Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8SFkxGm1makxA9R1tiev1K9jkKkUKMrmgqRuzB1BZCZn/0/323830343a356537633a3a2f33322d3332203d3e20323639303336.roa
File:                     323830343a356537633a3a2f33322d3332203d3e20323639303336.roa (raw, json)
Hash identifier:          f4VRZLdwaUo5F53DSB5y2mn6ltZnQcxMDzHjtAb0f0k=
Subject key identifier:   53:CE:A9:D8:BB:09:2A:00:17:C6:95:42:3F:D9:BB:B7:AC:0B:99:CD
Certificate issuer:       /CN=32B0E6548F3A2FFBFDFF7091C549B32A759B6617
Certificate serial:       191E099E78FB449269AC0536F2156BE22159B257
Authority key identifier: 32:B0:E6:54:8F:3A:2F:FB:FD:FF:70:91:C5:49:B3:2A:75:9B:66:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32B0E6548F3A2FFBFDFF7091C549B32A759B6617.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8SFkxGm1makxA9R1tiev1K9jkKkUKMrmgqRuzB1BZCZn/0/323830343a356537633a3a2f33322d3332203d3e20323639303336.roa
Signing time:             Fri 08 Dec 2023 18:43:12 +0000
ROA not before:           Fri 08 Dec 2023 18:38:12 +0000
ROA not after:            Fri 06 Dec 2024 18:43:12 +0000
asID:                     269036
IP address blocks:        2804:5e7c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:1e:09:9e:78:fb:44:92:69:ac:05:36:f2:15:6b:e2:21:59:b2:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32B0E6548F3A2FFBFDFF7091C549B32A759B6617
        Validity
            Not Before: Dec  8 18:38:12 2023 GMT
            Not After : Dec  6 18:43:12 2024 GMT
        Subject: CN=53CEA9D8BB092A0017C695423FD9BBB7AC0B99CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:40:a5:2b:f6:50:e8:d5:ae:29:65:fb:20:1d:
                    69:75:2b:a1:44:7a:63:bb:34:18:69:42:b1:b5:0a:
                    f7:96:2c:97:fc:aa:bc:6e:4c:65:92:5a:6b:77:90:
                    25:9d:87:66:22:dc:73:22:a7:a7:dc:83:b4:36:29:
                    74:9b:77:4c:77:3a:72:80:4e:3a:60:0b:f4:ae:51:
                    3a:e7:23:42:cb:0f:e3:30:6e:66:0c:ed:1c:ee:08:
                    ed:9e:7c:08:c9:5b:08:67:d7:ba:e5:a1:d9:af:c0:
                    b5:f9:e3:ab:10:43:7e:44:40:a6:62:70:b5:f6:76:
                    69:92:25:6b:35:67:54:0d:ad:04:33:a3:c9:63:8c:
                    f6:48:b5:aa:29:d0:ed:25:7a:e4:55:d3:82:c3:fe:
                    4b:d4:30:3b:da:6f:bd:5c:bd:68:97:37:49:0a:79:
                    36:cf:75:f2:bb:ab:b1:56:c1:1f:fa:ba:ef:b9:f2:
                    7e:6d:e0:b7:c8:bb:e1:e3:b4:ae:49:67:60:e0:3e:
                    3e:7a:e7:39:a5:35:9d:99:03:f5:fd:92:f3:4d:cd:
                    aa:c3:45:ff:ef:23:3b:58:ef:03:e8:96:68:df:05:
                    9a:09:e4:c3:65:a8:a0:ba:8a:d6:1e:bd:65:0c:43:
                    47:48:43:0d:0c:a9:c4:a3:78:3f:59:be:81:04:10:
                    78:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CE:A9:D8:BB:09:2A:00:17:C6:95:42:3F:D9:BB:B7:AC:0B:99:CD
            X509v3 Authority Key Identifier:
                keyid:32:B0:E6:54:8F:3A:2F:FB:FD:FF:70:91:C5:49:B3:2A:75:9B:66:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8SFkxGm1makxA9R1tiev1K9jkKkUKMrmgqRuzB1BZCZn/0/32B0E6548F3A2FFBFDFF7091C549B32A759B6617.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32B0E6548F3A2FFBFDFF7091C549B32A759B6617.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8SFkxGm1makxA9R1tiev1K9jkKkUKMrmgqRuzB1BZCZn/0/323830343a356537633a3a2f33322d3332203d3e20323639303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:51:52:ce:98:90:c0:57:a0:47:b1:5e:9e:44:42:73:27:f6:
         ca:b4:40:8d:ca:96:55:8e:fd:5b:27:bd:be:e7:bf:91:27:ef:
         a5:a9:5a:68:9e:a1:bb:0e:82:bb:9b:31:c3:d7:5d:7f:05:27:
         d7:75:47:96:2f:8e:38:44:c0:bc:8a:4f:d1:4a:80:9e:33:91:
         8c:6c:d6:0e:56:67:d3:91:1c:fe:5a:0d:10:4f:d7:a5:c5:19:
         c8:ca:84:09:09:04:70:0f:cb:ec:54:ed:63:fc:91:b4:ae:5e:
         32:c7:46:3c:84:5e:5f:40:9f:0f:e1:dd:e3:50:8d:b4:86:00:
         58:a7:21:fc:f5:12:ab:db:5b:89:bf:a3:8d:94:0c:86:d5:d7:
         be:1b:94:e1:9b:87:4d:fe:93:c2:2b:10:3e:3b:9f:2d:5a:1c:
         bb:30:b8:5a:aa:4f:7f:6c:37:66:10:cb:eb:67:68:44:7c:46:
         94:3b:e6:dc:00:41:01:93:81:ca:cc:69:e5:82:ea:1d:cf:6f:
         6f:91:3b:d9:5f:52:19:bf:fd:6d:14:75:31:5a:37:ba:b9:f7:
         2e:04:e8:b3:37:82:c8:87:b8:6c:26:33:9f:20:67:98:bd:b4:
         71:80:eb:12:96:68:03:70:63:3f:fe:18:c6:90:e4:a9:16:2d:
         c0:49:db:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:00 2024 by rpki-client on console-fra.rpki-client.org