Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/323830343a346538383a3a2f33342d3334203d3e20323638323637.roa
File:                     323830343a346538383a3a2f33342d3334203d3e20323638323637.roa (raw, json)
Hash identifier:          Gw8BBq+Y+mahKq8ud6tgeH1P6s912hSmWqcCe47/F4I=
Subject key identifier:   47:4A:94:87:02:72:1C:BE:96:A8:0C:7E:50:28:96:58:70:42:FE:FD
Certificate issuer:       /CN=D8ECFE7B56C795535B855B9D4F0CD7E02E452649
Certificate serial:       34E10FDDDA3EAE032D93752381CA6D8A0F12E18D
Authority key identifier: D8:EC:FE:7B:56:C7:95:53:5B:85:5B:9D:4F:0C:D7:E0:2E:45:26:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8ECFE7B56C795535B855B9D4F0CD7E02E452649.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/323830343a346538383a3a2f33342d3334203d3e20323638323637.roa
Signing time:             Mon 02 Jan 2023 19:47:12 +0000
ROA not before:           Mon 02 Jan 2023 19:42:12 +0000
ROA not after:            Mon 01 Jan 2024 19:47:12 +0000
asID:                     268267
IP address blocks:        2804:4e88::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e1:0f:dd:da:3e:ae:03:2d:93:75:23:81:ca:6d:8a:0f:12:e1:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8ECFE7B56C795535B855B9D4F0CD7E02E452649
        Validity
            Not Before: Jan  2 19:42:12 2023 GMT
            Not After : Jan  1 19:47:12 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fc:58:2f:35:01:29:70:f6:0e:7e:f2:78:d3:
                    94:39:e3:46:12:95:48:0c:e5:a6:ba:dd:e8:b2:fa:
                    fc:b5:e1:63:04:65:03:0c:e0:2b:a8:d7:f5:b5:e6:
                    55:8f:63:7e:fe:06:81:1e:c5:0c:de:c1:de:44:c3:
                    b1:5b:75:62:66:2e:1f:29:cf:94:d8:51:15:21:86:
                    23:8b:9f:7a:96:db:bf:95:8e:8a:05:21:c9:bf:21:
                    4d:bd:c1:c1:3c:66:4f:e4:09:99:f6:3e:6e:33:52:
                    44:0c:4e:df:3d:91:ba:07:6c:01:95:8f:73:ae:fb:
                    90:c9:2e:34:74:6f:c5:6f:3c:db:22:62:29:03:9d:
                    b9:05:f9:ac:05:af:eb:70:34:82:f0:ac:75:42:f3:
                    11:61:fe:c2:77:37:84:6f:f1:fc:3b:20:0c:8a:1e:
                    25:16:3b:b0:f6:57:0e:a5:f8:ec:57:54:42:93:66:
                    7d:98:80:25:93:43:5d:f9:6e:fc:48:a5:b5:90:c0:
                    bd:73:49:d2:f6:d9:82:80:f2:88:58:f9:c1:1b:8d:
                    fa:0f:ea:1b:79:ae:94:cd:03:be:ad:ba:a9:26:b8:
                    26:02:53:a9:3b:d3:55:5d:b7:99:e2:b4:9c:1d:63:
                    82:53:27:18:d5:5a:eb:57:a4:55:89:be:f2:34:90:
                    d2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:4A:94:87:02:72:1C:BE:96:A8:0C:7E:50:28:96:58:70:42:FE:FD
            X509v3 Authority Key Identifier:
                keyid:D8:EC:FE:7B:56:C7:95:53:5B:85:5B:9D:4F:0C:D7:E0:2E:45:26:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/D8ECFE7B56C795535B855B9D4F0CD7E02E452649.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8ECFE7B56C795535B855B9D4F0CD7E02E452649.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/323830343a346538383a3a2f33342d3334203d3e20323638323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e88::/34

    Signature Algorithm: sha256WithRSAEncryption
         4c:ba:7e:c8:3e:81:d3:89:fc:f2:c2:c6:fe:69:47:89:53:51:
         e1:78:84:5a:ba:dd:a3:d1:2a:a4:1f:55:e2:ed:7e:0e:59:18:
         4c:76:8c:5c:1e:4e:e0:df:b2:f3:b1:e2:46:7c:96:ec:85:62:
         04:d1:ed:f6:05:62:72:25:f3:94:ac:f5:66:53:90:48:4a:2a:
         bb:16:e6:f4:19:4c:cd:a7:ff:15:d1:59:ce:9b:bc:f3:22:b5:
         a0:48:75:48:01:fb:4d:7c:68:a8:15:ee:26:cf:fd:70:cb:b5:
         17:92:0b:ef:c9:3b:33:49:4f:bf:ad:03:c4:a2:f6:27:f8:03:
         99:cc:13:95:50:0c:f4:e8:33:5d:9b:af:43:57:43:f5:ac:9b:
         e6:20:46:24:70:a5:0f:1f:08:71:00:14:32:31:5a:67:5c:ed:
         78:1c:d8:4c:6d:27:3d:b7:c6:a0:a1:e3:13:d7:15:1c:46:c4:
         87:46:2f:18:69:de:3c:16:b8:af:46:96:41:73:5b:c2:63:98:
         8a:6f:39:fe:7f:cd:d5:40:74:ec:9a:49:b8:df:12:23:22:99:
         39:f3:08:f4:47:8f:78:57:16:8c:26:54:8b:86:bd:a8:a6:6a:
         a6:34:f6:2d:bf:7c:a5:84:9b:f4:8d:ec:fa:35:0d:73:94:a6:
         2e:25:4f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org