Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9gam2s5zPGWK6ALGGvBUJwuqChgRLdgS3v29BoppNEbt/0/323830343a343938633a3a2f33322d3335203d3e20323637313930.roa
File:                     323830343a343938633a3a2f33322d3335203d3e20323637313930.roa (raw, json)
Hash identifier:          yg55c+ymcmQLULxtGKjM/0NH+91aJ2h+6Hk0667FpPM=
Subject key identifier:   68:E4:C3:92:A0:43:51:10:B6:25:D0:34:8B:B8:9A:24:C3:E9:76:88
Certificate issuer:       /CN=5E7203B9493916675F93645B378B46F917474811
Certificate serial:       338DB134DD28C6E1310521C06B44698041348480
Authority key identifier: 5E:72:03:B9:49:39:16:67:5F:93:64:5B:37:8B:46:F9:17:47:48:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5E7203B9493916675F93645B378B46F917474811.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9gam2s5zPGWK6ALGGvBUJwuqChgRLdgS3v29BoppNEbt/0/323830343a343938633a3a2f33322d3335203d3e20323637313930.roa
Signing time:             Tue 10 Oct 2023 18:00:00 +0000
ROA not before:           Tue 10 Oct 2023 17:55:00 +0000
ROA not after:            Tue 08 Oct 2024 18:00:00 +0000
asID:                     267190
IP address blocks:        2804:498c::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:8d:b1:34:dd:28:c6:e1:31:05:21:c0:6b:44:69:80:41:34:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E7203B9493916675F93645B378B46F917474811
        Validity
            Not Before: Oct 10 17:55:00 2023 GMT
            Not After : Oct  8 18:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e0:ff:89:8d:99:56:26:49:2e:d1:6f:42:36:
                    d0:85:60:9c:96:2f:6f:7b:7a:83:ca:14:9b:95:28:
                    52:93:cb:eb:39:73:d4:17:78:26:2e:68:8e:16:6b:
                    96:f8:39:46:28:b5:1d:b6:4e:4a:54:ca:45:76:c9:
                    58:6a:72:b1:2c:f5:11:13:1f:d3:30:2b:25:a2:7c:
                    5a:d1:e1:18:fe:7f:06:77:ab:88:fa:d2:c1:8c:6e:
                    e2:d2:ba:98:f3:b6:9c:fc:e9:83:5a:96:20:12:65:
                    42:61:81:25:44:73:1f:80:a4:8d:de:e0:cf:9f:67:
                    50:04:4e:5e:30:c8:97:de:57:0b:89:ac:bd:27:e3:
                    32:e1:56:c8:84:b9:0c:1b:0f:e3:c3:f7:8a:46:b0:
                    0c:ec:82:e3:f5:a7:08:25:bf:89:85:e8:03:af:86:
                    8b:8a:f0:8a:cf:71:53:f0:32:22:33:3a:ac:cc:55:
                    79:fc:86:7f:9a:a7:21:c5:db:19:67:e3:2e:90:c5:
                    a2:4b:45:5b:4b:d0:25:82:f1:80:f4:98:ce:e2:a3:
                    13:03:66:f3:1e:4e:af:ac:b4:4c:dd:64:48:6c:78:
                    9d:fb:ac:7f:ff:b8:8b:e8:93:56:70:80:bf:d4:29:
                    39:6e:7e:39:ef:3a:02:a4:58:f1:22:af:0f:c6:d8:
                    b7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E4:C3:92:A0:43:51:10:B6:25:D0:34:8B:B8:9A:24:C3:E9:76:88
            X509v3 Authority Key Identifier:
                keyid:5E:72:03:B9:49:39:16:67:5F:93:64:5B:37:8B:46:F9:17:47:48:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9gam2s5zPGWK6ALGGvBUJwuqChgRLdgS3v29BoppNEbt/0/5E7203B9493916675F93645B378B46F917474811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5E7203B9493916675F93645B378B46F917474811.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9gam2s5zPGWK6ALGGvBUJwuqChgRLdgS3v29BoppNEbt/0/323830343a343938633a3a2f33322d3335203d3e20323637313930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:498c::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:dd:de:7a:06:3a:f6:ee:52:89:9b:ae:57:1d:28:ef:d7:98:
         d9:28:43:7a:c8:c0:1b:35:95:a7:43:f0:61:fe:cc:ce:6c:3e:
         40:e0:6d:e5:f1:be:f0:61:f7:46:04:c9:80:e3:3f:31:15:5c:
         91:f6:67:25:f4:4b:b1:10:5c:54:33:a4:fc:e0:61:94:77:5f:
         d5:b0:d6:74:73:01:94:eb:43:c6:cb:d1:42:f4:16:3b:fe:6e:
         6f:7e:78:bd:04:6a:95:c3:3b:a9:8d:31:af:90:27:72:00:47:
         bc:d4:ca:58:9a:71:19:81:82:92:7b:fc:be:df:2e:59:95:23:
         3b:b6:f3:3e:e1:1a:19:23:34:73:cd:c1:42:d7:4d:4b:ba:ae:
         37:a3:88:e7:49:5c:5a:c3:d1:c9:57:a1:8e:db:37:1d:2c:1e:
         fc:82:8b:e4:f1:e1:3c:33:eb:1a:1c:95:2c:cb:9a:5b:f9:be:
         9e:b2:76:ea:fa:37:21:fb:cb:06:03:a8:0d:1e:c1:dc:4e:3c:
         b8:63:fe:5f:ab:4b:90:10:f4:16:fd:a4:f0:68:1a:e1:00:31:
         4a:65:4b:bc:8a:38:89:ba:14:18:84:a9:f4:ba:0d:10:f1:3d:
         9c:ec:2c:53:ac:d1:b4:8c:76:c8:cb:67:97:cc:13:ee:06:56:
         59:c1:f6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org