Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a383030303a3a2f33332d3333203d3e20323731333533.roa
File:                     323830343a376133303a383030303a3a2f33332d3333203d3e20323731333533.roa (raw, json)
Hash identifier:          9j6mQX9fXZycQ6ru/3tlxSEQbYOaO0X8iUAMDU8fRfw=
Subject key identifier:   1F:1B:E5:68:C8:C9:C2:12:0A:84:8D:76:F2:B1:FC:47:15:34:F8:97
Certificate issuer:       /CN=F5A7136C82E81D3EC065F636CE46776805FFAE48
Certificate serial:       5B76BC908E6C5B6D1ACD0398A9135B83796DD829
Authority key identifier: F5:A7:13:6C:82:E8:1D:3E:C0:65:F6:36:CE:46:77:68:05:FF:AE:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5A7136C82E81D3EC065F636CE46776805FFAE48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a383030303a3a2f33332d3333203d3e20323731333533.roa
Signing time:             Wed 25 Oct 2023 12:07:32 +0000
ROA not before:           Wed 25 Oct 2023 12:02:32 +0000
ROA not after:            Wed 23 Oct 2024 12:07:32 +0000
asID:                     271353
IP address blocks:        2804:7a30:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:76:bc:90:8e:6c:5b:6d:1a:cd:03:98:a9:13:5b:83:79:6d:d8:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A7136C82E81D3EC065F636CE46776805FFAE48
        Validity
            Not Before: Oct 25 12:02:32 2023 GMT
            Not After : Oct 23 12:07:32 2024 GMT
        Subject: CN=1F1BE568C8C9C2120A848D76F2B1FC471534F897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:97:d2:4d:96:50:53:d8:c9:7b:6b:5b:34:23:
                    3f:ae:43:2c:2f:60:a8:71:40:6b:72:72:aa:79:23:
                    02:c7:82:48:be:56:a9:aa:4a:36:e2:5e:26:51:09:
                    6c:f3:fc:db:10:5e:65:c7:b8:6d:6c:d7:ca:67:29:
                    0c:a9:13:32:4b:ab:ff:aa:1e:65:3f:0d:0d:fc:e5:
                    09:0e:00:ad:5e:05:08:9e:f2:29:ac:b0:12:ea:81:
                    d2:e1:4d:0e:0f:b1:c9:58:ff:fc:69:a1:ef:54:84:
                    fa:6f:a4:9f:38:b1:84:c2:7f:1e:1b:98:20:9d:ec:
                    4d:4c:2d:8e:59:69:30:66:c2:d9:f2:28:b7:92:8f:
                    0b:fb:5c:61:36:3a:40:e4:43:9b:8e:3d:3a:0a:39:
                    0e:f4:bd:78:fc:01:16:ee:2d:ae:2d:8c:4c:5c:c6:
                    dd:9f:24:9a:dd:26:f5:3b:6f:ec:a0:8f:05:ae:6a:
                    f0:f1:1b:8f:7d:76:dc:ed:bc:ba:0e:af:c0:5a:4d:
                    fc:b4:6b:90:c7:0b:98:f6:89:86:9e:3c:69:e5:6b:
                    b7:8f:4f:fd:c5:c1:30:0e:55:81:4a:09:5d:78:8e:
                    dc:10:60:ca:10:b2:b1:48:9f:a0:a2:42:57:94:48:
                    21:48:15:01:40:05:47:7b:fc:7f:2b:a9:98:f2:fc:
                    bd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:1B:E5:68:C8:C9:C2:12:0A:84:8D:76:F2:B1:FC:47:15:34:F8:97
            X509v3 Authority Key Identifier:
                keyid:F5:A7:13:6C:82:E8:1D:3E:C0:65:F6:36:CE:46:77:68:05:FF:AE:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/F5A7136C82E81D3EC065F636CE46776805FFAE48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5A7136C82E81D3EC065F636CE46776805FFAE48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a383030303a3a2f33332d3333203d3e20323731333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a30:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         5e:19:04:0b:77:38:b7:f4:d8:ef:f7:c5:85:13:b7:fd:ac:11:
         1b:33:07:bd:64:64:d5:54:48:b2:60:23:86:b1:c1:d0:a7:02:
         4d:0a:dd:67:10:99:48:04:dd:54:be:e8:f0:c1:7c:ea:73:ab:
         af:56:9a:bf:42:82:0e:08:3f:7f:ac:20:d9:a5:16:74:b8:28:
         39:9f:75:3c:9e:dc:b7:e3:90:e0:2f:09:06:87:ff:68:30:38:
         1d:52:a5:50:ea:bb:c8:7c:3b:90:81:6f:21:41:6e:2b:7f:e0:
         ca:6b:ba:a3:50:aa:3c:8c:f9:b5:1d:63:fb:2c:81:bf:f6:ea:
         b0:16:49:19:56:0b:d1:06:19:44:2d:d6:c2:72:10:2b:49:79:
         31:c9:a3:50:4e:a0:09:d4:cc:92:f6:db:b2:44:49:ed:4f:91:
         b9:76:80:b6:c5:ac:10:3e:72:28:a7:8d:3a:37:15:a0:da:a8:
         5b:d3:12:a6:b0:50:66:05:f8:d1:b7:fd:35:b2:03:da:f2:86:
         3f:97:f2:1a:9e:f0:35:95:45:ac:a9:95:38:0e:b9:82:d4:5b:
         98:df:6f:8a:bd:4b:e3:45:ec:50:58:b1:ef:f0:56:36:42:cf:
         40:73:58:d6:ee:79:46:cd:1e:5e:86:fe:20:d2:83:a7:a3:7c:
         95:2b:80:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org