Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a373030303a3a2f33362d3336203d3e20323635343936.roa
File:                     323830343a333530383a373030303a3a2f33362d3336203d3e20323635343936.roa (raw, json)
Hash identifier:          RsOwMKk+11t0fAReRFp+mujpgfNU4y5OJlU7F2fx1bk=
Subject key identifier:   FF:A3:0E:73:08:7F:99:EE:C3:E9:93:08:20:F5:30:E3:FF:48:D3:D9
Certificate issuer:       /CN=1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517
Certificate serial:       2690A2ACBBA0A120DF4ADB274C96B272617B121B
Authority key identifier: 14:53:E0:F3:4C:FC:80:20:A8:BB:A2:A1:7C:CD:B7:CA:BC:9C:05:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a373030303a3a2f33362d3336203d3e20323635343936.roa
Signing time:             Mon 03 Apr 2023 10:56:42 +0000
ROA not before:           Mon 03 Apr 2023 10:51:42 +0000
ROA not after:            Mon 01 Apr 2024 10:56:42 +0000
asID:                     265496
IP address blocks:        2804:3508:7000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:90:a2:ac:bb:a0:a1:20:df:4a:db:27:4c:96:b2:72:61:7b:12:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517
        Validity
            Not Before: Apr  3 10:51:42 2023 GMT
            Not After : Apr  1 10:56:42 2024 GMT
        Subject: CN=FFA30E73087F99EEC3E9930820F530E3FF48D3D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:81:aa:d3:f9:55:04:12:93:88:00:38:1e:70:
                    25:df:e7:cc:82:86:b6:3e:c0:3a:d3:62:bb:79:93:
                    e9:21:e2:a5:85:14:2c:d6:51:f4:3a:87:2c:a6:eb:
                    ab:a9:4a:2a:6f:d4:62:ec:f8:a7:51:43:8a:4e:8a:
                    2a:c0:77:a7:99:fe:be:73:83:8d:89:7a:8c:b6:25:
                    19:fe:62:dc:89:95:5a:78:a6:96:aa:70:cf:86:a9:
                    fb:9f:b9:c0:6d:62:64:87:18:2b:3f:4c:e7:fb:27:
                    97:55:51:76:e5:fc:87:e2:61:0b:8e:6f:af:a6:cb:
                    bb:3a:1e:37:64:b4:1d:4d:96:3d:4a:5e:70:77:0d:
                    64:5c:54:da:e0:dc:c3:90:4a:9a:86:9e:ba:5d:d4:
                    78:1d:b1:ec:3e:2f:e4:86:ec:29:5f:ef:b4:7c:40:
                    df:e6:43:5e:e1:2e:a6:b3:b3:24:41:f2:de:ca:98:
                    22:d5:c4:fa:e8:c6:4c:fa:e5:8f:f3:21:50:5c:b6:
                    d7:10:27:39:73:00:a3:bc:74:23:0a:dc:70:e8:6f:
                    93:1b:e8:9a:2d:03:23:e0:89:bc:2b:b7:cf:14:62:
                    d1:12:23:f5:4b:54:15:24:f2:5a:44:b1:ed:84:0b:
                    06:c4:03:53:7d:4f:f2:7f:48:cc:c4:81:ed:80:c5:
                    3c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A3:0E:73:08:7F:99:EE:C3:E9:93:08:20:F5:30:E3:FF:48:D3:D9
            X509v3 Authority Key Identifier:
                keyid:14:53:E0:F3:4C:FC:80:20:A8:BB:A2:A1:7C:CD:B7:CA:BC:9C:05:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a373030303a3a2f33362d3336203d3e20323635343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3508:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         29:69:e0:bb:7b:49:57:13:f4:d4:a0:5e:21:60:f5:83:ce:c4:
         60:9c:95:64:c2:6c:52:54:17:90:70:5e:0a:41:eb:95:a4:d5:
         5c:74:4c:02:88:29:ec:34:66:df:42:d2:ab:66:4e:46:c4:e8:
         bc:b9:61:ce:df:cd:50:76:60:c5:8d:a4:cd:e7:95:cd:48:6a:
         86:6c:b1:13:12:ba:ec:cc:4e:68:eb:cf:06:35:ac:a3:48:19:
         0e:5c:c7:eb:cd:a1:89:aa:35:55:71:b4:a9:94:75:0a:f1:da:
         4b:dd:76:e1:bb:af:3c:75:44:72:c9:cb:91:77:32:f1:4a:13:
         06:05:ab:5f:ba:4b:02:e0:78:cd:ee:9c:bf:b2:d7:d4:42:f1:
         1f:67:09:e0:d6:3a:ef:ec:1c:39:a7:fe:98:01:03:33:0c:c4:
         6a:bb:f7:7c:13:c3:c1:39:f9:8f:0b:fc:22:c4:b0:75:39:bb:
         7e:19:e5:9b:35:e7:23:c2:3c:95:04:49:b0:03:5c:4d:89:52:
         5d:eb:5d:6c:43:8c:33:39:73:64:42:4a:cc:f4:61:b8:db:9c:
         15:30:5c:46:13:3c:84:d9:70:31:e6:08:4c:a7:7d:ea:74:08:
         bb:e6:09:27:30:3c:9b:64:a3:3b:e1:61:3b:af:3d:db:29:31:
         2f:38:fa:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org