Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/323830343a356239633a343030303a3a2f34302d3430203d3e20323638383538.roa
File:                     323830343a356239633a343030303a3a2f34302d3430203d3e20323638383538.roa (raw, json)
Hash identifier:          ZfRETnv+mKNzVWhMj3Abbg/A3lVYbDEl36cCmr3VRP8=
Subject key identifier:   F9:7F:CC:3E:17:95:47:92:33:C4:F8:36:B3:1C:5E:88:CC:E6:3C:AC
Certificate issuer:       /CN=C514D08EB668AD6D569B52F363DFFB0D6D5BB212
Certificate serial:       379E0D98CAF1DE04DEFF5F0E6D9DC974042B5FEE
Authority key identifier: C5:14:D0:8E:B6:68:AD:6D:56:9B:52:F3:63:DF:FB:0D:6D:5B:B2:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C514D08EB668AD6D569B52F363DFFB0D6D5BB212.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/323830343a356239633a343030303a3a2f34302d3430203d3e20323638383538.roa
Signing time:             Tue 05 Mar 2024 20:10:30 +0000
ROA not before:           Tue 05 Mar 2024 20:05:30 +0000
ROA not after:            Tue 04 Mar 2025 20:10:30 +0000
asID:                     268858
IP address blocks:        2804:5b9c:4000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:9e:0d:98:ca:f1:de:04:de:ff:5f:0e:6d:9d:c9:74:04:2b:5f:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C514D08EB668AD6D569B52F363DFFB0D6D5BB212
        Validity
            Not Before: Mar  5 20:05:30 2024 GMT
            Not After : Mar  4 20:10:30 2025 GMT
        Subject: CN=F97FCC3E1795479233C4F836B31C5E88CCE63CAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:86:c6:ce:eb:ca:ce:95:75:9b:62:3a:83:60:
                    6f:0f:49:a4:14:21:31:74:ed:1b:09:43:54:35:c6:
                    09:d2:c6:17:ae:2a:81:85:3b:b5:c9:b8:29:7c:f6:
                    75:f2:a4:21:eb:8b:db:c9:38:ee:1d:3c:31:ec:df:
                    dc:42:92:d4:07:d4:b6:93:98:b1:b3:f3:de:b4:b1:
                    5c:cb:25:4f:84:75:61:4f:32:07:16:a5:2c:d1:b2:
                    85:e9:37:e4:a6:07:52:c9:c4:fb:fa:05:bc:00:d8:
                    a1:6e:f3:4c:74:eb:68:ac:d9:83:d7:f8:60:95:02:
                    68:7a:fc:44:08:68:80:f2:f6:ea:48:96:1b:3e:63:
                    7b:a6:fc:45:3a:20:d4:00:ea:f3:e2:03:7e:47:9d:
                    62:cc:5d:69:f6:8f:f8:1d:ec:d2:b0:bf:5d:3d:0f:
                    ac:c5:35:e6:9b:ae:51:10:bb:a7:43:e2:9d:ae:60:
                    c5:2a:c3:88:bc:c3:15:0f:29:d2:21:c2:d4:a3:1b:
                    43:f7:8c:61:e7:dd:28:84:16:6f:b1:e8:ac:3f:24:
                    4a:48:09:35:fd:59:65:11:2f:cf:ba:31:69:f0:9a:
                    ed:8e:ae:50:6e:18:93:8e:41:32:9c:0e:23:65:10:
                    ac:15:f0:a1:0d:31:57:70:6e:29:2c:4c:c8:ef:e2:
                    42:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7F:CC:3E:17:95:47:92:33:C4:F8:36:B3:1C:5E:88:CC:E6:3C:AC
            X509v3 Authority Key Identifier:
                keyid:C5:14:D0:8E:B6:68:AD:6D:56:9B:52:F3:63:DF:FB:0D:6D:5B:B2:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/C514D08EB668AD6D569B52F363DFFB0D6D5BB212.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C514D08EB668AD6D569B52F363DFFB0D6D5BB212.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/323830343a356239633a343030303a3a2f34302d3430203d3e20323638383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b9c:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         65:67:2f:f3:53:34:79:6c:1e:82:73:1b:03:64:52:aa:4d:c4:
         57:9d:99:50:04:07:e4:71:0b:60:bf:00:96:f9:86:95:83:6b:
         bb:55:6f:72:b2:cd:40:b3:87:dd:48:5a:12:ea:78:6c:ed:c1:
         60:19:7d:a2:01:56:81:54:e6:1b:ba:dc:1b:ae:f9:c4:53:bb:
         1f:bf:69:ab:19:d6:6a:df:0f:59:85:8a:26:0a:0e:9b:ef:9d:
         b3:a6:8f:8d:d0:ed:cd:17:b1:81:60:64:f5:b4:7d:03:f9:4d:
         57:a5:b0:08:32:1d:ab:79:7e:a1:ac:ce:5c:2f:ec:1b:19:fe:
         23:32:98:a7:00:9f:b0:84:2d:0c:b5:f9:06:1d:12:ae:7e:4a:
         80:a6:96:69:c4:56:83:35:74:5d:7d:52:8d:28:a8:d5:cf:01:
         02:82:4b:99:65:f3:4a:6e:64:0e:ac:e4:e9:23:bf:c7:e4:8f:
         43:5f:31:de:e8:15:8a:b4:96:ab:f9:36:ce:a7:9a:a0:e8:6e:
         fa:c3:40:50:94:bd:29:40:5d:4f:ca:1e:41:e6:00:93:29:c7:
         60:fa:82:38:f8:be:b4:a5:23:b4:56:7d:7f:14:b2:27:85:11:
         ec:22:2e:f4:62:ab:83:26:4e:0f:36:a9:1a:83:aa:80:f3:e3:
         2b:7d:07:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:10 2024 by rpki-client on console-fra.rpki-client.org