Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dq9AmA6gmbenKW1EVyeH5jwL5Pv9Lin3b2yNqLdbknFa/0/323830343a3639343a3a2f33322d3438203d3e20323632353936.roa
File:                     323830343a3639343a3a2f33322d3438203d3e20323632353936.roa (raw, json)
Hash identifier:          iWuWlSK8vpISTXGfkdjiF43jk5LgzuSnAcvIftvkB4g=
Subject key identifier:   99:5D:5B:D2:A1:26:45:2D:5F:05:3D:86:A7:E0:32:7E:00:FF:5F:12
Certificate issuer:       /CN=F5DD13BC59FC866E53F6606032998AEDFCA3E2F3
Certificate serial:       4D88ABF74E7D067FF73A705F0C59299BA695FA03
Authority key identifier: F5:DD:13:BC:59:FC:86:6E:53:F6:60:60:32:99:8A:ED:FC:A3:E2:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5DD13BC59FC866E53F6606032998AEDFCA3E2F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dq9AmA6gmbenKW1EVyeH5jwL5Pv9Lin3b2yNqLdbknFa/0/323830343a3639343a3a2f33322d3438203d3e20323632353936.roa
Signing time:             Wed 29 Mar 2023 21:00:00 +0000
ROA not before:           Wed 29 Mar 2023 20:55:00 +0000
ROA not after:            Fri 29 Mar 2024 21:00:00 +0000
asID:                     262596
IP address blocks:        2804:694::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:88:ab:f7:4e:7d:06:7f:f7:3a:70:5f:0c:59:29:9b:a6:95:fa:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5DD13BC59FC866E53F6606032998AEDFCA3E2F3
        Validity
            Not Before: Mar 29 20:55:00 2023 GMT
            Not After : Mar 29 21:00:00 2024 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8d:27:c9:67:d6:57:93:6e:85:91:50:2e:87:
                    c1:68:96:2e:a7:ac:f3:e1:03:16:fd:30:6c:96:ae:
                    5c:e2:77:a3:80:ca:16:c4:04:97:5a:ca:a8:fc:ab:
                    75:d4:44:e7:05:1f:cb:ec:9d:24:bc:1d:11:63:c4:
                    89:ba:14:87:20:67:45:ef:e9:31:12:a0:8d:4f:0c:
                    e2:8b:fd:1e:d5:0b:73:ee:03:ae:e3:1e:95:a7:38:
                    8a:87:03:c2:80:49:df:1f:d1:ce:07:6f:c2:c7:14:
                    1e:f1:fb:44:42:4c:c1:f2:e7:9a:f3:c1:e9:21:26:
                    30:ec:7d:b1:15:c3:7e:f6:4b:d3:a5:f4:db:31:66:
                    01:3c:33:a7:92:cc:46:79:b6:ee:32:31:25:71:4a:
                    d1:5a:28:b5:e9:2c:5e:c5:77:8c:70:e0:77:33:2a:
                    d0:96:04:42:c8:c5:6c:b9:a5:d8:ff:ff:06:fd:74:
                    8a:1f:d2:31:0a:8f:a9:98:b1:22:c7:42:c7:ba:5b:
                    e4:e8:44:21:1e:af:b7:cc:e9:6d:e9:4f:e9:0c:38:
                    96:8e:8c:ec:ec:69:f6:ac:e7:e7:5e:d5:44:14:0f:
                    d7:81:fa:17:97:d6:f9:ca:d6:84:5f:b7:cb:ae:91:
                    df:87:a4:16:ef:b1:03:5e:5e:bd:64:50:da:bd:84:
                    cc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:5D:5B:D2:A1:26:45:2D:5F:05:3D:86:A7:E0:32:7E:00:FF:5F:12
            X509v3 Authority Key Identifier:
                keyid:F5:DD:13:BC:59:FC:86:6E:53:F6:60:60:32:99:8A:ED:FC:A3:E2:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dq9AmA6gmbenKW1EVyeH5jwL5Pv9Lin3b2yNqLdbknFa/0/F5DD13BC59FC866E53F6606032998AEDFCA3E2F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5DD13BC59FC866E53F6606032998AEDFCA3E2F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dq9AmA6gmbenKW1EVyeH5jwL5Pv9Lin3b2yNqLdbknFa/0/323830343a3639343a3a2f33322d3438203d3e20323632353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:694::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:88:78:87:06:84:46:65:32:50:03:d7:e1:a6:04:a9:b2:2f:
         72:8d:ab:c6:d6:57:ee:69:14:b4:c4:4f:98:16:e9:91:21:ec:
         56:34:41:e6:1f:fa:9e:b5:af:a0:c6:0d:2b:8f:10:45:ed:41:
         3f:bd:1e:03:f4:4c:9d:67:b9:ba:ac:0e:66:2d:fb:46:8a:fb:
         85:4f:b8:23:b2:6e:69:89:db:ce:7a:28:1a:aa:68:cb:33:94:
         2a:25:4d:ef:04:49:e2:23:1d:30:dc:0f:91:8a:30:ef:16:4b:
         74:18:2f:87:da:a1:ec:0a:2d:11:bf:07:a0:78:4e:ac:09:71:
         f3:30:8a:c1:ec:6c:d7:5f:f5:4f:00:56:92:33:49:08:c4:cb:
         de:4f:30:2d:07:9c:8d:c6:00:06:21:94:87:00:49:61:e9:19:
         a1:d5:34:97:79:b7:b5:2e:3f:49:98:73:44:1c:6b:ea:eb:42:
         aa:df:af:1f:3b:61:d2:8d:e4:20:9e:f2:34:52:5a:97:a8:9d:
         d5:a4:cd:ee:76:d4:50:c2:9d:1e:bb:fb:bf:d7:2c:5d:e7:49:
         a1:11:a2:6f:0f:7f:e1:33:58:e0:02:22:ba:ad:1c:aa:94:dc:
         57:9a:b9:5b:7a:59:ab:6b:d3:85:a5:d2:5e:e0:e2:42:ba:e0:
         33:93:a8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org