Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a323030303a3a2f33352d3335203d3e20323635343936.roa
File:                     323830343a333530383a323030303a3a2f33352d3335203d3e20323635343936.roa (raw, json)
Hash identifier:          6zgLjMEyxN1Mx+1UHC5/umeL7OR35paeSD9jKgETJks=
Subject key identifier:   1C:EE:02:DB:BB:17:03:A9:DB:EF:F6:15:FA:B1:53:AD:1F:83:1C:4B
Certificate issuer:       /CN=1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517
Certificate serial:       644034A1A483FD2D0391CFC6AB28BC0D69224984
Authority key identifier: 14:53:E0:F3:4C:FC:80:20:A8:BB:A2:A1:7C:CD:B7:CA:BC:9C:05:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a323030303a3a2f33352d3335203d3e20323635343936.roa
Signing time:             Mon 03 Apr 2023 10:56:38 +0000
ROA not before:           Mon 03 Apr 2023 10:51:38 +0000
ROA not after:            Mon 01 Apr 2024 10:56:38 +0000
asID:                     265496
IP address blocks:        2804:3508:2000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:40:34:a1:a4:83:fd:2d:03:91:cf:c6:ab:28:bc:0d:69:22:49:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517
        Validity
            Not Before: Apr  3 10:51:38 2023 GMT
            Not After : Apr  1 10:56:38 2024 GMT
        Subject: CN=1CEE02DBBB1703A9DBEFF615FAB153AD1F831C4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:82:ff:bd:44:fb:9b:e6:dc:42:d3:04:d9:07:
                    32:9c:7a:90:47:1a:b5:54:3d:1b:e8:d9:4d:87:69:
                    23:8f:00:f4:f5:c5:b5:1f:5f:c4:1d:28:9d:05:82:
                    0d:d6:5a:a7:c3:d7:ca:55:1f:f9:26:e5:dc:73:2b:
                    d5:ac:03:c9:19:a8:57:54:df:4d:40:92:7d:cc:27:
                    b3:9d:f7:80:37:b9:54:ee:c8:51:57:1c:08:15:5a:
                    c9:4e:5f:0e:77:a5:95:8f:bf:f5:bc:d8:2d:99:af:
                    d9:5e:ac:88:89:a0:0d:9d:b5:f2:b1:1d:ec:36:18:
                    ac:76:aa:05:e4:fc:06:3c:8f:30:40:d2:57:a0:65:
                    01:0e:10:b0:f4:bb:5b:e7:e1:ce:b4:62:73:98:b6:
                    5f:1d:b2:fb:23:83:89:a6:60:ee:69:c7:93:c4:57:
                    a4:74:12:1f:cd:1b:80:ae:6f:07:b0:1e:43:d5:12:
                    1e:4a:fe:ec:48:15:af:cb:69:6d:3d:a9:b4:1e:56:
                    a0:d0:62:ed:bc:ea:ce:7f:77:5b:fc:29:90:74:1e:
                    6f:e5:b7:2c:6c:db:42:27:45:59:86:0b:67:3f:fc:
                    af:2e:dc:94:55:55:5d:45:b3:17:89:21:18:b4:73:
                    d3:b6:31:7d:40:c4:ec:c6:ce:c6:bc:57:d8:75:b0:
                    84:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:EE:02:DB:BB:17:03:A9:DB:EF:F6:15:FA:B1:53:AD:1F:83:1C:4B
            X509v3 Authority Key Identifier:
                keyid:14:53:E0:F3:4C:FC:80:20:A8:BB:A2:A1:7C:CD:B7:CA:BC:9C:05:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a323030303a3a2f33352d3335203d3e20323635343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3508:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         45:2b:3d:65:bc:38:0f:c0:86:f5:21:19:6d:74:af:eb:35:81:
         63:c4:06:3c:63:3d:f1:65:97:eb:92:dd:d6:ff:18:be:f8:05:
         41:68:ec:31:2d:e7:33:ba:46:3e:be:af:5e:b7:18:26:29:da:
         f3:d1:c9:24:46:93:e9:9b:c4:4b:c6:78:3a:63:4a:99:50:8a:
         cd:53:22:ca:0b:53:f5:3b:ef:68:15:ff:8e:8e:2c:e8:1f:ae:
         b5:6e:0c:f1:cd:11:72:f1:1d:52:19:e9:37:65:aa:f8:c8:69:
         d0:c3:cd:9b:b4:1d:f8:85:97:96:eb:1a:4b:50:c2:ba:56:58:
         1e:e2:da:07:37:99:d1:98:3f:ab:ba:c2:41:b0:18:d7:36:6b:
         8d:45:17:8e:91:40:11:69:63:ba:f1:5c:21:d6:ef:ec:c9:55:
         f1:4a:ad:4a:a3:22:a6:80:5e:1e:13:87:ab:d3:70:62:a5:16:
         a7:f9:ec:39:b7:33:0b:4e:8b:41:68:34:e2:2e:08:99:81:8b:
         8b:3f:b8:6d:f9:66:44:32:6a:5e:3c:c3:6d:fd:84:86:0f:77:
         4a:cc:b2:17:49:c7:44:39:6d:f7:d8:44:e3:1c:d0:25:30:b4:
         65:3a:3d:c7:2b:28:8a:e4:8f:1b:62:83:86:6f:4f:4b:6d:a8:
         6a:50:25:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org