Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cw8TEHFoxPy9RxijyaPxVSVRjtaKmV9GW9boi7gQ7rbr/0/323830343a38343a3a2f33322d3438203d3e203134323832.roa
File:                     323830343a38343a3a2f33322d3438203d3e203134323832.roa (raw, json)
Hash identifier:          HuA57Y27DRQAxCsSPj0LPy07qZGjh7K7w99AqvEi26E=
Subject key identifier:   FA:D1:EF:51:78:6C:9F:09:ED:F8:36:61:2A:4F:A8:5C:F1:7C:B6:E9
Certificate issuer:       /CN=53AA058FBD5C11D4F68414FB2B620B8175CC4399
Certificate serial:       0A6028386E7EAE7763579862854B9414FF523D48
Authority key identifier: 53:AA:05:8F:BD:5C:11:D4:F6:84:14:FB:2B:62:0B:81:75:CC:43:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53AA058FBD5C11D4F68414FB2B620B8175CC4399.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cw8TEHFoxPy9RxijyaPxVSVRjtaKmV9GW9boi7gQ7rbr/0/323830343a38343a3a2f33322d3438203d3e203134323832.roa
Signing time:             Fri 05 Jan 2024 14:00:00 +0000
ROA not before:           Fri 05 Jan 2024 13:55:00 +0000
ROA not after:            Fri 03 Jan 2025 14:00:00 +0000
asID:                     14282
IP address blocks:        2804:84::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:60:28:38:6e:7e:ae:77:63:57:98:62:85:4b:94:14:ff:52:3d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53AA058FBD5C11D4F68414FB2B620B8175CC4399
        Validity
            Not Before: Jan  5 13:55:00 2024 GMT
            Not After : Jan  3 14:00:00 2025 GMT
        Subject: CN=FAD1EF51786C9F09EDF836612A4FA85CF17CB6E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5c:2d:bf:85:6c:47:b3:1c:09:4f:83:9a:ab:
                    66:62:b8:f6:93:fb:0b:1c:03:89:ac:66:5f:80:f6:
                    96:f2:8c:03:29:3d:74:8a:1e:09:a0:aa:6a:3f:70:
                    5e:19:57:f3:23:7d:17:61:1a:36:3d:cd:37:75:b9:
                    7b:cd:23:bf:25:7b:75:ca:56:1f:81:b6:a0:10:33:
                    01:c7:a3:c1:69:c8:d0:7b:79:76:d5:86:d6:06:e4:
                    c6:12:7b:47:23:29:9c:1f:42:d4:62:41:04:d0:88:
                    b0:3e:44:27:27:ae:0b:46:b7:cc:bc:cc:a1:f1:51:
                    7e:4e:e6:74:dc:8e:31:ea:a7:70:a7:6b:ed:74:56:
                    a9:87:41:a8:f9:77:74:a5:e8:1d:5d:65:c9:59:66:
                    cc:0f:64:5d:41:da:2c:a3:b1:39:3f:fa:84:49:2a:
                    e2:34:0d:db:89:5d:3e:f0:b7:12:51:15:25:3c:3d:
                    c3:07:e8:f1:d0:de:d4:1f:ab:5e:e5:0b:2f:ee:75:
                    2d:d7:b4:f0:9b:2d:58:b6:5c:e0:24:24:f3:50:a7:
                    a7:6a:3d:d8:86:00:22:a4:db:80:37:0a:dc:4b:c0:
                    02:3e:4a:d8:78:1c:a3:f8:bc:2e:26:30:c6:00:b9:
                    39:bb:70:43:43:64:54:66:b2:37:96:c4:5c:02:12:
                    63:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D1:EF:51:78:6C:9F:09:ED:F8:36:61:2A:4F:A8:5C:F1:7C:B6:E9
            X509v3 Authority Key Identifier:
                keyid:53:AA:05:8F:BD:5C:11:D4:F6:84:14:FB:2B:62:0B:81:75:CC:43:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cw8TEHFoxPy9RxijyaPxVSVRjtaKmV9GW9boi7gQ7rbr/0/53AA058FBD5C11D4F68414FB2B620B8175CC4399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53AA058FBD5C11D4F68414FB2B620B8175CC4399.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cw8TEHFoxPy9RxijyaPxVSVRjtaKmV9GW9boi7gQ7rbr/0/323830343a38343a3a2f33322d3438203d3e203134323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:84::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:77:51:2d:f5:a3:3a:8f:1e:61:ca:d6:26:94:47:b8:2e:45:
         fb:09:48:cf:b1:c5:7f:ec:92:1b:b5:01:d0:54:52:c8:4e:cb:
         f2:ce:2e:4c:14:8f:07:c4:80:de:96:25:3c:7b:bb:12:f2:37:
         a8:26:d9:10:97:1d:47:0f:21:13:7f:71:99:1d:a8:62:bf:04:
         1a:c1:e6:7e:50:f4:3c:a9:ca:f2:94:36:8c:cf:f2:16:d6:e9:
         ce:0e:ce:58:bf:11:c9:28:e5:af:55:09:bf:1f:d0:ea:a3:d9:
         a7:29:75:2c:f7:d3:7d:ce:84:69:4e:2a:b6:be:7c:87:7e:91:
         60:62:db:82:af:31:b3:0f:96:5f:59:65:ba:17:a0:d7:21:7f:
         0c:cd:a9:79:c9:a5:82:05:a0:1a:57:a6:7b:ce:32:0d:4d:aa:
         67:99:cb:2a:8e:47:df:f9:19:c6:46:a0:3d:fa:c3:a0:28:d9:
         d6:e9:af:b4:c9:3b:ee:94:ce:9e:c8:04:9b:cb:3d:d6:2f:83:
         52:10:ef:07:42:8c:8d:5c:f5:ce:22:4d:1a:51:b2:48:30:85:
         3b:7a:c9:6b:ee:b4:dd:70:eb:4e:a0:9d:ab:0b:be:91:35:7e:
         25:77:40:97:ee:a9:96:a0:c5:ba:fb:70:d0:79:8d:d5:a3:69:
         ad:3a:42:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org