Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/0/323830343a343566383a3a2f33322d3332203d3e20323636393538.roa
File:                     323830343a343566383a3a2f33322d3332203d3e20323636393538.roa (raw, json)
Hash identifier:          oTpe3cx0n3+X6NTEvLNy/TswKpugUsHbX48UIW0tVWg=
Subject key identifier:   6B:68:6E:BF:13:EC:EE:4A:D0:7F:E7:E5:DC:36:04:2C:80:53:20:4E
Certificate issuer:       /CN=885C33EE8E30210425E8E25473319F24E3B686FB
Certificate serial:       5C3896C58066982D8ACADF3CFF62736FDEF9A51F
Authority key identifier: 88:5C:33:EE:8E:30:21:04:25:E8:E2:54:73:31:9F:24:E3:B6:86:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/885C33EE8E30210425E8E25473319F24E3B686FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/0/323830343a343566383a3a2f33322d3332203d3e20323636393538.roa
Signing time:             Thu 09 Nov 2023 21:00:00 +0000
ROA not before:           Thu 09 Nov 2023 20:55:00 +0000
ROA not after:            Thu 07 Nov 2024 21:00:00 +0000
asID:                     266958
IP address blocks:        2804:45f8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:38:96:c5:80:66:98:2d:8a:ca:df:3c:ff:62:73:6f:de:f9:a5:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=885C33EE8E30210425E8E25473319F24E3B686FB
        Validity
            Not Before: Nov  9 20:55:00 2023 GMT
            Not After : Nov  7 21:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:29:d4:c2:b9:96:8e:11:67:da:47:43:99:cd:
                    32:47:78:57:3b:65:e8:c5:ba:44:e6:5e:16:74:74:
                    0f:76:80:5f:6d:9b:8d:83:1a:c9:72:b0:d5:9b:24:
                    7a:73:33:09:95:0e:4a:9e:ea:e7:95:d8:52:82:2d:
                    64:5c:67:28:5d:f7:c9:e2:be:e0:c4:54:21:f8:a2:
                    07:58:2c:e5:9e:68:e7:5f:40:a6:78:55:db:79:0a:
                    f9:b9:02:0c:f3:bf:88:ff:eb:eb:ea:7e:17:9b:28:
                    91:48:5d:f6:8e:71:f1:01:db:96:b5:bb:31:0b:2a:
                    bd:81:db:6a:52:65:f4:c4:6d:ae:8f:72:7c:c3:9b:
                    c9:52:2b:9a:4a:6b:1a:c2:ba:bc:6a:70:87:91:97:
                    02:ed:33:bd:01:a5:9e:43:da:2a:c2:51:fb:eb:70:
                    4b:cc:18:1d:d6:66:2e:b4:cf:d7:fa:cb:54:bb:3b:
                    01:58:b9:6a:f2:ca:08:96:aa:f7:a9:61:43:75:d4:
                    18:8c:20:83:a9:d5:bb:6d:a4:06:cf:d7:53:e9:58:
                    e4:f5:2e:5c:0b:34:a2:df:48:92:dc:cc:fa:d2:0d:
                    e9:5b:11:21:da:82:5e:e3:60:d6:66:7a:49:95:4a:
                    38:a7:d0:4c:dc:ec:a9:44:7a:53:d2:90:9d:c4:5e:
                    3f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:68:6E:BF:13:EC:EE:4A:D0:7F:E7:E5:DC:36:04:2C:80:53:20:4E
            X509v3 Authority Key Identifier:
                keyid:88:5C:33:EE:8E:30:21:04:25:E8:E2:54:73:31:9F:24:E3:B6:86:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/0/885C33EE8E30210425E8E25473319F24E3B686FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/885C33EE8E30210425E8E25473319F24E3B686FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/0/323830343a343566383a3a2f33322d3332203d3e20323636393538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:45f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:f8:ce:53:6c:ee:41:08:61:c1:b3:90:3a:bc:e6:23:b1:36:
         37:7d:0f:56:18:03:23:2a:90:64:b8:29:b9:1c:5d:e2:46:39:
         d9:48:87:52:0f:e0:2f:15:4c:2e:94:f8:26:55:c2:fd:cc:31:
         db:21:d5:6b:5b:50:93:91:13:2a:7e:a2:e9:fd:84:cf:7d:a9:
         34:03:65:b9:a4:b5:b1:0e:9a:f1:85:03:3e:42:a6:2d:19:09:
         1a:d1:e0:89:d7:54:77:19:a2:03:94:10:c7:86:ed:db:f8:27:
         30:a1:8d:b6:46:90:2a:28:0a:49:dc:5e:2d:c7:ea:b1:dc:d4:
         d7:20:ed:9a:33:10:85:be:5e:b2:08:1a:84:cf:ab:18:43:72:
         2d:95:05:41:08:fa:bd:6d:da:42:01:c9:e7:8a:d6:4c:97:f3:
         38:b6:b4:49:91:16:7d:70:c0:62:fa:43:d1:38:78:ae:95:a3:
         08:8e:9f:58:5a:c3:e6:37:a4:c7:b3:bc:11:7f:7b:43:4f:54:
         85:21:60:4f:ce:c4:01:7a:a9:c1:10:a6:5f:f2:cb:17:f2:19:
         29:38:2b:c1:0d:83:33:d5:15:23:2a:6d:53:93:1f:e0:68:9b:
         22:c2:be:ee:c4:a0:48:d1:4a:e8:ab:b7:0c:16:38:30:0e:20:
         53:5f:96:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:00 2024 by rpki-client on console-fra.rpki-client.org