Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/0/323830343a326331303a383030303a3a2f33332d3333203d3e20323635313932.roa
File:                     323830343a326331303a383030303a3a2f33332d3333203d3e20323635313932.roa (raw, json)
Hash identifier:          JF4QGPZrauvrHjdscf7X6IMPxy5lkrF4+kgemYmx51k=
Subject key identifier:   36:6C:59:8C:C6:FA:1E:D1:91:C9:27:12:D7:FA:F7:C6:07:D9:26:DD
Certificate issuer:       /CN=5300F5DDE4075958E44A38138BA9467A0B30154C
Certificate serial:       0EDB5C8D5F347F8AFB340253F86E1AACF0FA94FF
Authority key identifier: 53:00:F5:DD:E4:07:59:58:E4:4A:38:13:8B:A9:46:7A:0B:30:15:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5300F5DDE4075958E44A38138BA9467A0B30154C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/0/323830343a326331303a383030303a3a2f33332d3333203d3e20323635313932.roa
Signing time:             Thu 21 Mar 2024 19:02:43 +0000
ROA not before:           Thu 21 Mar 2024 18:57:43 +0000
ROA not after:            Thu 20 Mar 2025 19:02:43 +0000
asID:                     265192
IP address blocks:        2804:2c10:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:db:5c:8d:5f:34:7f:8a:fb:34:02:53:f8:6e:1a:ac:f0:fa:94:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5300F5DDE4075958E44A38138BA9467A0B30154C
        Validity
            Not Before: Mar 21 18:57:43 2024 GMT
            Not After : Mar 20 19:02:43 2025 GMT
        Subject: CN=366C598CC6FA1ED191C92712D7FAF7C607D926DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c0:2f:e2:28:fd:46:2f:15:04:19:8d:22:2f:
                    48:45:00:83:0b:a0:d9:8f:16:9d:b3:bb:3c:ed:da:
                    09:db:22:c2:f1:d1:d7:2f:70:31:ed:99:bc:e7:d4:
                    90:e7:ec:a0:57:73:8a:1b:ea:69:22:c5:28:e9:05:
                    b8:62:63:0a:61:47:96:ea:4a:ff:2a:8d:c1:10:c2:
                    d3:be:30:dd:77:84:4e:a3:5c:06:fc:59:9f:75:09:
                    75:9a:a7:cb:74:39:06:3b:06:ce:02:9f:12:c0:a4:
                    05:64:7e:4a:17:ce:56:82:0f:8a:a2:71:cb:44:77:
                    53:b5:30:4e:3b:87:79:88:48:89:69:b5:9c:1e:23:
                    7a:6a:32:c8:a9:19:ea:77:a7:cb:13:29:34:87:90:
                    2d:b5:bf:3c:aa:e7:aa:ef:84:cd:98:4c:63:68:ba:
                    d9:c5:33:fc:be:56:bb:95:12:3e:65:fd:62:7a:5c:
                    de:8f:a0:18:36:57:e4:04:ed:ca:63:6b:de:27:39:
                    6c:ad:59:fd:40:59:01:ba:d4:dc:76:a2:79:7f:d5:
                    64:ce:cb:06:84:2a:76:54:b1:a3:44:a7:ac:58:0d:
                    4c:43:7c:fc:2e:23:6b:c3:c1:14:85:96:42:b1:46:
                    27:d4:5d:00:da:78:ae:fb:92:12:7f:21:a8:c7:b4:
                    52:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:6C:59:8C:C6:FA:1E:D1:91:C9:27:12:D7:FA:F7:C6:07:D9:26:DD
            X509v3 Authority Key Identifier:
                keyid:53:00:F5:DD:E4:07:59:58:E4:4A:38:13:8B:A9:46:7A:0B:30:15:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/0/5300F5DDE4075958E44A38138BA9467A0B30154C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5300F5DDE4075958E44A38138BA9467A0B30154C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/0/323830343a326331303a383030303a3a2f33332d3333203d3e20323635313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c10:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         78:31:84:2f:b2:89:17:d0:ba:89:0a:42:20:cb:8d:97:3b:fc:
         1e:48:bd:a1:0e:6f:b1:b9:b0:95:8b:e6:20:6d:60:77:43:36:
         c1:a1:12:01:2e:31:b1:cf:44:15:04:d5:03:e5:e4:95:c4:ed:
         12:bf:b5:36:92:e9:31:4e:eb:4e:a7:98:39:1e:50:8e:7b:6d:
         ac:c2:83:1e:dd:26:1c:bb:87:8d:c3:45:e1:ff:77:b3:61:3f:
         62:78:7f:53:c3:8a:48:66:7f:4d:d6:e7:c0:60:7e:57:8d:a1:
         fb:2a:d4:06:dc:37:a4:95:10:0a:4b:a9:0b:09:02:5f:ee:fe:
         c8:47:9b:44:d7:1d:1c:c8:bb:ef:6d:58:e0:b8:44:79:ba:9b:
         c9:2a:cc:34:0d:33:27:a8:ba:e4:29:45:2a:4c:cb:44:0e:14:
         29:21:3b:99:33:0d:70:dd:7c:17:1e:d1:82:5c:43:b6:9a:ce:
         9d:c3:65:3a:01:e8:24:d7:ed:04:af:d4:70:9c:ca:77:8a:22:
         3d:28:9d:ac:8a:b1:8a:4e:18:69:bb:07:58:62:03:70:52:b8:
         bf:8b:09:25:b7:6c:ba:74:5a:f7:2c:56:0a:2d:1b:86:28:56:
         4d:d9:49:8f:5b:7f:bc:af:d9:a4:26:3c:77:7e:ce:b9:1e:99:
         ca:83:b4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org