Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/323830343a356239633a313030303a3a2f33362d3336203d3e20323638383538.roa
File:                     323830343a356239633a313030303a3a2f33362d3336203d3e20323638383538.roa (raw, json)
Hash identifier:          kL9ZF+gnCNFiMy6b7LKfB+yMvnvsMyBZ498r1xWZAb8=
Subject key identifier:   B1:CA:9A:44:87:8F:1B:43:89:46:7E:1E:D1:17:14:64:E1:E5:5E:FF
Certificate issuer:       /CN=C514D08EB668AD6D569B52F363DFFB0D6D5BB212
Certificate serial:       4E8EB48D1E5A918B3B797025A049CA49512B98D2
Authority key identifier: C5:14:D0:8E:B6:68:AD:6D:56:9B:52:F3:63:DF:FB:0D:6D:5B:B2:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C514D08EB668AD6D569B52F363DFFB0D6D5BB212.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/323830343a356239633a313030303a3a2f33362d3336203d3e20323638383538.roa
Signing time:             Tue 05 Mar 2024 20:10:29 +0000
ROA not before:           Tue 05 Mar 2024 20:05:29 +0000
ROA not after:            Tue 04 Mar 2025 20:10:29 +0000
asID:                     268858
IP address blocks:        2804:5b9c:1000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:8e:b4:8d:1e:5a:91:8b:3b:79:70:25:a0:49:ca:49:51:2b:98:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C514D08EB668AD6D569B52F363DFFB0D6D5BB212
        Validity
            Not Before: Mar  5 20:05:29 2024 GMT
            Not After : Mar  4 20:10:29 2025 GMT
        Subject: CN=B1CA9A44878F1B4389467E1ED1171464E1E55EFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:20:af:98:1d:17:d6:dc:69:9d:37:ea:cc:5e:
                    d7:bc:0d:fd:a4:52:4c:d6:cd:c1:ee:d1:ee:71:ae:
                    23:4d:9d:ea:19:8c:9c:bf:f9:22:e1:68:90:c4:5f:
                    b1:9d:45:fc:52:27:33:dc:27:db:59:09:b5:81:70:
                    80:66:07:c9:5d:6b:af:60:a3:57:c1:7e:96:8b:27:
                    f3:00:b7:89:5e:8e:19:b4:2b:30:e3:9c:f3:4d:99:
                    28:66:d2:0e:80:60:4e:66:04:ac:e1:83:50:8c:ed:
                    2c:50:46:77:84:b1:d2:e8:69:82:aa:c3:8f:50:5e:
                    d1:a1:30:0f:50:e6:dc:86:15:9f:0d:17:93:db:93:
                    18:ca:6b:37:a1:8f:12:66:fa:74:e9:48:3d:25:c5:
                    ba:32:3a:ff:d3:28:2a:20:17:e3:1d:b1:e1:2f:79:
                    9e:17:07:18:15:96:f9:b4:4a:ce:68:b1:56:cb:5d:
                    4d:79:80:6e:d3:36:22:70:dc:5f:89:79:72:48:98:
                    9c:7a:e8:98:46:7d:56:19:a1:1b:53:c2:64:ef:7a:
                    95:ec:e0:e4:ef:9e:eb:d7:94:4b:1c:59:db:b7:01:
                    6d:4b:1b:13:ea:28:13:ce:dd:b8:e3:d2:a3:c5:d9:
                    3e:50:be:b8:40:c0:43:a2:fd:ff:81:b3:55:9d:12:
                    15:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CA:9A:44:87:8F:1B:43:89:46:7E:1E:D1:17:14:64:E1:E5:5E:FF
            X509v3 Authority Key Identifier:
                keyid:C5:14:D0:8E:B6:68:AD:6D:56:9B:52:F3:63:DF:FB:0D:6D:5B:B2:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/C514D08EB668AD6D569B52F363DFFB0D6D5BB212.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C514D08EB668AD6D569B52F363DFFB0D6D5BB212.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/323830343a356239633a313030303a3a2f33362d3336203d3e20323638383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b9c:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         d6:63:6b:3b:9f:18:9f:b7:b7:04:60:82:ac:c6:ff:72:75:fe:
         23:f3:76:d9:f2:86:4c:a6:2f:76:cf:1f:fb:7b:12:77:c7:0c:
         6f:4f:9f:05:14:df:66:2d:52:18:9c:57:a8:aa:39:74:a0:5f:
         ef:70:d7:30:df:de:b4:09:d6:62:09:7d:54:80:f2:bc:5b:b1:
         87:e4:ec:af:09:63:07:10:6f:92:5d:9d:74:fb:b7:38:bf:b2:
         41:67:1e:3b:e5:88:7d:62:27:ea:6d:2c:1b:7b:c2:0a:a2:db:
         62:0a:bd:8d:25:5f:e5:aa:84:f6:26:d2:09:f4:0f:71:40:75:
         5b:f0:b5:06:98:1a:e3:f7:fb:98:64:20:69:46:9f:ac:02:37:
         df:a4:36:34:d9:9b:85:b0:f7:d1:f8:e0:0b:b6:07:2f:2e:a0:
         06:43:cb:f2:6c:0f:07:cb:b0:11:2d:1c:95:c9:62:df:ad:97:
         e2:92:80:32:0d:b6:25:42:c0:24:61:33:f8:26:3e:39:cf:b4:
         d9:08:4c:f7:11:5b:dd:83:e9:ce:dc:40:15:f7:f0:41:4f:6a:
         69:06:47:87:2a:3b:2b:9a:6a:49:4e:af:7b:45:5b:90:38:cd:
         2d:f5:da:2a:c9:cc:13:c5:ee:cd:b3:5a:b8:91:02:ae:6f:e1:
         80:cd:7e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:10 2024 by rpki-client on console-fra.rpki-client.org