Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0/323830343a363062383a3a2f33322d3332203d3e20323639313836.roa
File:                     323830343a363062383a3a2f33322d3332203d3e20323639313836.roa (raw, json)
Hash identifier:          2k17bUTzUtP9S3LrklIRC/dyaQ3pUMDPODAzymO0st8=
Subject key identifier:   85:C9:84:CE:F5:7C:10:04:CA:4B:84:EB:13:7F:30:F3:31:79:36:E0
Certificate issuer:       /CN=D0998FAE469DED8160607801B7CD43BC61CB0B2E
Certificate serial:       7EF32DB568640F9B138E40A9578375B40B1D5AFF
Authority key identifier: D0:99:8F:AE:46:9D:ED:81:60:60:78:01:B7:CD:43:BC:61:CB:0B:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0998FAE469DED8160607801B7CD43BC61CB0B2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0/323830343a363062383a3a2f33322d3332203d3e20323639313836.roa
Signing time:             Thu 20 Jul 2023 15:00:00 +0000
ROA not before:           Thu 20 Jul 2023 14:55:00 +0000
ROA not after:            Thu 18 Jul 2024 15:00:00 +0000
asID:                     269186
IP address blocks:        2804:60b8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:f3:2d:b5:68:64:0f:9b:13:8e:40:a9:57:83:75:b4:0b:1d:5a:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0998FAE469DED8160607801B7CD43BC61CB0B2E
        Validity
            Not Before: Jul 20 14:55:00 2023 GMT
            Not After : Jul 18 15:00:00 2024 GMT
        Subject: CN=85C984CEF57C1004CA4B84EB137F30F3317936E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:45:a5:67:a8:56:0e:97:3f:81:3b:f3:e4:bc:
                    32:cb:3d:52:69:5f:ef:bd:86:71:7f:30:8d:23:8d:
                    1c:0a:fc:aa:6a:1e:32:cf:94:ee:2e:46:82:d9:3f:
                    d7:e2:a6:2e:bd:01:69:3e:8c:c5:d5:00:2d:81:d8:
                    d8:66:bd:7d:99:65:bb:f6:e0:1f:b4:23:82:09:b1:
                    be:fd:b5:5f:b1:4e:b6:37:ab:81:e3:81:05:37:4d:
                    cc:eb:0e:a2:57:cf:66:86:b9:73:e0:ae:89:9f:0c:
                    3e:43:b6:83:4b:76:4f:5a:eb:44:da:fb:9c:b8:1a:
                    07:57:68:e0:92:54:bb:9f:71:c0:63:44:b6:0a:d0:
                    eb:1c:36:72:ed:a8:bd:61:81:42:1e:69:55:63:5d:
                    3d:e3:47:d7:bd:d1:17:ca:12:14:cf:3e:ef:18:d6:
                    c0:aa:89:47:a2:1e:cc:8f:47:8e:ea:c8:f9:69:dd:
                    9e:ec:19:27:f6:ff:79:f5:46:b9:6b:67:f4:ca:17:
                    3c:a0:94:68:10:02:24:9f:f9:b6:2b:c5:3e:34:5d:
                    11:76:48:4a:f5:3c:48:a6:2f:31:9d:99:0f:e0:ca:
                    03:ad:89:dc:ac:12:5b:70:f2:6d:27:3f:d8:4d:75:
                    b3:81:a6:41:5e:78:38:93:47:92:76:8b:68:32:40:
                    d4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C9:84:CE:F5:7C:10:04:CA:4B:84:EB:13:7F:30:F3:31:79:36:E0
            X509v3 Authority Key Identifier:
                keyid:D0:99:8F:AE:46:9D:ED:81:60:60:78:01:B7:CD:43:BC:61:CB:0B:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0/D0998FAE469DED8160607801B7CD43BC61CB0B2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0998FAE469DED8160607801B7CD43BC61CB0B2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0/323830343a363062383a3a2f33322d3332203d3e20323639313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:4c:cf:6f:4e:8d:fc:73:51:6f:75:d6:f4:07:39:19:3f:1e:
         14:41:6b:ee:8c:70:cd:4a:5d:fd:41:b0:c6:59:3d:81:7c:3e:
         b4:58:45:32:8c:19:a9:54:07:d2:7e:78:13:97:d2:b3:e2:1a:
         93:0f:b4:e5:1a:35:f5:49:35:0c:3f:52:06:ca:e0:1a:72:04:
         a3:7a:07:f8:cc:c7:1b:ea:de:13:e4:de:96:3c:b6:de:6c:ee:
         fe:c3:a2:af:59:b5:6c:4a:6e:11:80:07:ec:3f:f9:3c:45:d9:
         6d:53:23:14:7f:15:40:73:2b:ac:8b:61:67:34:66:dd:3e:c7:
         48:dc:25:43:07:6d:a6:98:70:bc:5a:a4:83:5d:f0:1e:26:bc:
         34:d0:b5:df:8b:19:4b:9b:0f:02:b8:f2:64:e7:f1:e0:25:41:
         9a:f6:68:cd:12:69:c8:b0:3f:9e:a9:34:07:83:83:32:21:9a:
         e6:8d:64:86:9f:79:24:5f:97:5e:60:7b:41:2a:ba:54:d3:bf:
         58:c3:7c:e8:af:ab:7a:3d:10:ce:79:ed:bb:28:d2:74:b7:60:
         5a:6e:ee:a0:cd:ba:97:67:c1:ed:2c:67:ae:a7:ce:75:f0:39:
         97:20:eb:e9:ff:b8:c0:7a:15:d4:cd:05:f3:4e:5d:71:7d:1e:
         54:72:c6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org