Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a383030303a3a2f33352d3335203d3e20323635343936.roa
File:                     323830343a333530383a383030303a3a2f33352d3335203d3e20323635343936.roa (raw, json)
Hash identifier:          ln9INNiJWv5StWXtZsYlaoMxMdZ9Gt3Xi7FPNfD5wNk=
Subject key identifier:   5B:ED:5D:44:B9:C7:5D:A6:68:87:ED:FE:D2:C6:5F:5C:1E:5A:04:6A
Certificate issuer:       /CN=1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517
Certificate serial:       64EAABB8DB48E66ED0D0898A6B42997943BD4D35
Authority key identifier: 14:53:E0:F3:4C:FC:80:20:A8:BB:A2:A1:7C:CD:B7:CA:BC:9C:05:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a383030303a3a2f33352d3335203d3e20323635343936.roa
Signing time:             Mon 03 Apr 2023 10:56:40 +0000
ROA not before:           Mon 03 Apr 2023 10:51:40 +0000
ROA not after:            Mon 01 Apr 2024 10:56:40 +0000
asID:                     265496
IP address blocks:        2804:3508:8000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:ea:ab:b8:db:48:e6:6e:d0:d0:89:8a:6b:42:99:79:43:bd:4d:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517
        Validity
            Not Before: Apr  3 10:51:40 2023 GMT
            Not After : Apr  1 10:56:40 2024 GMT
        Subject: CN=5BED5D44B9C75DA66887EDFED2C65F5C1E5A046A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:14:4c:db:96:95:ee:96:21:69:fd:15:43:99:
                    9f:24:ee:ca:1a:14:5a:0f:3c:5d:71:ef:4d:14:dc:
                    25:2e:6a:f5:f8:7f:0b:8a:7c:24:57:3a:8d:8a:00:
                    d7:eb:ef:12:1c:bd:80:70:d8:08:f6:1e:7e:92:63:
                    a6:08:3e:f6:8b:de:62:62:33:e6:59:bb:0e:15:ac:
                    cf:17:34:40:1e:46:5b:e1:f7:a7:79:58:87:08:b2:
                    00:03:08:c4:fc:ec:53:6f:4d:ec:73:68:02:b2:fb:
                    f1:7b:08:75:1a:0e:e0:73:8e:e1:e6:12:40:4b:1f:
                    90:4c:30:7f:df:d4:8a:eb:27:01:8b:0b:d6:d5:d0:
                    d5:f9:76:f5:f3:92:82:59:47:b5:f4:50:f5:ab:46:
                    d5:67:12:11:e0:04:16:30:1c:d2:75:71:43:84:0c:
                    59:f0:0a:d5:ac:ef:c8:06:d7:dc:d5:83:e1:c4:c1:
                    5d:85:ae:db:38:7e:e8:05:cb:e7:79:c4:7a:dc:10:
                    da:91:a4:a6:df:65:2b:b7:5c:37:6b:43:76:b1:cf:
                    33:e4:66:0a:dd:54:1b:35:25:10:f2:9f:f4:c3:1e:
                    6a:76:50:73:8c:e6:8a:bc:c6:d3:1e:c8:35:0c:16:
                    d2:0b:28:7c:95:85:ce:54:07:f3:4a:e4:15:2b:7f:
                    fc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:ED:5D:44:B9:C7:5D:A6:68:87:ED:FE:D2:C6:5F:5C:1E:5A:04:6A
            X509v3 Authority Key Identifier:
                keyid:14:53:E0:F3:4C:FC:80:20:A8:BB:A2:A1:7C:CD:B7:CA:BC:9C:05:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a383030303a3a2f33352d3335203d3e20323635343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3508:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         69:26:4f:e2:79:41:92:95:c0:03:2b:ec:5e:af:51:84:40:af:
         24:65:c5:63:4d:93:4c:1e:b6:72:9f:01:01:47:8a:01:be:80:
         b3:88:e7:b4:b3:2f:53:b3:d6:17:b4:b5:1a:c4:32:8e:e7:1b:
         87:26:67:6e:64:c7:32:5b:05:fd:68:06:d9:6f:e4:ec:4f:05:
         98:ea:61:71:23:74:4d:a7:a5:c8:cd:e0:91:e4:77:60:ee:0a:
         42:91:31:5f:32:8f:fa:73:83:4f:59:b7:88:d3:f7:58:10:e0:
         b9:52:2d:ee:59:77:48:56:c2:70:57:24:9d:63:52:6d:8f:2c:
         fc:1d:3c:ee:a0:ea:e7:51:0f:79:81:46:a6:48:0b:b0:1f:53:
         87:b3:4a:4f:86:42:48:a5:52:77:e6:f3:c6:de:ce:ec:0f:f9:
         a3:87:c1:84:47:97:c1:c1:d9:0f:c2:d4:45:08:79:9e:2e:de:
         e8:a2:49:ff:89:b8:98:c4:85:64:80:93:b9:11:c5:33:a5:00:
         ec:5c:1e:12:b4:c8:74:ac:fc:85:d7:38:50:e1:d3:62:84:5d:
         42:8a:b1:9a:54:48:23:0c:50:ca:ba:cc:38:87:27:29:a8:ed:
         08:18:a4:b4:ca:83:c3:41:6f:b6:c2:e1:cd:b1:20:08:49:54:
         45:60:ff:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org