Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/323830343a353763303a3a2f33322d3332203d3e20323638303834.roa
File:                     323830343a353763303a3a2f33322d3332203d3e20323638303834.roa (raw, json)
Hash identifier:          4lJ1rH0Fa5t+LohJMIY7wVZrpWshT6qDaSEGQUQeSu0=
Subject key identifier:   81:1E:AC:8A:06:51:A5:66:90:76:BF:DB:DC:C6:66:80:15:A0:CC:1C
Certificate issuer:       /CN=F2D22B3DB50C340D27B02F3976687BE7F8AA5629
Certificate serial:       6652D2FD8A026210F89AFDEF6AB6BA05F649A68C
Authority key identifier: F2:D2:2B:3D:B5:0C:34:0D:27:B0:2F:39:76:68:7B:E7:F8:AA:56:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2D22B3DB50C340D27B02F3976687BE7F8AA5629.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/323830343a353763303a3a2f33322d3332203d3e20323638303834.roa
Signing time:             Fri 28 Apr 2023 13:04:01 +0000
ROA not before:           Fri 28 Apr 2023 12:59:01 +0000
ROA not after:            Fri 26 Apr 2024 13:04:01 +0000
asID:                     268084
IP address blocks:        2804:57c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:52:d2:fd:8a:02:62:10:f8:9a:fd:ef:6a:b6:ba:05:f6:49:a6:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2D22B3DB50C340D27B02F3976687BE7F8AA5629
        Validity
            Not Before: Apr 28 12:59:01 2023 GMT
            Not After : Apr 26 13:04:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:90:87:f9:e3:26:3a:c1:5c:75:63:f1:19:a8:
                    02:2c:a3:02:b0:31:f2:f2:8f:7a:d1:e4:31:ea:6c:
                    33:83:93:bd:be:b1:f8:26:c1:c6:1b:5b:cf:a0:e5:
                    4a:e1:5e:61:62:0e:51:ae:7f:71:61:ba:4b:c7:c9:
                    ce:8e:5f:ca:f2:ff:b5:a9:a0:b5:97:00:f4:33:2b:
                    92:20:8e:54:1a:5f:51:22:27:e1:7c:85:81:33:6f:
                    d6:26:81:4f:7a:12:8d:6f:7f:10:d8:23:b2:2b:dc:
                    6d:0d:cd:4b:dc:99:85:f6:19:5c:bd:8f:27:cd:f5:
                    58:10:48:b5:16:70:a3:a2:56:92:03:66:ef:a5:82:
                    c5:64:69:4d:93:f8:2e:d6:6f:ba:4e:ca:e3:2e:de:
                    9c:a6:4c:ac:6a:a7:80:a7:28:07:24:51:87:88:f9:
                    ab:bd:73:79:1e:bf:15:66:25:52:6c:0b:56:3f:64:
                    db:b6:d4:55:94:f2:95:b4:db:ac:18:98:3f:de:ad:
                    63:34:db:45:bd:da:3e:f1:ad:98:e2:c0:bf:51:90:
                    a6:9b:d1:9c:cb:f0:81:4b:78:58:e8:31:bc:9f:02:
                    22:6c:70:8e:54:97:99:a4:3d:18:35:54:21:09:fb:
                    19:5e:66:b1:1b:a7:fc:b5:b4:5d:dd:41:3d:ee:c4:
                    61:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:1E:AC:8A:06:51:A5:66:90:76:BF:DB:DC:C6:66:80:15:A0:CC:1C
            X509v3 Authority Key Identifier:
                keyid:F2:D2:2B:3D:B5:0C:34:0D:27:B0:2F:39:76:68:7B:E7:F8:AA:56:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/F2D22B3DB50C340D27B02F3976687BE7F8AA5629.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2D22B3DB50C340D27B02F3976687BE7F8AA5629.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/323830343a353763303a3a2f33322d3332203d3e20323638303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:57c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:99:53:b2:2c:b1:8b:c6:f5:17:fb:9d:f3:3f:fe:de:a2:41:
         f7:13:3e:0d:92:a3:0a:e3:cc:eb:b4:e4:2b:66:fc:ba:52:6c:
         c4:52:95:ea:41:46:7f:e7:f6:b4:0e:95:71:d8:5b:7f:5a:53:
         58:5a:84:fd:26:9a:dd:d8:12:23:a0:03:98:07:67:25:96:1f:
         47:36:88:7e:32:4c:df:9d:8d:aa:2b:a5:18:59:58:7a:13:06:
         72:b3:7f:c5:cf:cc:4c:90:f2:e5:c3:04:50:3d:a9:2e:06:48:
         f1:d4:db:57:b2:4a:f0:25:12:ce:ec:45:57:75:b7:11:aa:08:
         d3:50:f1:b4:4c:57:24:d1:98:0e:66:9a:e2:8e:78:6a:5f:44:
         7c:13:9c:d8:44:c7:39:c3:b4:5b:25:61:0d:8c:44:e0:7c:8a:
         91:f1:06:db:0e:a7:c2:87:bb:eb:0e:2e:f2:76:3f:4b:f3:8c:
         c6:fe:e5:b8:ac:7a:01:84:da:84:e2:81:f5:b7:97:1f:13:f0:
         71:ae:10:8c:0e:46:0d:25:dd:42:9a:51:16:71:0c:33:24:7a:
         c8:1a:ce:91:d2:ee:cc:f4:f7:f3:14:f9:52:46:7d:68:16:38:
         36:bb:f4:3c:c5:21:ba:d6:77:3a:6d:de:8b:88:fd:8a:ed:75:
         fa:e8:5f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org