Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/1/323830343a333734383a3a2f33322d3332203d3e20323636343031.roa
File:                     323830343a333734383a3a2f33322d3332203d3e20323636343031.roa (raw, json)
Hash identifier:          nbCNuEhat9M9mY13WzwrgoBFnLYWQIgVq02B2W3sEl8=
Subject key identifier:   9C:FB:46:FF:82:78:9A:A4:E8:AB:90:B5:B3:DF:6E:A9:B8:0C:D3:6D
Certificate issuer:       /CN=5350C3F0DEB1EC513832C678B649B9E213241AEB
Certificate serial:       422CD94A4491B7272AD7E10C4154DE0C23AE93D1
Authority key identifier: 53:50:C3:F0:DE:B1:EC:51:38:32:C6:78:B6:49:B9:E2:13:24:1A:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5350C3F0DEB1EC513832C678B649B9E213241AEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/1/323830343a333734383a3a2f33322d3332203d3e20323636343031.roa
Signing time:             Wed 13 Mar 2024 18:03:41 +0000
ROA not before:           Wed 13 Mar 2024 17:58:41 +0000
ROA not after:            Wed 12 Mar 2025 18:03:41 +0000
asID:                     266401
IP address blocks:        2804:3748::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:2c:d9:4a:44:91:b7:27:2a:d7:e1:0c:41:54:de:0c:23:ae:93:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5350C3F0DEB1EC513832C678B649B9E213241AEB
        Validity
            Not Before: Mar 13 17:58:41 2024 GMT
            Not After : Mar 12 18:03:41 2025 GMT
        Subject: CN=9CFB46FF82789AA4E8AB90B5B3DF6EA9B80CD36D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a5:3f:5f:d9:f2:da:e6:0a:84:ac:c5:46:bc:
                    9b:3f:37:26:4e:5a:4f:15:a8:02:19:ed:aa:63:97:
                    82:25:17:12:04:0f:09:c8:07:63:dd:68:3e:58:26:
                    b8:71:0e:27:67:5d:04:30:3c:d4:b4:7d:80:c6:aa:
                    66:18:3c:3f:06:84:75:cd:2b:c0:39:99:b3:96:80:
                    a9:6c:6a:6c:00:0a:4e:53:59:c1:21:23:f2:3f:b7:
                    a1:fc:72:a6:e1:ce:ed:6e:43:89:1c:9e:5c:30:02:
                    5e:70:b7:53:19:26:fe:21:eb:11:5b:e1:04:0a:71:
                    3b:0a:e9:f3:77:53:e1:c5:1a:01:f5:22:04:ad:80:
                    b2:8d:95:7a:10:b4:92:7a:b9:4f:d9:f6:7e:a3:14:
                    28:da:74:10:c3:73:73:56:26:27:44:f8:bd:fd:5d:
                    55:1e:b2:73:cf:66:85:f1:c9:a8:fa:48:05:e7:dd:
                    c0:1b:49:60:02:6a:28:b5:3d:4c:22:7e:6c:f4:a3:
                    49:b6:4c:e1:04:87:b5:32:a4:04:34:b6:84:13:6c:
                    9b:2c:57:85:ff:7d:b4:3b:7b:3d:ae:d9:8a:66:bb:
                    87:5a:ce:61:4c:a8:86:05:57:d2:f1:5e:b8:dc:51:
                    47:e3:69:de:26:f1:1e:b0:88:bf:8a:6b:8d:f9:71:
                    c1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:FB:46:FF:82:78:9A:A4:E8:AB:90:B5:B3:DF:6E:A9:B8:0C:D3:6D
            X509v3 Authority Key Identifier:
                keyid:53:50:C3:F0:DE:B1:EC:51:38:32:C6:78:B6:49:B9:E2:13:24:1A:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/1/5350C3F0DEB1EC513832C678B649B9E213241AEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5350C3F0DEB1EC513832C678B649B9E213241AEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/1/323830343a333734383a3a2f33322d3332203d3e20323636343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3748::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:f4:56:db:77:14:d4:ab:74:be:8b:8e:29:d0:ae:b8:2e:d7:
         65:90:a4:51:85:ff:36:2f:cd:f0:1f:1d:68:cb:1a:97:1c:d4:
         ce:59:99:b9:bd:a1:da:20:42:a5:8c:49:67:cb:82:d5:db:20:
         8d:1e:be:28:76:10:5a:42:b7:de:ce:27:ad:f7:78:2e:59:22:
         c6:56:4e:88:b9:02:09:6e:cb:c1:79:5f:5d:5d:04:59:b9:43:
         ba:b9:56:37:ec:c5:94:41:8c:f3:7f:7f:7f:c0:3d:fd:cf:08:
         cf:2e:20:df:d0:1d:61:bd:bd:f1:64:71:1f:f1:0a:d1:b0:97:
         df:21:5a:50:12:af:9b:6a:03:af:b7:09:91:1d:25:bf:3d:2c:
         e6:7f:06:97:6e:95:21:ab:fa:63:d1:2b:2c:27:0b:06:87:48:
         15:15:f0:2f:2d:92:6c:d4:b6:44:24:be:6e:ff:e5:db:bb:2d:
         a5:25:25:18:a4:2e:70:cb:c6:58:67:f2:61:63:ee:39:01:8a:
         a6:ad:fb:d5:6b:94:8f:b8:ca:32:01:f9:c6:6b:a1:ae:dc:84:
         90:c2:e9:0d:b1:74:9b:30:c6:30:1c:e8:14:a4:1f:61:1d:16:
         18:53:d3:ae:ca:a2:f4:26:4d:d7:5c:80:94:c9:f3:29:41:bd:
         65:ef:35:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:14 2024 by rpki-client on console-ams.rpki-client.org