Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/323830343a356239633a343330303a3a2f34332d3433203d3e20323638383538.roa
File:                     323830343a356239633a343330303a3a2f34332d3433203d3e20323638383538.roa (raw, json)
Hash identifier:          7ukXZ/souU13FmtJPMsUgM6/eys0iAIA7xc1vl1LUmo=
Subject key identifier:   8C:87:05:06:67:21:27:AE:E5:5C:66:25:BD:B2:B3:84:DA:D3:A8:C9
Certificate issuer:       /CN=C514D08EB668AD6D569B52F363DFFB0D6D5BB212
Certificate serial:       2BC73D98A28FC273D97086332B6C3C2080CE97EC
Authority key identifier: C5:14:D0:8E:B6:68:AD:6D:56:9B:52:F3:63:DF:FB:0D:6D:5B:B2:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C514D08EB668AD6D569B52F363DFFB0D6D5BB212.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/323830343a356239633a343330303a3a2f34332d3433203d3e20323638383538.roa
Signing time:             Tue 05 Mar 2024 20:10:28 +0000
ROA not before:           Tue 05 Mar 2024 20:05:28 +0000
ROA not after:            Tue 04 Mar 2025 20:10:28 +0000
asID:                     268858
IP address blocks:        2804:5b9c:4300::/43 maxlen: 43

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:c7:3d:98:a2:8f:c2:73:d9:70:86:33:2b:6c:3c:20:80:ce:97:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C514D08EB668AD6D569B52F363DFFB0D6D5BB212
        Validity
            Not Before: Mar  5 20:05:28 2024 GMT
            Not After : Mar  4 20:10:28 2025 GMT
        Subject: CN=8C870506672127AEE55C6625BDB2B384DAD3A8C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5b:9c:4c:8f:63:7b:bf:bf:3e:aa:c3:00:06:
                    df:b2:ed:49:94:57:7b:96:77:11:9a:7a:68:8f:22:
                    62:1e:a2:46:e4:c9:5b:77:7a:9b:8c:ec:0c:42:75:
                    99:c4:4a:8f:41:cf:5a:cd:d8:d8:26:76:d9:7d:c8:
                    3c:35:f8:59:e1:c0:be:8e:a7:81:56:c4:82:95:65:
                    19:25:fd:38:78:a0:b8:22:02:2e:da:07:6e:2d:82:
                    09:8b:7e:d8:5e:e8:f7:3a:4f:58:e1:2b:de:c5:fd:
                    49:31:3f:0b:25:a2:15:b5:b7:0f:b4:cf:17:54:f3:
                    1d:16:40:0b:ad:55:33:7d:cf:e0:f4:22:c6:77:16:
                    8d:3c:fe:cf:93:3e:ed:d7:83:0f:a2:dd:80:b8:b9:
                    de:96:a0:5d:82:87:d9:93:f7:b1:3f:11:11:94:aa:
                    6f:26:98:ab:1d:a3:7b:c2:62:86:57:16:6b:c2:8d:
                    8b:cb:ff:8e:4b:ff:dd:7d:71:2b:00:6e:79:ec:db:
                    24:de:2d:7f:51:ad:0a:93:40:78:58:e4:67:31:4a:
                    53:f0:b2:5c:b7:21:16:36:2f:b2:b9:74:6b:12:f1:
                    c4:df:2a:f2:15:8b:67:73:93:ad:1a:c5:ad:83:b4:
                    12:1c:1d:b9:02:9f:45:7a:57:a5:96:85:88:33:e2:
                    38:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:87:05:06:67:21:27:AE:E5:5C:66:25:BD:B2:B3:84:DA:D3:A8:C9
            X509v3 Authority Key Identifier:
                keyid:C5:14:D0:8E:B6:68:AD:6D:56:9B:52:F3:63:DF:FB:0D:6D:5B:B2:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/C514D08EB668AD6D569B52F363DFFB0D6D5BB212.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C514D08EB668AD6D569B52F363DFFB0D6D5BB212.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/323830343a356239633a343330303a3a2f34332d3433203d3e20323638383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b9c:4300::/43

    Signature Algorithm: sha256WithRSAEncryption
         6b:cf:6e:a0:3d:f3:3a:7f:2d:6f:c7:c0:59:f3:30:14:4b:a1:
         ad:a9:c1:16:88:c6:08:6f:11:7a:9b:5d:40:4f:66:5b:8a:ee:
         e6:29:e6:cb:6e:4f:db:3b:72:1d:8e:fe:27:0b:db:5c:75:a2:
         d1:75:60:c1:24:c5:25:6f:97:23:ea:18:48:77:3f:6e:aa:08:
         3e:9c:0f:9d:8a:ab:4c:c4:c2:87:31:59:05:7c:d7:bc:98:97:
         ac:1c:36:24:a5:97:e1:7b:4c:d1:4b:98:a8:f8:20:76:e8:24:
         d9:00:c4:7f:25:34:b5:d5:77:aa:b2:17:fa:38:a3:23:e1:f7:
         99:ef:4d:14:d3:ec:1a:aa:59:0c:75:3d:ee:5b:27:f5:c4:2a:
         bf:6d:1a:ae:c5:aa:e4:12:94:05:1c:7f:92:65:0c:98:f8:31:
         10:3d:42:ff:4f:f6:0b:00:bc:61:8f:98:d8:8e:b4:af:1e:85:
         12:36:92:94:88:22:1a:70:c1:4d:3e:39:f5:37:64:33:7a:fc:
         5b:47:d2:69:c3:8d:af:38:b8:9c:55:d5:6a:4c:49:23:ec:80:
         69:23:e0:4d:bd:93:b9:9f:fd:37:44:c3:8b:11:41:54:5f:d4:
         20:ac:87:1a:a3:50:81:8d:92:2e:22:e9:84:7f:10:2b:d8:65:
         ff:57:44:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:26 2024 by rpki-client on console-ams.rpki-client.org