Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a633030303a3a2f33362d3336203d3e20323635343936.roa
File:                     323830343a333530383a633030303a3a2f33362d3336203d3e20323635343936.roa (raw, json)
Hash identifier:          SDIN62m3c04gCA3+RmLwmvV1Tgafw0+bcY1Y8quN3ew=
Subject key identifier:   68:62:5E:B6:AB:07:45:90:EA:CB:9F:AC:CA:A8:91:B4:6A:BF:51:FF
Certificate issuer:       /CN=1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517
Certificate serial:       0DDCAEED18ADBFE6C3797975F6AAEA869E25E5D4
Authority key identifier: 14:53:E0:F3:4C:FC:80:20:A8:BB:A2:A1:7C:CD:B7:CA:BC:9C:05:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a633030303a3a2f33362d3336203d3e20323635343936.roa
Signing time:             Mon 03 Apr 2023 10:56:37 +0000
ROA not before:           Mon 03 Apr 2023 10:51:37 +0000
ROA not after:            Mon 01 Apr 2024 10:56:37 +0000
asID:                     265496
IP address blocks:        2804:3508:c000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:dc:ae:ed:18:ad:bf:e6:c3:79:79:75:f6:aa:ea:86:9e:25:e5:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517
        Validity
            Not Before: Apr  3 10:51:37 2023 GMT
            Not After : Apr  1 10:56:37 2024 GMT
        Subject: CN=68625EB6AB074590EACB9FACCAA891B46ABF51FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:24:50:f1:0a:4c:0e:f0:90:ad:8c:6d:64:68:
                    dd:fe:a1:b0:3f:30:05:3f:c4:9b:6a:23:26:5a:2b:
                    4a:d2:77:9e:d0:a1:10:bd:aa:b4:59:be:80:54:b6:
                    58:32:e4:18:37:91:d0:4e:bf:a0:6e:5a:ab:ea:37:
                    69:2e:1a:bc:6e:dd:0e:39:ff:c9:ec:08:ce:a3:71:
                    dc:11:c2:00:1f:de:e4:04:66:fa:c1:2c:24:c6:c9:
                    e1:f3:75:d4:52:59:d9:8d:24:86:fe:36:2c:8c:d7:
                    75:09:1c:df:ae:a2:f3:6d:87:72:9b:65:71:fd:0d:
                    9f:f0:b8:2d:db:3c:da:fc:59:91:62:11:23:83:a7:
                    a8:95:48:51:25:3a:de:d7:b5:a1:73:16:9a:53:a0:
                    62:c5:a2:ef:01:9e:b8:45:73:dc:1a:09:56:17:d8:
                    30:3e:83:4f:be:a8:fe:11:41:11:e2:25:5e:2b:f6:
                    1a:e0:9e:f1:c3:bd:9d:38:06:db:3d:3d:34:32:0d:
                    30:58:6a:3e:97:b2:00:96:34:1d:06:3e:3b:41:68:
                    e1:5f:36:57:1a:97:ce:1d:f3:a5:17:93:17:3c:d7:
                    48:94:f4:22:53:d8:b6:92:5d:db:7b:a1:12:7b:9e:
                    e6:11:38:6a:24:d7:f6:89:a7:72:62:8c:53:6f:33:
                    66:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:62:5E:B6:AB:07:45:90:EA:CB:9F:AC:CA:A8:91:B4:6A:BF:51:FF
            X509v3 Authority Key Identifier:
                keyid:14:53:E0:F3:4C:FC:80:20:A8:BB:A2:A1:7C:CD:B7:CA:BC:9C:05:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a633030303a3a2f33362d3336203d3e20323635343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3508:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5e:a6:ed:da:2c:33:c1:e8:ea:c5:26:2c:28:f7:47:1d:8e:87:
         a8:c9:92:64:8f:6c:56:7e:b0:9b:6b:83:d9:9c:bf:b7:95:13:
         d6:4b:d9:ae:89:9a:14:e0:82:1f:39:f8:c4:f3:c9:14:22:7b:
         7f:2f:cc:d4:11:ff:8e:14:26:a3:0e:87:cf:76:e1:f4:78:be:
         91:d0:3e:28:55:01:4f:a3:24:f0:61:ae:76:41:d5:29:22:7c:
         92:ea:b7:5f:5f:16:e5:b1:22:46:b1:2f:c9:66:47:f0:09:c9:
         54:b6:ba:64:1d:01:2d:33:d7:5e:e3:c5:22:9e:56:49:bf:18:
         d9:90:ef:6c:50:e5:c3:32:c0:17:4a:1b:3f:44:c1:e0:dd:23:
         12:d5:06:02:f1:00:f6:dc:9c:20:e8:4c:18:94:ce:36:9d:8b:
         11:23:36:d8:69:12:c5:93:75:fe:0a:b9:07:26:3f:95:dc:01:
         f4:af:0f:6e:65:3d:4c:24:00:21:39:53:70:5c:79:06:ea:ab:
         30:b4:9f:b7:dc:10:de:cc:1b:b2:90:43:81:12:95:5b:3b:b6:
         5c:9f:03:3f:99:a7:9b:f5:1e:c9:b1:67:fa:3a:81:82:cd:8c:
         b4:0e:ec:18:d4:b7:01:99:3f:0b:13:48:78:2c:cd:07:ba:56:
         f1:89:d8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org