Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBvLLddTZapdzFLEytbF9QcDT6jRCQfqM35opa9hdQrU/0/323830343a356537303a3a2f33322d313238203d3e20323639303333.roa
File:                     323830343a356537303a3a2f33322d313238203d3e20323639303333.roa (raw, json)
Hash identifier:          1LVGmxoIBGtpTApFRKDbEjuX5IaTgAjZGwzVQOpb9tk=
Subject key identifier:   54:4E:26:02:2B:63:45:BF:D3:B3:8A:F1:D4:36:20:E8:21:58:05:9B
Certificate issuer:       /CN=C0261E6D297B0680D054CE57910CEDB3E3EE7771
Certificate serial:       7D54ABBE7BF28CEB86CCA1C493F443B2B9BD02B5
Authority key identifier: C0:26:1E:6D:29:7B:06:80:D0:54:CE:57:91:0C:ED:B3:E3:EE:77:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C0261E6D297B0680D054CE57910CEDB3E3EE7771.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBvLLddTZapdzFLEytbF9QcDT6jRCQfqM35opa9hdQrU/0/323830343a356537303a3a2f33322d313238203d3e20323639303333.roa
Signing time:             Tue 23 Jan 2024 02:36:44 +0000
ROA not before:           Tue 23 Jan 2024 02:31:44 +0000
ROA not after:            Tue 21 Jan 2025 02:36:44 +0000
asID:                     269033
IP address blocks:        2804:5e70::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:54:ab:be:7b:f2:8c:eb:86:cc:a1:c4:93:f4:43:b2:b9:bd:02:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0261E6D297B0680D054CE57910CEDB3E3EE7771
        Validity
            Not Before: Jan 23 02:31:44 2024 GMT
            Not After : Jan 21 02:36:44 2025 GMT
        Subject: CN=544E26022B6345BFD3B38AF1D43620E82158059B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:92:47:24:19:9d:14:54:68:30:bd:84:b7:d0:
                    6b:86:73:66:eb:d0:20:5e:c8:f0:51:bc:ed:11:a9:
                    34:71:ba:d3:ad:6e:24:de:61:db:6b:aa:59:b1:72:
                    cc:c4:62:7a:a4:45:bc:48:0f:8a:02:51:74:7a:8a:
                    ed:73:03:01:3d:08:f7:e2:8e:b6:d8:69:f6:b0:bd:
                    88:5e:4f:be:84:85:cd:05:f0:0c:d6:08:ed:80:46:
                    11:cd:0c:c2:d1:6d:26:0d:f0:32:83:05:3f:09:3a:
                    9c:bc:0d:c0:4f:c4:54:48:df:8a:57:52:38:f7:45:
                    db:33:6b:09:3b:bf:6d:60:b3:91:14:f4:7a:a8:ad:
                    00:69:e9:df:2c:b1:dd:8c:8d:ff:8d:cf:7c:73:0c:
                    0f:00:ef:24:9d:00:ed:69:95:8c:1a:9e:b9:e8:46:
                    d8:36:51:5f:3a:5a:71:44:c2:5a:3e:a0:71:9f:46:
                    c3:0f:a3:d8:57:ed:08:92:b6:a4:38:44:8f:50:4e:
                    87:01:2b:0a:5f:82:2c:06:33:dd:03:3b:c4:dc:7e:
                    1c:db:a2:16:44:5b:05:08:b2:47:ed:53:7b:09:f1:
                    38:e2:6b:ed:38:d8:e9:c8:71:1c:c8:0d:34:92:86:
                    e4:97:13:4c:4d:77:dc:31:8e:6a:c1:52:ad:a8:4c:
                    b7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4E:26:02:2B:63:45:BF:D3:B3:8A:F1:D4:36:20:E8:21:58:05:9B
            X509v3 Authority Key Identifier:
                keyid:C0:26:1E:6D:29:7B:06:80:D0:54:CE:57:91:0C:ED:B3:E3:EE:77:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBvLLddTZapdzFLEytbF9QcDT6jRCQfqM35opa9hdQrU/0/C0261E6D297B0680D054CE57910CEDB3E3EE7771.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C0261E6D297B0680D054CE57910CEDB3E3EE7771.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBvLLddTZapdzFLEytbF9QcDT6jRCQfqM35opa9hdQrU/0/323830343a356537303a3a2f33322d313238203d3e20323639303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e70::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:31:53:2e:ce:bb:b9:c7:76:19:1b:e5:4b:23:b3:2e:d0:f0:
         ef:2b:5d:36:cf:b6:98:50:0e:d3:41:38:06:ec:0a:34:6d:e0:
         ca:e3:c0:6c:66:d4:c7:1a:77:d6:93:cd:2a:7b:a4:02:a9:b3:
         06:6d:84:28:ce:c1:a3:75:5e:de:73:c3:b4:ff:00:85:a8:3f:
         bb:0d:d8:68:ea:42:1a:de:ef:4d:c6:8f:27:95:81:31:e6:14:
         62:10:39:42:ff:86:62:58:f9:23:b5:ab:9b:8b:22:5c:fa:4a:
         79:a2:7c:24:74:c4:39:c8:3f:f6:85:96:95:3a:80:2c:11:e2:
         6c:a8:d6:96:3e:08:99:9b:45:8c:e3:d2:ad:65:27:95:30:be:
         5c:7e:8e:a3:ec:1d:93:e8:a9:ba:a9:e8:cb:26:31:44:50:4f:
         5a:3b:a6:73:9d:d9:c0:3f:23:69:b2:f0:0b:7f:6e:c0:92:af:
         dc:f0:0b:48:2d:b8:38:c7:14:f9:b2:6c:93:d7:17:d6:2f:86:
         40:5f:81:ea:7b:a8:78:c1:24:3e:11:4e:c3:d9:e0:8c:ff:86:
         4e:c3:f5:70:5a:36:1b:a5:b6:db:5c:29:df:3f:f1:c3:cd:a3:
         ea:87:a4:ea:9a:b6:fc:12:12:82:00:eb:03:17:8f:04:66:9d:
         44:a5:b6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:09 2024 by rpki-client on console-fra.rpki-client.org