Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a3a2f33362d3336203d3e20323635343936.roa
File:                     323830343a333530383a3a2f33362d3336203d3e20323635343936.roa (raw, json)
Hash identifier:          oQv+INlv1rnYZvnn0gH7Y9vj/n4s4eCGz+3ov+s+ckU=
Subject key identifier:   55:CD:C0:9B:BC:17:EA:87:38:4D:07:24:23:BB:D8:25:64:13:FA:3E
Certificate issuer:       /CN=1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517
Certificate serial:       41A88FF8AB88CC47E84080E2D23E57C4E6856EBA
Authority key identifier: 14:53:E0:F3:4C:FC:80:20:A8:BB:A2:A1:7C:CD:B7:CA:BC:9C:05:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a3a2f33362d3336203d3e20323635343936.roa
Signing time:             Mon 03 Apr 2023 10:56:38 +0000
ROA not before:           Mon 03 Apr 2023 10:51:38 +0000
ROA not after:            Mon 01 Apr 2024 10:56:38 +0000
asID:                     265496
IP address blocks:        2804:3508::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:a8:8f:f8:ab:88:cc:47:e8:40:80:e2:d2:3e:57:c4:e6:85:6e:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517
        Validity
            Not Before: Apr  3 10:51:38 2023 GMT
            Not After : Apr  1 10:56:38 2024 GMT
        Subject: CN=55CDC09BBC17EA87384D072423BBD8256413FA3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:55:96:fb:04:e2:c3:92:94:44:ec:ac:28:30:
                    70:a1:4f:fc:c1:54:2b:f6:8e:01:40:de:d2:a9:c1:
                    82:f8:f5:cd:f0:c4:84:01:44:8d:23:8c:17:a9:bd:
                    b7:11:92:f2:7d:cd:90:20:2a:76:f4:4f:83:d9:bd:
                    e7:b3:14:32:53:4c:33:7f:0b:97:30:85:f5:07:83:
                    44:49:fb:80:3c:de:14:ce:30:1d:ec:5d:bf:b9:7c:
                    71:bd:cf:14:41:94:97:f6:04:91:9c:7a:96:81:4b:
                    ad:ac:67:e1:06:0f:7b:9b:e1:53:9f:22:45:06:ea:
                    68:d1:ce:d7:82:26:90:40:76:30:c8:32:de:a6:a5:
                    cc:15:6c:e4:ba:42:18:a5:46:b2:e0:3f:e2:03:b0:
                    cf:31:10:cf:8b:25:9f:03:ba:26:3d:3c:ba:64:2b:
                    90:34:b6:cf:3f:00:e2:93:ef:83:1d:2e:41:48:dd:
                    b2:cd:75:2e:17:82:13:03:14:0c:1c:55:1b:14:17:
                    d3:6b:1d:8c:55:29:62:de:82:27:9f:05:4d:e1:b7:
                    e3:79:ba:58:6d:0d:12:df:b4:82:c7:0f:b0:25:ce:
                    c2:32:d2:31:d6:ca:50:89:57:da:cf:35:f4:d6:58:
                    a6:48:d2:f3:e0:38:ae:10:f3:a2:12:5b:78:4b:c7:
                    5c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:CD:C0:9B:BC:17:EA:87:38:4D:07:24:23:BB:D8:25:64:13:FA:3E
            X509v3 Authority Key Identifier:
                keyid:14:53:E0:F3:4C:FC:80:20:A8:BB:A2:A1:7C:CD:B7:CA:BC:9C:05:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a3a2f33362d3336203d3e20323635343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3508::/36

    Signature Algorithm: sha256WithRSAEncryption
         08:c7:07:65:b5:83:de:79:45:78:6b:24:26:0a:ce:4f:06:cd:
         aa:c0:52:03:8b:24:e6:31:eb:a7:dc:23:ec:35:5a:86:92:d1:
         66:01:77:ce:c0:f7:55:40:2d:27:44:7f:9c:d7:c6:09:05:37:
         e2:1b:d4:dd:e8:25:75:da:79:78:c0:27:cc:98:9e:b7:c5:65:
         1c:67:54:88:58:98:f0:2e:35:8a:b6:a3:e9:4d:18:2e:5d:6d:
         b4:b4:fa:a1:91:19:6c:2e:72:6a:65:2a:cf:6d:62:b6:a1:b3:
         1d:72:f6:11:8a:28:7b:8a:00:41:b6:ff:b2:00:c7:6c:10:71:
         21:c1:e2:3b:76:ae:26:b6:25:9e:88:65:a4:e8:42:63:66:94:
         ee:3b:7a:e6:31:0c:c5:f8:27:fc:ad:99:8d:92:48:54:70:e6:
         c1:e9:59:ff:95:28:57:9c:c2:f3:25:b1:f7:b0:b3:c6:f3:ff:
         28:bb:c6:9f:0b:de:10:06:e0:7d:48:7d:06:b3:b7:2e:41:86:
         72:87:fb:72:99:72:df:6d:86:b5:65:ce:0b:f8:e8:42:27:72:
         48:67:54:e2:2c:ad:cf:36:47:53:d0:30:f1:8e:6e:2d:03:b2:
         b9:17:da:b1:fe:27:79:cd:f1:67:a5:3b:8a:3f:93:b2:ff:85:
         8f:8a:e8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org