Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/323830343a353766343a3a2f33322d3438203d3e20323638303937.roa
File:                     323830343a353766343a3a2f33322d3438203d3e20323638303937.roa (raw, json)
Hash identifier:          CICC9b9vxm1x6mvrYxyMhf8JgX7jz6vnLdw657FQ/yE=
Subject key identifier:   FF:06:24:09:DC:2C:73:73:8B:5E:D2:89:17:68:61:EF:8F:80:0F:6D
Certificate issuer:       /CN=C38F0EC3DA3C88117EF77FA3AAEC72340F4C437E
Certificate serial:       226C2E4C7947DE645F29BCA3EF6066282D08B127
Authority key identifier: C3:8F:0E:C3:DA:3C:88:11:7E:F7:7F:A3:AA:EC:72:34:0F:4C:43:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C38F0EC3DA3C88117EF77FA3AAEC72340F4C437E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/323830343a353766343a3a2f33322d3438203d3e20323638303937.roa
Signing time:             Mon 04 Dec 2023 14:26:40 +0000
ROA not before:           Mon 04 Dec 2023 14:21:40 +0000
ROA not after:            Mon 02 Dec 2024 14:26:40 +0000
asID:                     268097
IP address blocks:        2804:57f4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:6c:2e:4c:79:47:de:64:5f:29:bc:a3:ef:60:66:28:2d:08:b1:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C38F0EC3DA3C88117EF77FA3AAEC72340F4C437E
        Validity
            Not Before: Dec  4 14:21:40 2023 GMT
            Not After : Dec  2 14:26:40 2024 GMT
        Subject: CN=FF062409DC2C73738B5ED289176861EF8F800F6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e2:f4:f3:83:71:b3:a0:0c:53:21:22:f5:10:
                    20:36:4e:f0:08:d3:f0:8e:df:4f:21:de:9a:a9:8f:
                    03:d8:9b:46:fe:40:71:ec:68:73:ee:eb:68:58:69:
                    9f:c4:86:2e:37:f6:04:1b:3a:9a:e9:af:42:49:d8:
                    77:d8:92:87:cb:a9:f2:af:9a:4a:54:92:d1:18:e2:
                    15:b6:e6:d3:da:4e:ed:27:dc:fd:bc:10:1b:af:32:
                    a1:00:7c:5d:a0:94:bc:9d:63:3d:58:cf:5b:00:14:
                    9f:18:7b:87:c3:ed:c0:28:3f:a1:20:ea:8e:2a:59:
                    65:36:df:34:3b:44:59:ad:a1:ea:97:a7:2b:a3:96:
                    64:37:1c:55:9b:dd:29:f0:6e:32:13:ca:4a:c9:45:
                    8b:9e:ee:ba:6d:aa:76:f0:c2:80:09:f5:6c:c3:7a:
                    98:48:85:2b:ff:b3:86:25:23:2b:2b:d6:0a:92:7b:
                    0a:93:53:d6:78:44:de:8d:5a:94:ff:ae:5a:85:0b:
                    eb:3e:02:f0:f4:54:c9:82:41:bb:2c:45:be:71:5b:
                    c0:6d:77:a8:f1:f9:31:12:de:a9:76:ec:64:d1:83:
                    4d:98:92:95:11:18:fa:cf:6a:05:e9:ab:f5:47:fb:
                    ee:1d:f4:f9:f2:9c:89:e7:cb:f9:9a:cc:01:cf:79:
                    2c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:06:24:09:DC:2C:73:73:8B:5E:D2:89:17:68:61:EF:8F:80:0F:6D
            X509v3 Authority Key Identifier:
                keyid:C3:8F:0E:C3:DA:3C:88:11:7E:F7:7F:A3:AA:EC:72:34:0F:4C:43:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/C38F0EC3DA3C88117EF77FA3AAEC72340F4C437E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C38F0EC3DA3C88117EF77FA3AAEC72340F4C437E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/323830343a353766343a3a2f33322d3438203d3e20323638303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:57f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:45:24:1e:7d:80:b4:1b:4c:c3:27:25:51:5e:44:fb:07:8e:
         fc:ac:b0:fe:b9:34:33:88:33:87:f6:ac:9f:17:a5:7b:68:ea:
         d4:8f:15:b4:ee:c1:d8:cc:d2:65:92:d7:97:7c:30:79:d4:a2:
         b0:b0:76:aa:98:5d:17:3b:7f:55:f4:06:34:83:4a:fd:76:4f:
         26:fe:62:bd:ae:f4:91:2e:60:7e:f5:db:c0:5b:57:fd:4e:e1:
         b5:db:30:38:ac:48:a6:92:47:46:ac:38:6d:1e:09:bd:dd:41:
         3b:8e:ff:a9:6c:79:55:07:64:f7:4a:51:79:ce:75:13:6b:ac:
         49:77:00:eb:71:f3:bd:a0:f0:57:46:c8:ac:a1:ae:e2:d0:bd:
         ff:9a:fb:89:55:dd:8d:54:08:82:b9:73:4d:12:33:4f:64:95:
         8b:96:7c:36:4e:ff:07:a5:2e:5a:ca:ad:69:3b:03:40:a9:bf:
         bf:16:41:43:ec:ed:69:d0:20:48:81:a3:9f:b5:24:3a:ae:9a:
         92:4c:bd:e8:73:d9:89:29:98:79:d4:06:e4:dd:fa:c7:e9:03:
         70:92:8a:f4:e2:07:30:07:cb:5e:60:07:d2:5b:93:8c:6c:e8:
         a5:5e:85:26:35:cc:13:0b:ea:d5:0e:2b:dc:7c:65:5c:5b:00:
         7b:25:0e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 12 22:43:43 2024 by rpki-client on console-fra.rpki-client.org