Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GC5q79XxcojkP7f4rnW277ADxFX1vMcQdAmf8LEZuamm/0/323830343a383231383a3a2f33322d3438203d3e20323732343938.roa
File:                     323830343a383231383a3a2f33322d3438203d3e20323732343938.roa (raw, json)
Hash identifier:          2zueD6WhguGlQk72W/sdKq5/LKmrXBI1Zopg31dhCVU=
Subject key identifier:   EC:B5:23:58:29:B4:E5:A4:BE:50:C4:4E:01:40:69:3D:63:D4:D7:8B
Certificate issuer:       /CN=F257D9B509B80BD942D7280B239502CBA4F69E86
Certificate serial:       6BDA06004523575FD947B2CC9B5C4B82ACA2ADD7
Authority key identifier: F2:57:D9:B5:09:B8:0B:D9:42:D7:28:0B:23:95:02:CB:A4:F6:9E:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F257D9B509B80BD942D7280B239502CBA4F69E86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GC5q79XxcojkP7f4rnW277ADxFX1vMcQdAmf8LEZuamm/0/323830343a383231383a3a2f33322d3438203d3e20323732343938.roa
Signing time:             Thu 21 Dec 2023 00:52:33 +0000
ROA not before:           Thu 21 Dec 2023 00:47:33 +0000
ROA not after:            Thu 19 Dec 2024 00:52:33 +0000
asID:                     272498
IP address blocks:        2804:8218::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:da:06:00:45:23:57:5f:d9:47:b2:cc:9b:5c:4b:82:ac:a2:ad:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F257D9B509B80BD942D7280B239502CBA4F69E86
        Validity
            Not Before: Dec 21 00:47:33 2023 GMT
            Not After : Dec 19 00:52:33 2024 GMT
        Subject: CN=ECB5235829B4E5A4BE50C44E0140693D63D4D78B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:33:c9:5f:19:1c:ad:a2:7a:63:3a:67:62:b3:
                    fb:ba:cb:f2:2e:93:77:9c:29:22:02:86:58:50:a7:
                    5a:52:a5:7c:c9:c4:58:0a:6f:f0:4d:04:85:59:c9:
                    91:32:93:ef:5e:3f:21:d7:0f:bb:b1:78:0b:6d:62:
                    30:d9:24:37:16:51:a9:48:67:7f:b2:8f:fc:14:ce:
                    5c:5b:5f:a4:e0:ad:1b:ef:d0:f9:ba:ce:b3:81:08:
                    7c:de:c7:de:1e:60:01:3c:fa:a7:d9:7f:a5:4b:87:
                    cb:04:6e:0f:fe:61:fe:81:66:4e:3e:ff:c8:08:35:
                    14:99:08:7d:19:95:03:f1:9a:a3:8b:62:d8:d7:27:
                    74:a5:ab:15:1c:1f:42:7e:32:11:5d:8a:65:3b:be:
                    9c:5d:04:b8:10:72:58:47:1d:83:ab:8f:61:74:5f:
                    0c:4e:12:8f:45:e6:51:f9:0a:66:63:a5:9f:79:ac:
                    4b:0e:2c:8e:7c:73:72:8d:3a:5d:34:f0:04:2b:eb:
                    9a:8e:ec:2b:74:40:ff:57:1b:61:49:90:d6:dd:90:
                    8f:a2:20:c8:7e:36:09:c2:e5:14:25:03:66:24:99:
                    b7:91:af:fb:b3:ac:04:5b:23:e1:74:27:8f:91:11:
                    66:ef:dc:b8:1e:75:0d:73:e6:20:5a:56:09:5a:b3:
                    35:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B5:23:58:29:B4:E5:A4:BE:50:C4:4E:01:40:69:3D:63:D4:D7:8B
            X509v3 Authority Key Identifier:
                keyid:F2:57:D9:B5:09:B8:0B:D9:42:D7:28:0B:23:95:02:CB:A4:F6:9E:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GC5q79XxcojkP7f4rnW277ADxFX1vMcQdAmf8LEZuamm/0/F257D9B509B80BD942D7280B239502CBA4F69E86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F257D9B509B80BD942D7280B239502CBA4F69E86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GC5q79XxcojkP7f4rnW277ADxFX1vMcQdAmf8LEZuamm/0/323830343a383231383a3a2f33322d3438203d3e20323732343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8218::/32

    Signature Algorithm: sha256WithRSAEncryption
         c9:23:11:0f:32:d1:8d:7a:9d:d2:02:83:22:86:b2:cc:f3:02:
         79:32:8f:96:07:50:e3:af:bb:0b:e2:b6:80:63:b5:e9:90:3b:
         67:da:53:21:ff:6e:a3:62:07:f4:58:43:4f:7b:3f:eb:32:b3:
         c0:34:d9:15:6a:64:d1:60:29:24:40:e2:77:34:27:2a:c4:6e:
         03:52:4e:c7:e4:50:08:c1:1e:67:23:64:1c:f4:46:d5:cf:a0:
         2d:cc:81:f8:21:5c:cd:d8:3b:c9:c1:53:ec:67:41:63:9a:7d:
         94:1e:aa:03:29:af:59:bb:f3:c6:5f:58:61:c5:a9:46:4e:8b:
         c7:8e:1f:d5:f7:01:0a:7f:b4:23:59:77:32:3f:fc:eb:06:7c:
         f9:fc:f3:c4:9c:f6:eb:f6:a8:5f:41:a5:28:f1:8e:39:44:10:
         fc:48:64:92:0d:b6:e0:16:2e:50:1a:65:47:5e:39:e1:5b:27:
         7f:74:36:7f:1d:38:db:15:15:eb:8c:33:30:0b:e0:11:d7:9a:
         bd:4e:ed:67:4d:2b:86:0b:c5:e0:30:86:7e:e2:46:91:57:c2:
         ce:89:8b:46:d5:3d:e7:f4:a4:b7:82:0e:73:85:d2:44:07:1d:
         0f:40:a0:a5:7e:4e:78:9f:3e:7a:08:1d:57:6f:46:b7:ec:b3:
         d3:13:d0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org