Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNfqTdFJM8U5AXTyP46n5HD5Y5X1qpy8eBT3CsEQMvw4/0/323830343a323332343a3a2f33322d3438203d3e20323632383833.roa
File:                     323830343a323332343a3a2f33322d3438203d3e20323632383833.roa (raw, json)
Hash identifier:          7wPGEVJ+tkaS3epkpV5NniAlU07gOPaL5nUAB3ozsOQ=
Subject key identifier:   D0:56:8F:C4:A5:D7:2C:EA:A7:4C:DA:A4:E6:9D:92:8A:FE:3E:0F:B8
Certificate issuer:       /CN=E5754BC58952E3CFD46152E05FECC3D0D1B5429C
Certificate serial:       4FEC8AE740827420CE3D351929F59D5BC172B45A
Authority key identifier: E5:75:4B:C5:89:52:E3:CF:D4:61:52:E0:5F:EC:C3:D0:D1:B5:42:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5754BC58952E3CFD46152E05FECC3D0D1B5429C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNfqTdFJM8U5AXTyP46n5HD5Y5X1qpy8eBT3CsEQMvw4/0/323830343a323332343a3a2f33322d3438203d3e20323632383833.roa
Signing time:             Thu 24 Aug 2023 21:00:00 +0000
ROA not before:           Thu 24 Aug 2023 20:55:00 +0000
ROA not after:            Thu 22 Aug 2024 21:00:00 +0000
asID:                     262883
IP address blocks:        2804:2324::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ec:8a:e7:40:82:74:20:ce:3d:35:19:29:f5:9d:5b:c1:72:b4:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5754BC58952E3CFD46152E05FECC3D0D1B5429C
        Validity
            Not Before: Aug 24 20:55:00 2023 GMT
            Not After : Aug 22 21:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ad:c6:37:ed:fc:04:f3:de:7d:4c:49:3e:ff:
                    89:2f:61:7f:99:13:5e:7b:4e:5b:a8:8f:a1:07:81:
                    99:90:28:b4:6d:9a:76:91:10:dd:5a:07:34:8f:6c:
                    5b:25:3e:bd:ee:b1:88:63:8e:8e:5c:66:4c:70:7b:
                    db:f7:5b:66:85:50:0b:c3:22:56:ad:8c:c8:f2:7a:
                    b1:e0:55:56:c3:c9:3b:14:33:42:a3:ad:3a:b6:5c:
                    29:40:e6:85:90:b2:0e:00:00:cc:d0:59:c0:87:79:
                    5d:cb:e1:dd:8d:42:f8:6b:74:0c:32:01:93:86:4b:
                    a6:8a:6a:49:d9:ba:9a:ae:da:e3:ba:8e:23:36:6a:
                    73:d7:23:17:c5:70:9e:2b:76:50:84:32:38:c4:87:
                    63:db:5d:d1:52:2f:b3:82:39:51:81:2b:9f:a7:c9:
                    ec:2a:23:3c:52:a5:4c:d2:42:25:6c:4e:bd:9c:25:
                    11:fb:76:40:0a:3c:be:4b:25:87:a7:84:f3:21:7d:
                    28:1a:f7:e0:d6:59:df:06:86:7e:c8:2e:77:d7:05:
                    dc:33:46:6a:e4:50:2f:7d:b8:4d:a7:dd:db:b5:37:
                    5e:08:c7:1d:58:5a:a6:b8:66:25:01:53:e2:ab:1a:
                    bc:b6:b7:bf:78:b9:f4:b2:3c:76:85:c4:be:0e:34:
                    e4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:56:8F:C4:A5:D7:2C:EA:A7:4C:DA:A4:E6:9D:92:8A:FE:3E:0F:B8
            X509v3 Authority Key Identifier:
                keyid:E5:75:4B:C5:89:52:E3:CF:D4:61:52:E0:5F:EC:C3:D0:D1:B5:42:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNfqTdFJM8U5AXTyP46n5HD5Y5X1qpy8eBT3CsEQMvw4/0/E5754BC58952E3CFD46152E05FECC3D0D1B5429C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5754BC58952E3CFD46152E05FECC3D0D1B5429C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNfqTdFJM8U5AXTyP46n5HD5Y5X1qpy8eBT3CsEQMvw4/0/323830343a323332343a3a2f33322d3438203d3e20323632383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2324::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:9e:b2:37:51:98:aa:7e:ae:0d:5c:5b:09:86:70:04:a3:89:
         18:d2:12:29:00:11:50:9a:3f:d6:d0:2b:9b:90:05:b0:99:29:
         08:87:8a:87:10:9a:08:c5:54:cb:b6:b0:99:8c:78:f0:4b:a1:
         03:68:26:57:fe:e6:91:65:19:24:18:e6:62:49:ce:e6:44:3d:
         71:4a:e2:ff:22:74:03:86:e0:c4:9d:08:fa:56:48:67:67:2b:
         9d:d2:57:32:45:01:03:1a:19:60:20:cc:14:f4:05:3e:37:ec:
         ab:d2:19:73:3d:d6:be:e4:01:61:2c:b2:37:af:c6:28:1a:f0:
         37:99:a1:6d:db:ad:70:4d:be:8d:32:d5:b1:9f:cb:82:b3:b1:
         87:a7:cb:c1:a6:26:72:8d:eb:67:08:f2:c8:9b:59:9f:45:c5:
         8b:02:8d:db:3c:c6:5f:0c:7e:a5:74:86:96:7e:5a:63:2c:07:
         57:b2:90:19:75:04:fc:dc:dc:d4:51:05:39:02:e4:f4:3e:fc:
         d5:60:05:7d:90:27:44:e7:7b:ac:5f:9c:0a:ed:dd:82:f4:c3:
         dd:40:7c:06:ff:f2:63:a8:56:a0:03:0d:06:03:5c:95:1c:77:
         92:96:07:0b:ce:7c:1c:15:45:5d:17:68:d1:42:f0:dc:02:20:
         ab:b8:ad:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org