Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/0/323830343a333564633a3a2f33322d3334203d3e20323636333131.roa
File:                     323830343a333564633a3a2f33322d3334203d3e20323636333131.roa (raw, json)
Hash identifier:          Xlh3WrWnredMXUbg1GAtCqt/OwGQAveLwYTg/9ScyvI=
Subject key identifier:   33:C0:64:60:62:85:26:F3:B0:14:E1:70:44:41:A8:52:AE:39:B0:25
Certificate issuer:       /CN=D213ED718EDA94FF7D0326E32CDA595A1F8CBC0C
Certificate serial:       526B0A5FE2957BB1E97C58F3C9A4ED78712A8527
Authority key identifier: D2:13:ED:71:8E:DA:94:FF:7D:03:26:E3:2C:DA:59:5A:1F:8C:BC:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D213ED718EDA94FF7D0326E32CDA595A1F8CBC0C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/0/323830343a333564633a3a2f33322d3334203d3e20323636333131.roa
Signing time:             Tue 02 Jan 2024 16:53:39 +0000
ROA not before:           Tue 02 Jan 2024 16:48:39 +0000
ROA not after:            Tue 31 Dec 2024 16:53:39 +0000
asID:                     266311
IP address blocks:        2804:35dc::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:6b:0a:5f:e2:95:7b:b1:e9:7c:58:f3:c9:a4:ed:78:71:2a:85:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D213ED718EDA94FF7D0326E32CDA595A1F8CBC0C
        Validity
            Not Before: Jan  2 16:48:39 2024 GMT
            Not After : Dec 31 16:53:39 2024 GMT
        Subject: CN=33C06460628526F3B014E1704441A852AE39B025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5a:b7:0f:33:d0:99:7a:e0:d6:30:7e:9d:ee:
                    a3:4b:d1:e1:91:47:83:82:9d:dc:d6:d7:14:6e:91:
                    42:cd:ba:12:49:ea:be:b1:09:88:27:ac:2d:78:50:
                    65:e5:bc:9e:17:15:f4:43:de:71:17:46:89:cb:71:
                    35:ca:a0:f3:2f:ad:e7:ef:3f:ff:2a:d8:d3:f2:7a:
                    ef:23:f5:54:ec:09:a9:f1:0c:ce:be:30:d5:a1:f3:
                    25:64:4f:95:a2:7d:b4:ec:7a:c6:bd:59:0c:4c:72:
                    e7:69:68:05:2d:f7:f1:b4:78:44:54:dc:f2:d6:6e:
                    c0:72:0b:3d:c8:d1:fd:b0:1d:ab:0f:1d:d6:5e:c9:
                    db:ca:3e:48:ce:88:4a:24:54:39:27:9d:c7:7f:c9:
                    8e:0c:67:90:8b:32:33:25:bb:f0:df:7f:af:ff:3f:
                    2d:2c:a2:97:e6:9e:57:84:34:52:a5:c2:03:00:13:
                    b1:a5:68:9a:a1:86:54:59:16:61:a6:6a:24:f4:0b:
                    14:83:00:5a:d3:5a:3c:a3:37:36:52:c4:48:03:1e:
                    dc:6f:44:cc:46:54:32:c1:43:ac:27:97:5d:5c:8f:
                    19:ff:bb:a5:b2:c6:36:6c:45:08:59:d6:43:39:52:
                    e6:3a:8b:2a:86:72:5e:77:e2:74:74:c1:43:bf:04:
                    12:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C0:64:60:62:85:26:F3:B0:14:E1:70:44:41:A8:52:AE:39:B0:25
            X509v3 Authority Key Identifier:
                keyid:D2:13:ED:71:8E:DA:94:FF:7D:03:26:E3:2C:DA:59:5A:1F:8C:BC:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/0/D213ED718EDA94FF7D0326E32CDA595A1F8CBC0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D213ED718EDA94FF7D0326E32CDA595A1F8CBC0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/0/323830343a333564633a3a2f33322d3334203d3e20323636333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:10:11:fc:cf:00:50:d1:55:75:14:fe:be:66:a4:6e:a5:74:
         06:c9:28:f3:05:df:5f:75:3b:2b:19:94:61:fc:0f:8a:41:c0:
         8e:cc:38:7e:52:86:4c:c9:a0:43:e7:57:e5:63:55:f5:84:5b:
         97:c3:bd:cb:53:35:1c:71:02:7b:a4:55:80:5d:0b:7a:85:30:
         70:3c:4d:49:7d:a0:ca:6f:9d:e8:a7:75:6e:78:bc:58:a1:9d:
         2d:5c:5f:36:3f:eb:64:6c:f3:54:14:5f:e1:d0:80:b6:93:c6:
         d9:53:bd:39:25:57:d5:c5:e6:c4:41:5d:53:b1:57:6a:4c:d7:
         00:cb:bd:7a:f2:65:bf:e8:05:cc:7c:21:09:3b:da:7b:08:ec:
         f2:51:b5:36:d0:d3:9b:3d:6b:f5:9a:51:94:37:4f:2e:ca:87:
         ed:05:5a:af:f9:e8:73:fa:5a:4f:02:d5:85:63:d1:c7:c6:a9:
         3f:6e:5e:d8:f8:b2:54:b1:6f:47:99:e9:5d:c9:de:91:e2:a1:
         f1:e7:e7:72:76:c4:44:b4:30:95:02:29:8e:33:13:59:f8:6a:
         ab:69:0a:1e:63:7d:fd:7b:b9:be:ba:60:28:9a:c5:5f:6f:5a:
         cd:25:01:7d:0a:33:ad:5c:49:75:e0:00:93:23:90:be:a4:aa:
         d3:22:72:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org