Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/323830343a346131383a3a2f33322d3332203d3e20323637323138.roa
File:                     323830343a346131383a3a2f33322d3332203d3e20323637323138.roa (raw, json)
Hash identifier:          iUIvqLc+FWlRGwHG83TUuons8+tICfdInH6zVwEq1VI=
Subject key identifier:   FE:E7:4A:5F:8B:2D:B6:5E:1B:B8:7B:44:11:60:07:D6:9A:6C:82:88
Certificate issuer:       /CN=8A625A2C7A687327755280A68A944EED49133491
Certificate serial:       2881CCB13B56D4D9E7337DA17796D14FE91AA02E
Authority key identifier: 8A:62:5A:2C:7A:68:73:27:75:52:80:A6:8A:94:4E:ED:49:13:34:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A625A2C7A687327755280A68A944EED49133491.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/323830343a346131383a3a2f33322d3332203d3e20323637323138.roa
Signing time:             Sun 18 Feb 2024 03:17:23 +0000
ROA not before:           Sun 18 Feb 2024 03:12:23 +0000
ROA not after:            Sun 16 Feb 2025 03:17:23 +0000
asID:                     267218
IP address blocks:        2804:4a18::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:81:cc:b1:3b:56:d4:d9:e7:33:7d:a1:77:96:d1:4f:e9:1a:a0:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A625A2C7A687327755280A68A944EED49133491
        Validity
            Not Before: Feb 18 03:12:23 2024 GMT
            Not After : Feb 16 03:17:23 2025 GMT
        Subject: CN=FEE74A5F8B2DB65E1BB87B44116007D69A6C8288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:aa:56:18:61:12:64:a2:6f:df:b0:9e:50:00:
                    e9:71:f5:5e:0b:c0:4b:3c:e1:62:51:f8:93:a6:80:
                    27:21:1f:22:ce:2e:7e:d9:12:78:b1:05:d7:f6:1d:
                    3c:f8:24:d1:8d:2e:24:13:e7:c2:23:77:fc:3a:c1:
                    99:aa:7d:f5:8f:40:83:17:55:a1:06:3e:3d:71:b4:
                    22:26:28:a0:1d:e5:5e:cc:58:c4:c5:66:5d:36:ba:
                    96:d0:39:e5:1d:21:b8:0f:6b:ad:a3:e6:60:03:2f:
                    44:13:da:2c:39:48:47:fe:07:00:aa:36:ef:e6:fd:
                    d8:cb:17:d1:59:0c:29:da:52:12:f3:4f:7a:37:ee:
                    a7:75:04:be:c3:44:ac:75:07:8a:de:14:e8:48:c7:
                    e9:99:48:e7:19:74:10:f7:d3:56:3e:8d:4e:48:66:
                    cc:c4:ee:04:14:ad:0a:d7:68:66:56:81:b6:4d:be:
                    85:27:a5:b0:86:2a:36:b0:41:20:93:ce:8d:af:bc:
                    7f:b6:05:47:84:c2:da:72:2e:5b:35:df:55:f9:b1:
                    0d:89:db:e0:fd:32:98:b4:b1:83:eb:7a:0f:5c:68:
                    b0:cb:6b:2c:f2:86:a5:0d:05:e4:b1:9a:8c:55:14:
                    d7:dc:4d:11:58:6d:8c:c9:48:5e:1f:14:3d:53:28:
                    b9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E7:4A:5F:8B:2D:B6:5E:1B:B8:7B:44:11:60:07:D6:9A:6C:82:88
            X509v3 Authority Key Identifier:
                keyid:8A:62:5A:2C:7A:68:73:27:75:52:80:A6:8A:94:4E:ED:49:13:34:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/8A625A2C7A687327755280A68A944EED49133491.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A625A2C7A687327755280A68A944EED49133491.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/323830343a346131383a3a2f33322d3332203d3e20323637323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a18::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:b4:8d:9e:f3:59:7c:79:15:95:ba:e1:d6:2e:73:47:03:bd:
         c9:2e:0f:70:dd:e9:67:76:aa:c3:62:26:56:68:33:df:0f:01:
         94:77:b0:a1:27:cc:31:30:01:0e:4a:a2:20:92:2c:ae:c7:57:
         d2:97:2e:77:46:c2:7f:c8:d7:4f:8f:fe:0a:5f:94:8a:86:80:
         81:54:7e:e2:f1:c4:5c:02:0c:fd:08:92:59:35:97:61:12:14:
         53:43:6f:75:fa:d0:b0:1c:92:d5:13:97:04:be:81:14:91:00:
         26:6e:a6:6e:b1:d6:f0:2c:08:26:90:e0:b4:04:b9:8e:67:99:
         0e:05:9c:fc:67:a0:da:9a:9f:26:5c:57:6b:e6:aa:11:e8:6f:
         6f:77:3b:30:9b:25:5f:37:4a:aa:51:9e:3c:9e:e2:7e:3d:23:
         82:3b:7a:78:99:25:6a:64:4a:65:b8:a2:69:97:56:22:33:b6:
         7d:46:7a:08:02:49:a1:a1:4d:0a:46:5f:4b:26:b8:ed:02:e8:
         b9:d6:94:71:fd:72:6f:11:f0:c4:d8:59:e6:2a:7e:58:94:9a:
         d3:3a:69:8f:8b:a4:95:26:4c:8b:fe:bb:5f:36:59:53:92:1e:
         da:dc:23:7d:cb:3c:41:14:5f:a1:fd:2d:7d:6b:d3:39:e4:fa:
         1d:3f:05:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org