Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a613030303a3a2f33352d3335203d3e20323635343936.roa
File:                     323830343a333530383a613030303a3a2f33352d3335203d3e20323635343936.roa (raw, json)
Hash identifier:          4/P0VnxaXg97/6PSQoF6wKH8W5MVeQrnxwSDKknArY0=
Subject key identifier:   93:80:87:9E:BE:82:C0:5B:C8:91:B0:9B:08:B1:6C:D1:87:59:F6:58
Certificate issuer:       /CN=1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517
Certificate serial:       37264F41ACC314D4F7A8CF28CEFD31746649F801
Authority key identifier: 14:53:E0:F3:4C:FC:80:20:A8:BB:A2:A1:7C:CD:B7:CA:BC:9C:05:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a613030303a3a2f33352d3335203d3e20323635343936.roa
Signing time:             Mon 03 Apr 2023 10:56:37 +0000
ROA not before:           Mon 03 Apr 2023 10:51:37 +0000
ROA not after:            Mon 01 Apr 2024 10:56:37 +0000
asID:                     265496
IP address blocks:        2804:3508:a000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:26:4f:41:ac:c3:14:d4:f7:a8:cf:28:ce:fd:31:74:66:49:f8:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517
        Validity
            Not Before: Apr  3 10:51:37 2023 GMT
            Not After : Apr  1 10:56:37 2024 GMT
        Subject: CN=9380879EBE82C05BC891B09B08B16CD18759F658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:96:0d:4a:75:fc:d5:b4:e8:35:d7:37:a3:05:
                    cb:62:cd:0c:9f:05:c6:73:fe:0e:ac:1d:3f:b5:88:
                    4c:29:7e:6b:ff:9c:b1:a4:e8:63:56:41:dd:4d:24:
                    76:28:61:59:a5:2f:5f:bc:b2:d0:10:e9:b6:51:81:
                    20:e2:c1:3c:79:2d:04:78:00:ea:a7:20:be:99:0d:
                    7c:46:0c:ca:86:3e:f4:fa:10:fc:98:25:d6:bc:b8:
                    bb:30:28:e4:eb:26:75:60:c2:0f:74:1b:df:8b:75:
                    4a:6e:ca:5b:48:d8:08:38:97:a8:b5:5a:2f:74:a5:
                    68:c5:b5:62:46:ab:aa:ac:9a:c9:2b:40:b3:43:73:
                    7c:01:aa:60:3a:5c:f3:28:2d:1e:70:e8:3b:11:ec:
                    4b:a7:fb:78:ae:6f:e7:29:e7:be:63:91:c5:07:9e:
                    6c:a2:2a:dc:bf:7f:b0:90:94:db:ce:45:23:70:d8:
                    9c:d7:9b:7e:28:66:79:96:28:f1:85:d2:85:52:cf:
                    2f:5b:c3:97:0e:1a:0b:0d:a9:16:73:6b:87:68:73:
                    99:f2:53:2c:b5:14:58:db:03:4f:14:d1:94:9d:71:
                    84:1a:e2:c2:75:87:9f:2b:f6:ba:c1:ba:4d:0f:e2:
                    85:74:23:5e:53:21:0b:85:54:af:bd:a0:d8:79:fc:
                    ae:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:80:87:9E:BE:82:C0:5B:C8:91:B0:9B:08:B1:6C:D1:87:59:F6:58
            X509v3 Authority Key Identifier:
                keyid:14:53:E0:F3:4C:FC:80:20:A8:BB:A2:A1:7C:CD:B7:CA:BC:9C:05:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a613030303a3a2f33352d3335203d3e20323635343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3508:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         bb:d4:21:80:c9:68:b4:09:6a:95:ba:31:eb:0a:c9:b8:d0:ec:
         cf:d6:22:71:3b:62:c7:fc:55:01:a2:c0:5c:4f:b3:33:81:fc:
         49:ee:a0:fa:7d:66:e9:80:91:95:21:ea:0b:5c:de:b5:76:d3:
         b0:c3:a8:bd:f2:e9:34:b9:e3:44:5b:cf:ce:ea:c6:57:9d:49:
         65:5e:a8:4f:e1:72:6b:c9:5a:d1:71:57:0b:1c:25:68:b0:a9:
         91:0c:69:02:72:f0:b3:c5:e3:25:8b:a0:13:32:1a:79:8a:35:
         a7:d5:86:f9:a9:b0:ca:a4:d3:60:40:6b:4e:80:14:3e:35:c3:
         8d:7b:03:20:ad:f5:4a:43:41:61:96:73:12:6e:53:9d:37:da:
         af:8c:af:b2:f6:fc:3c:a6:f2:17:72:3a:95:2b:f0:de:e1:f4:
         86:f9:bf:a7:23:50:26:3e:3d:23:a7:87:01:c1:97:cc:99:e1:
         14:3e:8c:49:fd:18:e2:f1:b7:06:4b:d6:1d:74:b1:8b:41:51:
         c5:fe:a8:6a:87:66:f7:67:9a:3e:ae:50:4c:c6:b0:12:75:a0:
         8a:c2:38:dd:32:0f:32:51:76:84:09:72:34:e1:b6:76:bd:1f:
         01:73:df:60:0d:59:2a:40:1d:c5:7a:63:ed:41:58:51:c9:0e:
         7a:74:4b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org