Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a363030303a3a2f33362d3336203d3e20323635343936.roa
File:                     323830343a333530383a363030303a3a2f33362d3336203d3e20323635343936.roa (raw, json)
Hash identifier:          R1l600R5VVJK3sX3QjzCqOi5P9w7mdyXCy4WftusduA=
Subject key identifier:   6E:B8:F2:F3:5D:25:DC:6F:C7:5D:E8:D5:47:6F:7E:91:41:C0:34:73
Certificate issuer:       /CN=1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517
Certificate serial:       7ADB9CCAA60F429853CB52B8A08C6C1C372E1F5E
Authority key identifier: 14:53:E0:F3:4C:FC:80:20:A8:BB:A2:A1:7C:CD:B7:CA:BC:9C:05:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a363030303a3a2f33362d3336203d3e20323635343936.roa
Signing time:             Mon 03 Apr 2023 10:56:41 +0000
ROA not before:           Mon 03 Apr 2023 10:51:41 +0000
ROA not after:            Mon 01 Apr 2024 10:56:41 +0000
asID:                     265496
IP address blocks:        2804:3508:6000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:db:9c:ca:a6:0f:42:98:53:cb:52:b8:a0:8c:6c:1c:37:2e:1f:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517
        Validity
            Not Before: Apr  3 10:51:41 2023 GMT
            Not After : Apr  1 10:56:41 2024 GMT
        Subject: CN=6EB8F2F35D25DC6FC75DE8D5476F7E9141C03473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d8:0b:7a:9c:70:c5:f6:fc:9a:25:bd:11:b5:
                    f4:eb:b8:87:30:90:d8:67:d9:8b:16:58:47:f3:ce:
                    83:d2:0a:6c:07:99:15:b5:ca:c9:1e:a6:61:65:93:
                    3c:a4:08:43:d8:24:e4:7f:44:3f:b2:dc:ab:43:09:
                    d7:39:a1:8b:8e:77:2b:2d:c8:5e:bc:83:7e:dd:0e:
                    8a:92:9e:b9:e1:2b:9d:e8:d1:06:3e:03:91:48:47:
                    cd:e5:d0:37:7d:39:4a:54:94:a9:d3:52:c4:65:fa:
                    5d:d3:99:7e:ca:fd:51:14:4e:a0:6f:42:6d:60:a6:
                    01:72:13:0d:83:09:03:dd:87:c1:bb:04:bb:03:a6:
                    6f:90:08:b4:6a:06:19:c5:50:41:52:56:68:29:3d:
                    7d:c7:fd:e2:72:a9:f9:83:4a:67:ac:cd:ca:c9:67:
                    32:6d:bd:ef:46:ae:26:47:ae:c2:a0:f7:8b:8e:3e:
                    94:77:4d:a6:ef:9c:bc:74:96:47:bf:58:d0:fb:3c:
                    6c:bb:97:5f:47:c3:f0:01:90:92:21:d8:66:02:dc:
                    81:cc:51:96:45:c8:9c:48:d7:47:5c:a9:14:db:26:
                    26:76:bd:c8:32:9d:76:40:0b:31:cb:88:5c:6c:ea:
                    a2:56:e3:6b:20:d4:c6:44:87:30:34:b8:c0:21:78:
                    d6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B8:F2:F3:5D:25:DC:6F:C7:5D:E8:D5:47:6F:7E:91:41:C0:34:73
            X509v3 Authority Key Identifier:
                keyid:14:53:E0:F3:4C:FC:80:20:A8:BB:A2:A1:7C:CD:B7:CA:BC:9C:05:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a363030303a3a2f33362d3336203d3e20323635343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3508:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         79:8c:71:62:cf:8f:98:9b:7b:76:a5:61:37:47:3b:40:0a:98:
         00:e9:96:c3:10:16:a2:1f:9c:00:c8:be:49:d2:5c:6a:46:d1:
         16:de:fd:41:78:e7:32:07:a4:1b:8e:c3:c4:e5:98:af:03:30:
         b6:4b:16:1f:01:83:8b:53:71:55:13:2b:6b:32:e0:d6:87:c5:
         e6:6d:1c:74:66:42:dc:74:17:34:92:34:fb:e1:41:5b:95:7a:
         d1:e6:4f:f6:94:78:d2:dc:85:21:2d:e3:f9:07:0b:58:44:42:
         fa:34:96:58:fe:33:3f:1a:84:ec:25:13:02:35:6f:55:68:8b:
         40:19:44:4f:f8:7e:bb:04:5a:a7:86:69:95:ef:18:2d:c8:db:
         ff:f9:65:c2:48:8f:7b:1f:c0:a8:dc:65:62:f4:23:3f:22:e4:
         85:c0:1a:71:c5:a4:9f:05:29:fd:af:1a:3e:13:71:7d:bf:3b:
         39:5f:78:7e:f0:33:48:d4:59:de:94:23:c2:ad:95:38:74:5f:
         99:2b:94:92:dc:58:4f:c5:e2:76:e9:b9:5c:cd:e2:f9:f4:8a:
         57:9d:d1:3d:8f:cc:89:e3:f3:93:8a:d5:70:46:b1:da:f9:ea:
         cc:07:97:01:e3:2b:c7:b5:b6:e0:cc:f6:08:cb:1d:b5:49:98:
         01:80:b8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org