Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/323830343a343838633a3a2f33342d3334203d3e20323637313238.roa
File:                     323830343a343838633a3a2f33342d3334203d3e20323637313238.roa (raw, json)
Hash identifier:          cRI5u1YsHB3p2oOnYscrL2pvz7/z0sIuTSw+yscOyIU=
Subject key identifier:   8B:99:AA:66:DD:0C:A6:1B:E0:80:26:50:71:3F:68:E0:D3:E7:D5:D3
Certificate issuer:       /CN=F53D745990071B2CCEF5F48CBFA053605498A66A
Certificate serial:       217CF3288B21A00F109C5DF06A1A6C40AEB69B4A
Authority key identifier: F5:3D:74:59:90:07:1B:2C:CE:F5:F4:8C:BF:A0:53:60:54:98:A6:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F53D745990071B2CCEF5F48CBFA053605498A66A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/323830343a343838633a3a2f33342d3334203d3e20323637313238.roa
Signing time:             Tue 05 Dec 2023 14:00:00 +0000
ROA not before:           Tue 05 Dec 2023 13:55:00 +0000
ROA not after:            Tue 03 Dec 2024 14:00:00 +0000
asID:                     267128
IP address blocks:        2804:488c::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:7c:f3:28:8b:21:a0:0f:10:9c:5d:f0:6a:1a:6c:40:ae:b6:9b:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F53D745990071B2CCEF5F48CBFA053605498A66A
        Validity
            Not Before: Dec  5 13:55:00 2023 GMT
            Not After : Dec  3 14:00:00 2024 GMT
        Subject: CN=3082010A0282010100EDB3C143DCACB848D6FAC599332B1AD3935F717C4B789EBB36C7C17C63D992A585645DBA73806EAD38670D0731431852D626069EAA1C16D70B87F7B352608851AEE931AE20B95AF63302A555CE76FE503D59796AE9836A46688DCEF872EAE402306D19486CBDD5D20457A6D1F4BB04042CB4414222E12AF31E41FC68C2D7C1DB60312F6B31CE0F6F4F4E0EE10F6D7AAE585C13F849514523E3512AFF3735ED7576103079E08462362E3C7229C7BC885BAB22F62CACA2BE12206E648C9BF99DFD80BDC9C2D99AE6FF7433858113C55E54012D6C2946AF939584C4B32F5ADA238E3BBD6350297FEA82FD9CA42C8F6F852FC48BF751BB16278B94E2C8DB5BD583F10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b3:c1:43:dc:ac:b8:48:d6:fa:c5:99:33:2b:
                    1a:d3:93:5f:71:7c:4b:78:9e:bb:36:c7:c1:7c:63:
                    d9:92:a5:85:64:5d:ba:73:80:6e:ad:38:67:0d:07:
                    31:43:18:52:d6:26:06:9e:aa:1c:16:d7:0b:87:f7:
                    b3:52:60:88:51:ae:e9:31:ae:20:b9:5a:f6:33:02:
                    a5:55:ce:76:fe:50:3d:59:79:6a:e9:83:6a:46:68:
                    8d:ce:f8:72:ea:e4:02:30:6d:19:48:6c:bd:d5:d2:
                    04:57:a6:d1:f4:bb:04:04:2c:b4:41:42:22:e1:2a:
                    f3:1e:41:fc:68:c2:d7:c1:db:60:31:2f:6b:31:ce:
                    0f:6f:4f:4e:0e:e1:0f:6d:7a:ae:58:5c:13:f8:49:
                    51:45:23:e3:51:2a:ff:37:35:ed:75:76:10:30:79:
                    e0:84:62:36:2e:3c:72:29:c7:bc:88:5b:ab:22:f6:
                    2c:ac:a2:be:12:20:6e:64:8c:9b:f9:9d:fd:80:bd:
                    c9:c2:d9:9a:e6:ff:74:33:85:81:13:c5:5e:54:01:
                    2d:6c:29:46:af:93:95:84:c4:b3:2f:5a:da:23:8e:
                    3b:bd:63:50:29:7f:ea:82:fd:9c:a4:2c:8f:6f:85:
                    2f:c4:8b:f7:51:bb:16:27:8b:94:e2:c8:db:5b:d5:
                    83:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:99:AA:66:DD:0C:A6:1B:E0:80:26:50:71:3F:68:E0:D3:E7:D5:D3
            X509v3 Authority Key Identifier:
                keyid:F5:3D:74:59:90:07:1B:2C:CE:F5:F4:8C:BF:A0:53:60:54:98:A6:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/F53D745990071B2CCEF5F48CBFA053605498A66A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F53D745990071B2CCEF5F48CBFA053605498A66A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/323830343a343838633a3a2f33342d3334203d3e20323637313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:488c::/34

    Signature Algorithm: sha256WithRSAEncryption
         7a:ad:89:26:89:1c:c1:26:93:44:cc:bd:e2:39:9b:10:06:a0:
         15:60:1b:21:01:ad:56:8b:71:0b:fd:5a:d1:ff:b4:53:7d:88:
         37:ca:04:db:9f:6c:ef:8f:6b:78:0b:4e:79:a7:d0:13:a1:f7:
         5b:4e:cb:e8:8a:31:da:b3:95:72:62:3e:30:bb:0b:d8:8a:83:
         58:99:c9:f8:bb:ca:bc:7b:90:c8:95:25:14:0c:b8:5b:54:7a:
         3e:51:c1:2f:2a:70:8e:c4:ff:48:7c:be:2c:25:c5:3a:1a:82:
         40:7b:69:3a:57:67:83:d2:72:05:19:96:8c:f5:a4:51:e9:48:
         e6:a7:8d:50:54:f1:d1:40:ba:b6:71:63:19:ee:95:a6:e6:34:
         7a:c6:c1:06:32:3e:7f:03:0f:ff:fe:23:42:44:d5:74:e4:4a:
         16:5d:dc:b1:56:6a:a7:07:c7:a2:9e:21:99:4c:7a:c9:05:10:
         eb:4d:f6:5a:cd:41:80:d8:fb:ba:f8:b5:3d:ad:34:50:6e:0d:
         fa:98:64:43:ca:5d:29:6f:1e:46:1e:67:6c:43:ec:68:e0:7e:
         a6:09:84:03:71:6d:0b:25:88:b8:68:70:25:b3:49:d7:51:05:
         66:3c:c4:d7:7c:b3:df:d9:40:25:44:34:b9:e5:3c:93:63:c1:
         4a:f5:23:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org