Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/323830343a333037633a633030303a3a2f33342d3334203d3e20323634393534.roa
File:                     323830343a333037633a633030303a3a2f33342d3334203d3e20323634393534.roa (raw, json)
Hash identifier:          1QAxfIQO8bvyJxh69ZFVzvGLJvR+Siy5yepcg2qbXL4=
Subject key identifier:   6B:29:60:E1:01:5C:3C:0E:FB:52:0C:16:E2:22:96:04:17:AF:49:C5
Certificate issuer:       /CN=9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC
Certificate serial:       5E5DC654E4BF6A9F606B7E514370C68667FF3A2C
Authority key identifier: 9F:A0:01:FF:2F:FE:B4:FA:4F:82:5B:BF:86:B2:D2:25:65:85:C3:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/323830343a333037633a633030303a3a2f33342d3334203d3e20323634393534.roa
Signing time:             Tue 26 Sep 2023 20:01:49 +0000
ROA not before:           Tue 26 Sep 2023 19:56:49 +0000
ROA not after:            Tue 24 Sep 2024 20:01:49 +0000
asID:                     264954
IP address blocks:        2804:307c:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:5d:c6:54:e4:bf:6a:9f:60:6b:7e:51:43:70:c6:86:67:ff:3a:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC
        Validity
            Not Before: Sep 26 19:56:49 2023 GMT
            Not After : Sep 24 20:01:49 2024 GMT
        Subject: CN=6B2960E1015C3C0EFB520C16E222960417AF49C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:11:64:12:31:16:a7:25:d8:03:9b:c3:eb:d0:
                    87:ba:b3:a6:36:bc:84:ab:9d:dd:83:fc:e1:67:ef:
                    1b:ec:55:8f:8e:10:72:3a:04:4d:71:d4:02:c0:20:
                    2e:8f:9a:4a:68:93:18:b8:2b:2b:1d:58:ee:3c:0f:
                    e1:45:71:74:96:8a:94:4b:8b:a2:d2:60:9c:a0:26:
                    0a:80:6f:0a:54:1a:9a:4a:5f:e2:74:32:db:10:07:
                    87:31:a1:12:af:16:c8:bd:89:3a:70:9a:62:bd:ef:
                    7e:94:8c:8b:93:2d:7b:92:2d:7e:d7:5e:7a:61:da:
                    69:3f:76:0c:f6:c0:ad:33:01:23:be:80:e6:43:28:
                    e0:cb:19:c4:c0:ff:1c:10:be:13:27:76:e4:61:9c:
                    ea:83:11:3f:14:14:55:7a:6b:e0:a6:71:fa:15:93:
                    b1:de:1b:7f:4c:b1:4e:63:73:d0:de:ae:5c:c6:ec:
                    2a:ad:fb:81:b4:e8:a4:85:85:47:c8:ba:8a:ed:72:
                    1e:ae:fc:94:63:8b:86:87:99:61:2f:9b:ca:e3:20:
                    67:d6:96:fe:19:18:c8:30:18:80:0e:f4:a8:31:b9:
                    a2:22:f9:5d:c7:a3:f8:fb:b8:98:47:22:85:b9:dc:
                    b4:52:9b:16:f0:7c:c2:32:3d:2d:37:22:1f:03:50:
                    cd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:29:60:E1:01:5C:3C:0E:FB:52:0C:16:E2:22:96:04:17:AF:49:C5
            X509v3 Authority Key Identifier:
                keyid:9F:A0:01:FF:2F:FE:B4:FA:4F:82:5B:BF:86:B2:D2:25:65:85:C3:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/323830343a333037633a633030303a3a2f33342d3334203d3e20323634393534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:307c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         94:02:1f:fa:fb:06:18:7b:fd:88:05:be:d8:62:0a:d2:03:da:
         8b:0d:a0:03:79:94:59:5d:f0:d2:b3:d7:63:c1:c4:f5:56:0d:
         01:d1:13:7d:12:fc:a7:ec:34:b9:c4:39:a8:37:41:d5:a7:31:
         0d:b0:ee:8c:9e:e5:0a:53:c4:1d:e9:01:ee:ff:39:71:f8:82:
         7c:05:8a:fd:81:f3:34:28:15:4c:04:ca:d4:ec:8f:16:79:af:
         55:c6:3c:19:a5:9a:d3:6c:c5:5a:bc:41:4f:59:91:2b:55:ba:
         ae:b0:18:67:50:c1:dc:8e:45:1c:f2:33:5a:70:d9:8f:e5:af:
         1c:91:4b:1c:3b:25:65:5f:fc:2f:1b:2e:f0:89:58:3f:1e:d8:
         ee:9d:d0:e2:33:5c:5b:53:6a:b7:31:6a:46:de:52:ad:89:27:
         1f:2d:05:9c:b7:de:4a:b2:10:e8:d8:92:f4:e5:7c:df:3d:ef:
         4d:85:8e:78:94:87:40:8a:79:60:3f:a0:db:f8:65:a4:aa:c5:
         21:24:01:dc:e9:fd:68:3b:db:04:8d:93:66:84:f1:4a:02:4e:
         9c:d6:de:b8:bb:6d:04:17:99:21:85:e0:8d:c4:0c:95:14:4c:
         a3:ac:cd:ad:da:a2:e4:f2:10:7d:32:63:46:1e:98:d3:5c:cf:
         6b:f9:c3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org