Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/0/323830343a333565383a3a2f33322d3332203d3e20323636333134.roa
File:                     323830343a333565383a3a2f33322d3332203d3e20323636333134.roa (raw, json)
Hash identifier:          jaSfx0k45TOyo0nGSk6zkDd3jBaV8yKp7vF8IKgWkQU=
Subject key identifier:   CC:53:8F:18:FD:6D:83:25:D4:F8:64:B8:1A:9E:34:C2:4B:D1:5B:C7
Certificate issuer:       /CN=4523B98C8A5D03211CD644C7D826F6AD10BE0C7D
Certificate serial:       6C4E94701A19BCCF32A375EC9365DBF281BB265F
Authority key identifier: 45:23:B9:8C:8A:5D:03:21:1C:D6:44:C7:D8:26:F6:AD:10:BE:0C:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4523B98C8A5D03211CD644C7D826F6AD10BE0C7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/0/323830343a333565383a3a2f33322d3332203d3e20323636333134.roa
Signing time:             Fri 23 Aug 2024 20:05:51 +0000
ROA not before:           Fri 23 Aug 2024 20:00:51 +0000
ROA not after:            Fri 22 Aug 2025 20:05:51 +0000
asID:                     266314
IP address blocks:        2804:35e8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:4e:94:70:1a:19:bc:cf:32:a3:75:ec:93:65:db:f2:81:bb:26:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4523B98C8A5D03211CD644C7D826F6AD10BE0C7D
        Validity
            Not Before: Aug 23 20:00:51 2024 GMT
            Not After : Aug 22 20:05:51 2025 GMT
        Subject: CN=CC538F18FD6D8325D4F864B81A9E34C24BD15BC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:20:2e:4e:00:98:b2:b5:a6:66:ec:bd:23:1d:
                    20:9a:a6:4f:1e:d9:18:62:e1:52:a5:cb:9b:e7:07:
                    64:49:d0:54:fc:fe:70:9c:84:fc:7e:8c:e7:52:57:
                    4f:fc:26:cb:df:53:16:ae:d6:f3:c1:c4:e1:c1:c6:
                    d9:ae:e5:34:56:68:88:7c:8c:4d:4a:e7:ee:b5:9a:
                    2b:b7:eb:1d:41:cc:4d:80:c4:c1:db:f5:df:9e:34:
                    86:78:6f:0d:2c:11:1d:25:66:ae:d2:53:d9:5b:13:
                    a9:77:6f:fb:d1:e2:ab:05:a0:01:b4:9a:fa:e1:28:
                    49:d9:55:f0:8a:36:02:e4:e1:e5:aa:02:a7:aa:23:
                    79:ca:56:4b:ca:88:33:1a:9b:78:6a:8a:99:1d:ea:
                    7b:93:fa:49:5b:21:c0:e2:2e:44:a5:49:be:18:a6:
                    71:69:47:d5:03:84:e6:5b:7f:e7:4e:03:4a:bc:25:
                    ea:d8:df:aa:45:8f:22:e4:60:8e:98:6f:bb:96:8c:
                    ad:ab:28:bf:5f:c5:5c:6c:00:58:18:b7:a6:f4:90:
                    33:f2:8f:14:d3:2e:96:7b:96:66:c2:60:0e:52:3d:
                    5c:50:0c:37:c1:fa:5a:7d:52:ae:b8:37:37:e1:31:
                    f2:f9:d0:ef:0d:d1:32:92:f3:50:82:8c:db:ac:f4:
                    73:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:53:8F:18:FD:6D:83:25:D4:F8:64:B8:1A:9E:34:C2:4B:D1:5B:C7
            X509v3 Authority Key Identifier:
                keyid:45:23:B9:8C:8A:5D:03:21:1C:D6:44:C7:D8:26:F6:AD:10:BE:0C:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/0/4523B98C8A5D03211CD644C7D826F6AD10BE0C7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4523B98C8A5D03211CD644C7D826F6AD10BE0C7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/0/323830343a333565383a3a2f33322d3332203d3e20323636333134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:56:be:91:a0:2c:4e:ac:9d:11:8d:3d:4c:14:19:71:f3:05:
         08:69:e3:ff:2f:68:9a:02:a6:94:30:22:b2:12:ed:85:c8:eb:
         f2:d8:d1:7d:e4:e6:ad:a0:56:05:31:dc:cb:a1:c8:5c:84:bb:
         6b:24:23:d8:72:be:20:eb:8a:f3:65:8a:a5:22:39:7f:8e:8d:
         c6:77:4f:a7:35:6f:cd:6e:fe:c5:68:f7:03:cc:3e:a7:27:a6:
         29:ed:a6:d9:fe:95:da:96:53:ed:59:fe:4a:e9:77:09:93:e5:
         61:d3:ac:1b:16:40:7d:f9:bc:bb:f6:64:88:87:25:6a:68:4a:
         1d:d0:ee:0c:4b:cb:6d:82:5c:13:87:4d:01:11:17:f2:96:e5:
         4d:39:c7:15:4c:8e:3a:a4:f2:89:81:e1:5e:f1:12:7a:6d:8b:
         7e:9a:1b:df:4a:6f:93:5d:1c:5b:7f:0b:ed:f1:1c:28:44:e5:
         42:20:88:29:3f:8f:33:90:91:5b:4f:be:dd:4e:d3:34:17:c5:
         a6:3c:4a:8f:b6:36:5f:1a:64:00:85:fa:68:9e:cc:c1:09:20:
         e7:01:5e:f4:7b:43:4a:17:2c:55:f8:7e:4a:24:dd:ca:b9:a2:
         bb:7b:79:50:78:85:1f:13:b5:e6:84:b3:18:e4:2c:35:73:ed:
         c6:40:0e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 25 13:23:31 2024 by rpki-client on console-fra.rpki-client.org