Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a3a2f33322d3332203d3e20323731333533.roa
File:                     323830343a376133303a3a2f33322d3332203d3e20323731333533.roa (raw, json)
Hash identifier:          rNREslorPmKEL1O6pOlsyAcY8dQrM3Bj5gQBePzrLU0=
Subject key identifier:   08:54:A9:2B:B8:2A:3A:4B:53:30:1E:87:2B:F2:E8:50:7A:84:8E:6B
Certificate issuer:       /CN=F5A7136C82E81D3EC065F636CE46776805FFAE48
Certificate serial:       1E884C12770F5C1EFF7E660090E5A9527FC268AF
Authority key identifier: F5:A7:13:6C:82:E8:1D:3E:C0:65:F6:36:CE:46:77:68:05:FF:AE:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5A7136C82E81D3EC065F636CE46776805FFAE48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a3a2f33322d3332203d3e20323731333533.roa
Signing time:             Wed 25 Oct 2023 12:07:32 +0000
ROA not before:           Wed 25 Oct 2023 12:02:32 +0000
ROA not after:            Wed 23 Oct 2024 12:07:32 +0000
asID:                     271353
IP address blocks:        2804:7a30::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:88:4c:12:77:0f:5c:1e:ff:7e:66:00:90:e5:a9:52:7f:c2:68:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A7136C82E81D3EC065F636CE46776805FFAE48
        Validity
            Not Before: Oct 25 12:02:32 2023 GMT
            Not After : Oct 23 12:07:32 2024 GMT
        Subject: CN=0854A92BB82A3A4B53301E872BF2E8507A848E6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c6:c4:cb:9a:d2:34:67:0c:23:56:7e:7a:48:
                    bc:3c:9b:0b:24:8e:45:bf:cd:24:14:e7:50:fd:39:
                    f4:69:2e:f7:a0:39:cf:18:d3:59:a8:75:6a:db:d1:
                    70:02:e4:c2:c3:7c:83:b0:78:d8:be:ff:cb:f9:f9:
                    9f:fe:ea:12:ea:08:90:fd:5d:3a:a1:f5:bc:48:75:
                    f2:ce:01:f3:bf:a8:9f:05:5a:2a:f8:36:a7:dd:c8:
                    fc:b1:8a:85:a6:f8:9b:e9:b7:3c:8a:f9:ae:84:d2:
                    9d:40:9c:d9:3b:52:61:c8:2e:3f:e7:25:1d:6d:f8:
                    78:e1:16:16:aa:02:84:eb:3f:b0:0c:6e:4e:36:fb:
                    ae:30:2f:81:22:18:cf:a9:71:2b:23:04:09:54:9c:
                    a7:0e:b4:70:da:09:12:9a:31:4c:f1:6d:c7:a7:84:
                    28:a3:f4:3c:ff:5a:01:32:c9:59:70:a9:00:84:a2:
                    a3:5b:49:46:ce:b8:6e:2f:0e:f4:9b:d5:ea:1c:32:
                    f7:9b:8e:73:4d:21:89:67:1a:73:e9:32:30:92:c4:
                    f6:2b:37:4d:b7:89:37:91:9e:6e:76:11:de:fb:d0:
                    fc:12:96:c4:39:42:74:27:f5:10:58:46:c8:76:a9:
                    67:ca:2a:79:f8:e4:7f:03:95:73:9c:6b:2a:a7:93:
                    31:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:54:A9:2B:B8:2A:3A:4B:53:30:1E:87:2B:F2:E8:50:7A:84:8E:6B
            X509v3 Authority Key Identifier:
                keyid:F5:A7:13:6C:82:E8:1D:3E:C0:65:F6:36:CE:46:77:68:05:FF:AE:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/F5A7136C82E81D3EC065F636CE46776805FFAE48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5A7136C82E81D3EC065F636CE46776805FFAE48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a3a2f33322d3332203d3e20323731333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a30::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:b9:a2:44:59:48:f9:28:7c:56:81:a5:01:d5:42:29:ba:9b:
         6e:ba:d6:ed:1d:12:b8:ff:e8:92:d6:31:b0:3c:d8:88:80:10:
         07:8e:83:5f:bc:f1:84:08:b0:86:a5:b1:e6:12:78:e6:3f:b2:
         27:cd:64:94:33:65:2f:5f:e8:b1:ce:88:5f:2f:fa:51:e8:f0:
         6d:bb:b4:c1:02:30:7e:27:6b:ac:9a:2f:8d:80:cf:4b:5c:07:
         5e:9d:6a:05:16:14:af:85:41:65:8b:66:60:aa:b6:5e:8b:c0:
         7b:72:e9:03:5b:ff:80:04:54:8f:24:69:cd:fb:69:c4:85:71:
         89:4a:4c:ed:7e:b9:6b:5d:57:8e:39:46:f2:b1:9b:b6:5c:60:
         92:c0:74:42:1c:86:00:2e:c1:ac:75:2f:99:1a:6a:26:3a:8b:
         db:05:13:27:2a:cb:d6:d4:34:01:1f:ce:54:ea:b3:a4:01:2e:
         c4:eb:2f:1d:12:d6:59:33:c7:59:d8:3c:1a:1a:fa:6f:a3:88:
         69:b1:b7:43:f8:e2:88:61:c1:92:cf:7d:b5:8f:ee:94:36:c0:
         d8:84:75:40:15:e7:b8:3f:a6:0e:9d:4d:be:5d:21:23:3a:98:
         fd:99:80:c2:a8:ad:e8:01:4d:e2:a6:38:02:a5:47:3a:c4:94:
         cb:24:14:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org