Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/323830343a326135303a3a2f33322d3438203d3e20323632383139.roa
File:                     323830343a326135303a3a2f33322d3438203d3e20323632383139.roa (raw, json)
Hash identifier:          4X8EVyDBTy+2AVz+KcXaE6CIYDmhEQm0PjCW+EyGmxE=
Subject key identifier:   32:D2:97:A6:34:16:0E:BF:DF:70:95:FA:5A:3A:21:BF:37:4A:5F:7C
Certificate issuer:       /CN=DF5D9196947A22D5306AECA8BF48DCC6C7B54C7D
Certificate serial:       3B9D22E41E8FBD14FC687086DEA92E3AB56F4D0A
Authority key identifier: DF:5D:91:96:94:7A:22:D5:30:6A:EC:A8:BF:48:DC:C6:C7:B5:4C:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DF5D9196947A22D5306AECA8BF48DCC6C7B54C7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/323830343a326135303a3a2f33322d3438203d3e20323632383139.roa
Signing time:             Thu 06 Jul 2023 14:42:56 +0000
ROA not before:           Thu 06 Jul 2023 14:37:56 +0000
ROA not after:            Thu 04 Jul 2024 14:42:56 +0000
asID:                     262819
IP address blocks:        2804:2a50::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:9d:22:e4:1e:8f:bd:14:fc:68:70:86:de:a9:2e:3a:b5:6f:4d:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF5D9196947A22D5306AECA8BF48DCC6C7B54C7D
        Validity
            Not Before: Jul  6 14:37:56 2023 GMT
            Not After : Jul  4 14:42:56 2024 GMT
        Subject: CN=32D297A634160EBFDF7095FA5A3A21BF374A5F7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:04:d2:cf:94:de:07:b7:62:b6:be:7e:0e:5c:
                    0e:59:17:cb:1f:98:c9:90:c2:d6:e9:a9:6f:5a:d4:
                    69:9c:d2:16:f2:2d:2d:22:02:ac:b3:62:1a:0b:d3:
                    e7:71:74:78:3b:37:82:e6:fa:7b:dc:df:da:9c:ea:
                    b6:f1:91:ff:e4:8b:6f:64:7d:68:54:6b:6a:75:4f:
                    5c:ac:7c:66:57:3d:62:74:85:04:48:ba:34:fc:6f:
                    50:b3:39:16:67:6c:56:1e:0b:6f:7a:18:56:42:f4:
                    f8:2e:ff:37:62:46:06:6b:f1:ec:7e:76:dc:21:79:
                    31:d1:8c:ce:02:1c:a7:40:8e:2f:04:1f:ce:97:52:
                    a1:93:15:30:e3:72:67:37:6c:35:f1:cd:ae:2c:25:
                    ee:3b:6d:71:81:f6:12:09:cd:2f:9e:cb:be:c8:59:
                    e3:3d:7d:25:05:99:a4:3f:9e:cb:cb:85:a4:f2:24:
                    a1:3d:d3:88:48:9e:70:bc:21:db:20:c2:59:3b:0b:
                    49:0f:9e:68:10:3a:b1:7b:a0:64:ab:68:7d:5a:46:
                    eb:9c:a6:16:a3:fa:39:95:7d:a2:f4:0f:d4:41:89:
                    8f:b0:14:fb:38:77:8c:7e:df:e0:2a:15:d7:6f:5e:
                    51:ba:61:9f:4b:bd:49:40:55:28:01:9d:b3:31:12:
                    99:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D2:97:A6:34:16:0E:BF:DF:70:95:FA:5A:3A:21:BF:37:4A:5F:7C
            X509v3 Authority Key Identifier:
                keyid:DF:5D:91:96:94:7A:22:D5:30:6A:EC:A8:BF:48:DC:C6:C7:B5:4C:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/DF5D9196947A22D5306AECA8BF48DCC6C7B54C7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DF5D9196947A22D5306AECA8BF48DCC6C7B54C7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/323830343a326135303a3a2f33322d3438203d3e20323632383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2a50::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:da:15:cd:e9:e8:99:85:a0:77:01:f5:95:1e:99:dd:57:4d:
         af:8c:d9:42:a2:3e:fb:0a:d2:5b:3c:14:47:53:14:eb:50:cc:
         e5:84:7b:69:23:18:9d:ef:bb:9f:7e:e0:4e:00:d9:65:20:a9:
         d4:45:ac:41:55:fd:c0:83:f5:fc:93:34:53:3a:e1:b9:7a:30:
         2e:5d:58:e7:82:13:1d:8e:78:fb:07:4d:f0:0c:62:ce:6e:c0:
         e5:b0:f2:4c:d8:ae:49:72:6d:9e:58:47:3c:8b:27:7a:58:80:
         d5:00:bc:bf:43:09:12:00:2e:98:c0:d8:fd:6c:1f:f3:dc:47:
         7c:89:64:07:c3:d0:db:9e:b6:c2:1f:69:28:3b:b0:64:fe:47:
         f3:16:6a:27:af:e1:5c:99:b9:79:11:1f:de:d3:a2:62:0c:d7:
         2a:95:b3:d2:fb:13:84:c5:68:18:ce:5d:92:35:c0:f9:29:34:
         bd:fa:8e:a6:13:e1:e8:f4:64:91:1c:9a:cf:02:d1:d6:4a:9e:
         0d:5a:da:2c:8a:91:93:d6:5a:30:e4:25:bc:46:94:e2:bf:f9:
         be:bd:d9:65:d3:3e:c2:cd:11:96:27:07:a6:59:57:ca:26:38:
         1e:24:06:93:ae:21:74:fa:c0:74:79:48:9b:94:16:f6:ed:98:
         35:0a:d2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org