Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFJQozo1BZEnJw7est3eaqf6qm8Ppig8FiUb3aFwiKWr/0/323830343a353464343a3a2f33332d3333203d3e20323638363732.roa
File:                     323830343a353464343a3a2f33332d3333203d3e20323638363732.roa (raw, json)
Hash identifier:          3FBqksE+xaCv6Kky+/MTLQVqtYXILYNRVOvlKopPzww=
Subject key identifier:   62:20:CA:3D:D4:7F:37:34:63:43:A5:C0:10:95:94:84:E6:21:6A:82
Certificate issuer:       /CN=7568E6A27B4CE8B4EBD5A330592B70A20FBF6BB8
Certificate serial:       097133F97AAB7515459B948E2C4294724CD46B8A
Authority key identifier: 75:68:E6:A2:7B:4C:E8:B4:EB:D5:A3:30:59:2B:70:A2:0F:BF:6B:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7568E6A27B4CE8B4EBD5A330592B70A20FBF6BB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFJQozo1BZEnJw7est3eaqf6qm8Ppig8FiUb3aFwiKWr/0/323830343a353464343a3a2f33332d3333203d3e20323638363732.roa
Signing time:             Tue 26 Mar 2024 13:00:00 +0000
ROA not before:           Tue 26 Mar 2024 12:55:00 +0000
ROA not after:            Tue 25 Mar 2025 13:00:00 +0000
asID:                     268672
IP address blocks:        2804:54d4::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:71:33:f9:7a:ab:75:15:45:9b:94:8e:2c:42:94:72:4c:d4:6b:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7568E6A27B4CE8B4EBD5A330592B70A20FBF6BB8
        Validity
            Not Before: Mar 26 12:55:00 2024 GMT
            Not After : Mar 25 13:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fc:6d:91:27:bc:9e:77:12:4f:02:24:78:12:
                    fc:8f:38:d2:b2:54:9c:e2:da:fd:91:d0:53:dc:30:
                    5b:dd:2a:53:3c:f4:04:d7:fc:77:78:bf:e1:3f:a3:
                    89:c7:ae:e3:2a:21:c2:11:67:e0:95:a3:aa:2e:30:
                    f1:87:4f:2f:a5:f1:fb:76:b0:23:e4:0e:ad:d4:31:
                    d6:b2:21:59:f4:dc:4b:52:66:bb:5c:4f:d7:f5:26:
                    18:1b:2a:7e:62:63:e4:d0:a9:28:6b:59:54:c4:59:
                    2f:52:31:33:26:42:4a:03:c7:df:a2:0b:89:70:98:
                    81:d8:86:e7:cb:e6:fe:ab:94:eb:6c:9a:0c:6e:9e:
                    5a:78:11:19:a2:f5:38:d8:3d:b1:21:09:38:c2:28:
                    96:4c:32:49:e0:7c:49:87:93:1d:d6:e1:fb:6f:86:
                    cc:13:b3:9d:5b:9c:df:e2:97:d9:c2:d1:8f:5c:99:
                    45:2d:68:1a:5d:53:c4:ce:60:46:29:e6:0a:b1:20:
                    04:86:54:42:32:c1:9a:ef:7f:c0:04:68:4e:59:9b:
                    ff:16:f4:74:d4:23:2a:63:0c:34:1e:f4:40:e2:d8:
                    5a:e8:ee:0a:d2:ce:45:83:39:32:73:cb:7e:ea:59:
                    b5:c1:7e:a3:f8:3e:a1:91:47:91:37:25:7c:2a:f4:
                    74:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:20:CA:3D:D4:7F:37:34:63:43:A5:C0:10:95:94:84:E6:21:6A:82
            X509v3 Authority Key Identifier:
                keyid:75:68:E6:A2:7B:4C:E8:B4:EB:D5:A3:30:59:2B:70:A2:0F:BF:6B:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFJQozo1BZEnJw7est3eaqf6qm8Ppig8FiUb3aFwiKWr/0/7568E6A27B4CE8B4EBD5A330592B70A20FBF6BB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7568E6A27B4CE8B4EBD5A330592B70A20FBF6BB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFJQozo1BZEnJw7est3eaqf6qm8Ppig8FiUb3aFwiKWr/0/323830343a353464343a3a2f33332d3333203d3e20323638363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54d4::/33

    Signature Algorithm: sha256WithRSAEncryption
         a0:35:ce:e1:ff:b4:c3:6e:96:2a:7f:a8:89:9f:d6:6f:59:82:
         1c:cc:ac:cc:06:2f:6f:66:52:a4:80:ee:65:07:87:c5:78:42:
         77:7f:09:33:09:ab:47:e5:e8:fd:fa:98:45:8d:0d:2a:34:04:
         3c:8a:fb:73:d7:b1:0a:ed:c4:18:5f:fd:6b:86:9a:3c:c5:48:
         a4:04:6e:38:6b:16:4b:df:2f:68:9f:f6:ea:86:3b:af:d6:32:
         1d:fe:8d:01:c4:b5:97:ab:64:aa:c8:8c:eb:c8:6e:4e:8c:36:
         6c:d0:eb:33:f8:e8:e9:02:78:82:20:f3:e2:76:26:f6:67:5d:
         1f:c0:6a:87:05:84:af:d8:79:ec:74:3d:7f:61:5d:41:f0:1f:
         e9:52:aa:55:cc:6e:30:b4:7a:cd:26:86:97:e2:b6:94:ab:3a:
         bd:1b:43:fd:bb:14:9b:6a:eb:79:f8:c1:17:d3:83:c9:29:38:
         cb:60:2f:7c:01:4e:ba:7f:05:cf:f7:1c:70:24:3a:04:11:e3:
         44:2f:22:e5:98:c0:36:90:81:c8:ad:fe:13:fe:c7:c2:b9:f3:
         15:d5:36:3e:b0:d7:da:d4:9c:4a:15:df:1b:eb:7e:1e:e2:5e:
         3c:cc:80:62:fb:db:5c:28:11:b1:cd:5f:b4:15:f2:f4:50:3b:
         f7:d9:f1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org