Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a323030303a3a2f33362d3336203d3e20323635343936.roa
File:                     323830343a333530383a323030303a3a2f33362d3336203d3e20323635343936.roa (raw, json)
Hash identifier:          0G3ld0SoponUgdLhi2LTAi6PvOnyAmfNKJKk594InS8=
Subject key identifier:   0B:0D:95:1E:83:F2:9C:62:77:E5:80:D5:72:B9:37:D6:54:7F:1D:2B
Certificate issuer:       /CN=1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517
Certificate serial:       750D9E80B580C3218DB9E9954F612471CB2C2086
Authority key identifier: 14:53:E0:F3:4C:FC:80:20:A8:BB:A2:A1:7C:CD:B7:CA:BC:9C:05:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a323030303a3a2f33362d3336203d3e20323635343936.roa
Signing time:             Mon 03 Apr 2023 10:56:36 +0000
ROA not before:           Mon 03 Apr 2023 10:51:36 +0000
ROA not after:            Mon 01 Apr 2024 10:56:36 +0000
asID:                     265496
IP address blocks:        2804:3508:2000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:0d:9e:80:b5:80:c3:21:8d:b9:e9:95:4f:61:24:71:cb:2c:20:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517
        Validity
            Not Before: Apr  3 10:51:36 2023 GMT
            Not After : Apr  1 10:56:36 2024 GMT
        Subject: CN=0B0D951E83F29C6277E580D572B937D6547F1D2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:40:73:e1:d1:ca:ef:a0:e3:8c:ec:a0:60:ee:
                    57:7a:ca:f9:2c:7c:b7:47:67:43:b2:cf:8e:8b:33:
                    b9:e7:41:5e:ce:be:65:63:7a:23:7b:55:91:28:7d:
                    69:8d:f7:87:4b:90:f0:cb:f7:6b:0c:b4:35:31:f2:
                    c2:eb:74:46:34:fc:10:c2:44:82:80:06:53:6e:d0:
                    a8:46:c9:1e:45:57:01:4e:cd:2c:30:cf:53:86:6a:
                    a4:54:d9:1f:f4:eb:27:9e:a1:e9:e6:d6:35:23:cf:
                    fc:b4:6e:c2:08:1a:cf:cf:5e:00:0d:13:bb:84:2e:
                    c3:64:34:32:0a:61:71:c4:1e:a2:73:58:60:06:9a:
                    4d:49:02:f5:a2:74:df:dc:5a:30:da:86:c6:f2:dd:
                    8a:af:f5:65:e9:7d:a2:9e:03:cd:bc:f0:2b:5e:92:
                    2c:29:56:d4:4d:d9:6f:df:02:eb:13:1d:f3:f3:d5:
                    f4:0e:54:ab:2b:0b:14:86:22:b8:a3:ee:47:38:ab:
                    b0:71:03:27:a1:fa:57:41:73:ac:49:ae:13:20:b4:
                    5d:77:30:8b:88:d8:8f:fa:ae:b9:1e:99:34:55:08:
                    87:e3:9b:d0:ce:b0:42:05:51:0d:ce:4f:13:48:60:
                    68:aa:26:29:c7:89:38:5f:7a:71:24:f2:37:ad:90:
                    8e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:0D:95:1E:83:F2:9C:62:77:E5:80:D5:72:B9:37:D6:54:7F:1D:2B
            X509v3 Authority Key Identifier:
                keyid:14:53:E0:F3:4C:FC:80:20:A8:BB:A2:A1:7C:CD:B7:CA:BC:9C:05:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a323030303a3a2f33362d3336203d3e20323635343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3508:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a1:45:7c:12:6b:ba:6a:0f:74:cd:d7:b2:57:da:ff:99:5b:b0:
         ff:41:13:75:9a:8a:04:cc:c8:5a:69:f9:bc:f9:7c:4c:55:99:
         72:9f:5f:bd:f8:8b:db:f8:a6:72:ab:f9:88:af:54:72:09:e5:
         40:e1:30:99:65:3c:f7:fd:b9:5d:cd:42:90:1c:91:95:97:90:
         90:60:30:54:0e:ef:da:3f:58:b5:6a:2d:69:2d:40:4d:02:d4:
         e2:ca:e7:2e:58:e2:a2:7c:d0:04:c7:12:76:7e:04:18:bd:25:
         29:96:0c:63:4c:71:c4:5c:c1:59:b4:8e:5f:eb:08:97:0d:87:
         bd:a4:01:c1:b8:74:30:84:72:64:e0:03:b7:1b:32:a1:8a:7b:
         f6:a8:11:63:bc:01:9b:d5:b5:8c:e9:90:0a:5f:86:b1:a3:05:
         6a:de:39:be:01:b9:4b:a2:f3:80:c3:06:25:8c:58:b6:f8:0a:
         78:49:4d:7b:9a:87:9e:5f:e3:a9:d9:60:1e:7b:0c:92:22:35:
         1d:e9:df:2d:fc:8e:df:4d:62:01:b3:95:83:39:47:c2:0d:31:
         a0:91:6b:81:c3:4d:1b:2b:53:22:8d:5e:a0:d5:1b:83:92:c2:
         a2:13:60:b4:27:bc:6b:be:4d:9b:67:09:43:49:b4:0d:1f:37:
         29:2a:fd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org