Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/0/323830343a323435343a3a2f33322d3438203d3e20323634323135.roa
File:                     323830343a323435343a3a2f33322d3438203d3e20323634323135.roa (raw, json)
Hash identifier:          alSbFuotfEyKjlIC+nW3p983Y/ig0GfzGlsCDRCsdw4=
Subject key identifier:   06:D9:59:7E:79:32:1D:11:46:09:34:1C:25:56:2F:84:6D:9B:4E:77
Certificate issuer:       /CN=1B5C463B3E3AA5622BC983F1D14288BDFA7C8922
Certificate serial:       5F2BD2349CA8D5B13129C35D9D2E9F4C27A419D7
Authority key identifier: 1B:5C:46:3B:3E:3A:A5:62:2B:C9:83:F1:D1:42:88:BD:FA:7C:89:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B5C463B3E3AA5622BC983F1D14288BDFA7C8922.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/0/323830343a323435343a3a2f33322d3438203d3e20323634323135.roa
Signing time:             Tue 19 Dec 2023 20:17:18 +0000
ROA not before:           Tue 19 Dec 2023 20:12:18 +0000
ROA not after:            Tue 17 Dec 2024 20:17:18 +0000
asID:                     264215
IP address blocks:        2804:2454::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:2b:d2:34:9c:a8:d5:b1:31:29:c3:5d:9d:2e:9f:4c:27:a4:19:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5C463B3E3AA5622BC983F1D14288BDFA7C8922
        Validity
            Not Before: Dec 19 20:12:18 2023 GMT
            Not After : Dec 17 20:17:18 2024 GMT
        Subject: CN=06D9597E79321D114609341C25562F846D9B4E77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:63:83:65:81:d9:5d:8d:a3:b9:69:8f:7e:cb:
                    d6:bb:d3:22:77:48:f0:e9:79:03:df:df:5a:5e:e3:
                    8d:a4:2b:23:dc:67:c3:72:ae:22:a0:a0:b7:15:51:
                    e0:32:c6:96:4d:b9:a3:65:a0:02:fb:a7:5b:59:cf:
                    1f:dd:72:8d:be:0c:c3:19:a1:3b:ab:c9:3a:1f:03:
                    88:34:de:85:9b:81:f2:00:aa:6f:b7:bc:49:08:62:
                    65:7d:ab:f4:8d:e5:7b:94:aa:de:74:98:00:50:97:
                    c5:be:17:4a:40:f9:c8:50:01:90:94:10:30:da:db:
                    bb:f5:04:f4:ff:16:34:66:2a:ba:c8:00:a0:60:36:
                    d9:22:ef:6d:f4:44:49:54:7e:19:3d:30:39:a0:2d:
                    e4:de:1f:9f:61:45:28:15:cf:1c:c5:fb:49:d1:39:
                    a2:20:f5:42:41:24:39:ab:66:10:09:08:bd:72:1b:
                    f2:65:e0:39:4e:42:76:81:6d:5c:00:d9:28:84:14:
                    2d:77:30:f9:a1:37:48:1f:46:c1:f7:02:84:c5:04:
                    a3:50:46:c5:8e:75:09:ea:b0:fb:80:a2:e5:9e:e8:
                    f1:10:b6:84:92:7f:48:50:73:bf:b0:ae:db:bb:41:
                    74:d2:1d:a3:4d:fa:c2:e5:d1:f1:ac:30:a4:d7:8a:
                    a1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D9:59:7E:79:32:1D:11:46:09:34:1C:25:56:2F:84:6D:9B:4E:77
            X509v3 Authority Key Identifier:
                keyid:1B:5C:46:3B:3E:3A:A5:62:2B:C9:83:F1:D1:42:88:BD:FA:7C:89:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/0/1B5C463B3E3AA5622BC983F1D14288BDFA7C8922.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B5C463B3E3AA5622BC983F1D14288BDFA7C8922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/0/323830343a323435343a3a2f33322d3438203d3e20323634323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2454::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:48:c2:ac:b0:90:86:1a:d0:3c:10:09:78:ef:8a:ec:c1:fc:
         f2:b0:0e:6f:cc:88:60:87:a1:fa:4c:3a:5b:3f:d3:a3:f1:73:
         7a:ea:b5:9c:10:da:26:80:79:e0:02:7a:ab:5a:30:bf:2a:48:
         6d:4b:70:b2:f0:20:19:7f:0c:6a:40:7b:ad:03:3e:15:38:82:
         df:aa:32:44:32:2b:a9:ff:35:d7:d2:a7:dc:47:6a:e1:44:bc:
         92:52:10:0f:70:91:ef:c3:c6:1e:56:ff:83:02:b6:0f:cc:9b:
         6b:36:04:fc:66:8a:cd:f7:2b:f3:85:a4:fa:85:b6:eb:16:79:
         a3:4a:26:4c:72:ad:75:49:ee:7c:2f:fc:df:81:c2:13:56:59:
         93:f5:e5:ae:e7:64:bf:de:82:32:98:83:1a:13:90:57:07:de:
         9d:61:fc:51:f5:0e:87:2c:92:bc:8d:1e:8b:b7:d9:dc:51:16:
         c4:3a:25:a6:22:3f:f7:d2:db:48:e1:9b:a9:e6:18:66:a6:b5:
         a1:73:8e:c0:30:fe:7c:41:1c:e0:fc:4e:bb:31:be:30:a9:69:
         0d:12:91:77:cb:73:d6:ae:28:0e:ab:35:a6:3d:b0:47:84:fd:
         4b:06:81:6e:40:0e:3e:82:d4:f0:84:c1:36:30:be:da:54:8a:
         f9:38:9f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org