Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/323830343a313865303a3a2f33322d3332203d3e20323632363938.roa
File:                     323830343a313865303a3a2f33322d3332203d3e20323632363938.roa (raw, json)
Hash identifier:          qKny5GHCEDJyFIL5BYdn3Den/i0nv2MA45W8L+b6vJY=
Subject key identifier:   54:F5:EB:5C:84:B2:E2:C8:D4:68:41:31:41:06:EC:7E:D1:7F:C0:AA
Certificate issuer:       /CN=12D902AA004E1396EDA97BD4212288390A55D9A9
Certificate serial:       79035C42A7FE04D66B56A9DBE07631374EFE6D2E
Authority key identifier: 12:D9:02:AA:00:4E:13:96:ED:A9:7B:D4:21:22:88:39:0A:55:D9:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/12D902AA004E1396EDA97BD4212288390A55D9A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/323830343a313865303a3a2f33322d3332203d3e20323632363938.roa
Signing time:             Wed 08 Nov 2023 12:39:24 +0000
ROA not before:           Wed 08 Nov 2023 12:34:24 +0000
ROA not after:            Wed 06 Nov 2024 12:39:24 +0000
asID:                     262698
IP address blocks:        2804:18e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:03:5c:42:a7:fe:04:d6:6b:56:a9:db:e0:76:31:37:4e:fe:6d:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12D902AA004E1396EDA97BD4212288390A55D9A9
        Validity
            Not Before: Nov  8 12:34:24 2023 GMT
            Not After : Nov  6 12:39:24 2024 GMT
        Subject: CN=54F5EB5C84B2E2C8D46841314106EC7ED17FC0AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:15:c2:90:d8:62:4f:a6:09:e5:18:b6:b9:44:
                    f2:1a:d5:11:32:ea:c7:bd:9d:0a:6a:05:b1:10:ab:
                    da:9b:6d:1a:d7:f8:9e:da:d0:1a:f2:66:ad:2f:05:
                    58:0f:77:4a:8f:98:91:e8:56:2a:f1:d7:39:62:74:
                    9b:67:80:ab:a3:74:89:df:a4:09:ff:46:31:c7:65:
                    10:fa:dd:86:fc:22:ab:fc:df:59:5b:41:f3:e6:c5:
                    c0:14:19:0a:c2:c5:a7:29:7c:c9:60:00:ed:84:23:
                    6c:0d:b7:ab:22:40:de:64:ec:03:c8:2d:58:0f:83:
                    69:df:45:86:d8:8e:fc:54:22:92:88:ee:a6:6a:bf:
                    b0:9c:be:a6:37:33:90:a6:d2:37:2a:db:a5:1e:73:
                    7b:bc:96:d1:62:55:8c:6e:0a:45:58:30:1d:a7:50:
                    bc:b5:05:d3:6b:2a:08:35:b5:fb:fb:d3:f0:cd:f5:
                    f7:d3:38:12:77:8f:2a:e6:9d:84:ab:f2:e6:22:62:
                    e9:45:59:66:69:53:c0:02:76:2b:f7:02:d3:e9:06:
                    c9:a2:3c:20:ef:da:fa:b6:b0:b0:f0:2d:da:7a:b9:
                    57:ea:e0:12:dc:d2:d7:4c:b5:b6:49:04:42:a4:c5:
                    8a:7c:bd:d0:70:f0:d9:7e:85:2d:ff:6e:4c:5d:b2:
                    3a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F5:EB:5C:84:B2:E2:C8:D4:68:41:31:41:06:EC:7E:D1:7F:C0:AA
            X509v3 Authority Key Identifier:
                keyid:12:D9:02:AA:00:4E:13:96:ED:A9:7B:D4:21:22:88:39:0A:55:D9:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/12D902AA004E1396EDA97BD4212288390A55D9A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/12D902AA004E1396EDA97BD4212288390A55D9A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/323830343a313865303a3a2f33322d3332203d3e20323632363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:18e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:76:26:e7:51:d0:b4:25:4f:b9:55:0b:ef:db:ec:f1:62:59:
         99:83:76:65:ef:45:2b:e8:f9:54:79:d4:ad:4b:8d:5f:12:0a:
         02:fc:72:e6:d3:e1:11:ce:4f:87:38:d3:22:45:90:d1:8e:75:
         87:41:fa:a9:e1:4b:be:09:4a:fd:81:a8:b9:82:ba:e6:d1:40:
         f0:b9:7a:95:47:97:47:40:ab:34:54:fd:48:49:d2:fa:9f:68:
         95:d9:92:af:6f:af:cd:64:98:00:ad:24:a2:a7:d9:66:01:09:
         7e:00:69:ea:6b:44:18:b7:d0:19:fa:2d:71:0b:a3:21:fc:0c:
         c2:94:75:9c:f3:47:aa:db:0d:d0:b2:ee:f7:c9:71:5f:a2:1e:
         56:ee:e1:df:77:37:2e:87:38:19:b3:bc:a4:ec:16:d6:58:46:
         d6:4a:5f:bd:02:c5:e5:46:a8:9f:56:2c:3b:02:ba:8a:c7:31:
         63:3e:7d:f9:80:4b:ee:22:41:9f:f7:0f:6e:5c:cb:7b:72:4f:
         ff:6e:f2:cd:45:81:31:50:0c:01:23:73:9e:da:5b:36:56:a6:
         f4:ca:d6:8e:00:1d:77:bc:6a:35:ba:2b:70:af:6a:be:6e:fb:
         fe:7a:0a:70:77:b1:86:be:f9:c4:03:42:b1:89:ef:cd:33:6b:
         b9:3a:47:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org