61:1b:91:ab:a6:04:
                    21:6f:14:8e:d2:1d:87:e3:eb:f1:1a:d5:1c:cb:a8:
                    cf:7e:44:f9:56:15:ac:66:3d:16:8b:9c:c9:08:0c:
                    f0:39:07:df:3d:10:92:a9:14:e2:69:fe:6c:56:03:
                    cf:bc:b5:84:9a:08:b6:82:fc:d5:ef:23:f8:21:ab:
                    8e:bf:37:88:58:b3:ed:f6:b6:1d:da:f9:f9:3a:7d:
                    ed:a2:65:8c:d4:fe:9a:f1:a1:6f:2d:15:30:71:db:
                    1e:0b:36:9f:d3:c1:50:3f:59:92:04:00:a7:75:ce:
                    13:3f:11:44:92:de:e9:89:e5:7b:a4:14:c3:1b:f2:
                    3c:87:e4:aa:0c:e0:6a:f1:d0:9f:09:0d:db:2d:14:
                    6c:64:27:4b:54:91:ab:d9:a6:43:76:31:a2:cd:5f:
                    ae:dc:b2:6a:95:19:58:4b:92:3c:36:6d:d4:d1:62:
                    c2:3d:31:47:03:da:88:78:b2:79:b1:c8:b0:97:91:
                    0b:a1:b4:7d:b1:d8:e1:9b:e7:00:fe:e0:9b:a5:5d:
                    d2:95:ff:0f:19:e3:29:3b:4d:6b:76:9b:f2:31:88:
                    e3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B2:9D:00:F8:37:F6:EB:D2:26:CD:ED:C9:42:16:93:3A:88:25:68
            X509v3 Authority Key Identifier:
                keyid:12:8E:6F:AF:19:CE:8C:82:3C:D7:0D:A5:8C:EF:1F:1B:54:33:21:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/128E6FAF19CE8C823CD70DA58CEF1F1B54332142.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/128E6FAF19CE8C823CD70DA58CEF1F1B54332142.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/323830343a356365383a3a2f33322d3332203d3e20323638393338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ce8::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:92:a1:0e:06:7b:2a:da:7a:8e:c0:9f:dd:fe:e0:5b:79:0c:
         45:de:02:96:5c:34:0d:13:4b:cc:07:88:e0:98:c8:4a:fa:24:
         b9:4e:12:f5:8e:49:53:e2:a7:fb:d9:86:8f:08:74:37:2d:20:
         dc:91:51:75:1f:a1:31:94:15:40:ca:e9:bf:bc:67:27:78:80:
         77:0b:85:e4:49:82:e4:88:79:ce:d8:d9:57:9e:c2:0d:66:90:
         e7:bc:86:65:d7:cb:bf:16:19:2b:1f:6e:c2:2e:b1:ef:ec:e8:
         c6:2c:79:91:aa:60:9a:b2:95:03:ce:89:e9:20:9c:7b:6e:fd:
         5e:5a:62:8c:78:6a:f1:53:cc:fa:9c:56:bf:19:0d:05:54:2d:
         fa:2f:73:52:bd:5a:e2:73:8b:90:76:0c:ba:de:47:95:38:3e:
         0d:0c:09:25:4e:23:9e:2e:89:c2:93:2c:72:df:34:e6:42:92:
         7e:db:a4:a6:c9:e4:0b:1f:3d:17:8d:4d:b0:89:56:94:28:65:
         3c:cd:bb:0f:a1:86:b8:31:96:62:d9:2e:64:21:cd:0c:1a:48:
         00:f0:68:3f:cb:b0:35:cb:d7:bd:6a:a6:59:4f:6f:b7:0c:d9:
         0c:7b:09:47:2d:0b:43:b1:b2:ea:9e:46:09:99:24:3e:a9:4d:
         9e:96:f0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org