Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/323830343a3562633a3a2f33322d3438203d3e203238363538.roa
File:                     323830343a3562633a3a2f33322d3438203d3e203238363538.roa (raw, json)
Hash identifier:          R3ZK7TicaUPeiwq47HFtkKezsxEtmcBqwFOBExm3bWU=
Subject key identifier:   BF:7F:07:02:A3:64:8F:92:4B:F9:E2:29:A9:98:74:DB:D9:96:26:48
Certificate issuer:       /CN=E2CE82B2BA2C582F2DCE8981741A7720228EEC6B
Certificate serial:       5E853614EF70668B7C91C4CF77FCC640CDCE3C65
Authority key identifier: E2:CE:82:B2:BA:2C:58:2F:2D:CE:89:81:74:1A:77:20:22:8E:EC:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2CE82B2BA2C582F2DCE8981741A7720228EEC6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/323830343a3562633a3a2f33322d3438203d3e203238363538.roa
Signing time:             Sun 12 Nov 2023 19:40:20 +0000
ROA not before:           Sun 12 Nov 2023 19:35:20 +0000
ROA not after:            Sun 10 Nov 2024 19:40:20 +0000
asID:                     28658
IP address blocks:        2804:5bc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:85:36:14:ef:70:66:8b:7c:91:c4:cf:77:fc:c6:40:cd:ce:3c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2CE82B2BA2C582F2DCE8981741A7720228EEC6B
        Validity
            Not Before: Nov 12 19:35:20 2023 GMT
            Not After : Nov 10 19:40:20 2024 GMT
        Subject: CN=BF7F0702A3648F924BF9E229A99874DBD9962648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:dd:ee:12:fb:86:ff:25:d1:f5:87:3b:c7:b4:
                    94:2f:19:04:df:eb:47:aa:f8:b6:be:71:b7:80:12:
                    19:54:0a:91:6e:6e:07:33:dc:cb:6c:e6:4c:90:9e:
                    8a:a3:a6:89:93:63:7a:cd:59:c7:28:b3:fe:79:d7:
                    2b:75:a9:ef:2f:95:2d:e6:b0:82:1c:dd:32:ae:08:
                    63:4d:30:5b:b9:55:f6:dd:13:b6:cd:e8:af:94:37:
                    68:95:6e:e8:2b:a2:fe:1e:63:25:e9:3a:fd:d9:d0:
                    73:e0:ea:60:b7:ac:44:9d:d0:05:2f:cb:29:0f:49:
                    21:54:15:ea:11:db:84:ea:51:1e:54:ef:ea:6f:be:
                    67:1a:ae:34:29:be:af:85:b4:30:e7:b1:dc:67:aa:
                    50:80:c5:cf:7e:55:2f:3d:3a:43:9a:c4:e6:d2:cd:
                    1d:17:f1:50:b9:a8:d0:97:2e:67:5a:a2:7a:50:aa:
                    fe:5c:88:22:56:aa:1b:b5:17:ca:3d:53:a5:3a:e4:
                    ea:16:bc:f0:4a:54:a2:46:6a:31:3c:92:ac:40:69:
                    a1:3f:1a:73:2c:d1:1f:69:2b:0e:8e:d9:4c:2f:fb:
                    29:c4:24:55:1c:3c:ed:b6:f5:65:86:7a:09:f3:bc:
                    51:5f:01:d3:ab:77:11:5c:97:c1:a5:d9:26:c0:55:
                    72:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:7F:07:02:A3:64:8F:92:4B:F9:E2:29:A9:98:74:DB:D9:96:26:48
            X509v3 Authority Key Identifier:
                keyid:E2:CE:82:B2:BA:2C:58:2F:2D:CE:89:81:74:1A:77:20:22:8E:EC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/E2CE82B2BA2C582F2DCE8981741A7720228EEC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2CE82B2BA2C582F2DCE8981741A7720228EEC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/323830343a3562633a3a2f33322d3438203d3e203238363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:a2:1a:32:39:db:10:33:d3:03:39:34:91:6d:75:71:46:21:
         86:b9:37:1f:42:25:f1:d1:11:93:e8:46:93:0d:a2:62:a8:54:
         6a:82:c4:46:33:d7:89:63:28:74:e4:c8:78:dc:c2:27:32:2c:
         cf:13:a0:28:18:82:f9:13:94:0a:4c:d1:fe:96:a9:69:99:05:
         56:56:fd:b6:95:41:91:cb:46:ec:0a:06:cb:d2:bc:91:e2:8a:
         5d:65:69:00:1c:64:e7:d7:a9:85:ab:ff:3e:19:b5:2c:25:a4:
         5a:1e:ff:a1:22:ad:37:f1:94:38:a7:27:23:e0:38:50:b8:d6:
         40:bb:05:65:18:b5:02:c8:72:17:01:f5:e3:18:90:87:27:7a:
         03:43:a6:a0:4f:b7:48:48:70:3f:cd:b5:1f:43:d8:7d:51:4a:
         b1:18:63:0a:1a:c3:2a:b7:3e:70:7a:98:71:f7:8a:07:29:3e:
         1e:ba:5e:42:22:e5:68:9a:31:d9:70:c7:63:7c:d6:cc:25:31:
         dd:7c:0d:19:e7:57:67:5b:24:a9:4a:65:93:f5:5a:77:5f:7d:
         98:41:09:72:da:b0:43:20:af:fd:96:74:b6:de:eb:6e:50:d9:
         a1:b7:8c:63:44:e1:65:14:3c:72:28:40:f0:ee:e4:2e:76:1f:
         48:7d:9c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org