Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/1/323830343a356665343a3a2f33322d313238203d3e20323639313330.roa
File:                     323830343a356665343a3a2f33322d313238203d3e20323639313330.roa (raw, json)
Hash identifier:          3I98mn/lArJ0nej4weoETXb20hCi45QdsScSQG2ryMo=
Subject key identifier:   2A:43:11:69:B9:03:C2:44:01:60:CC:D4:DD:38:8A:A9:99:5A:8F:79
Certificate issuer:       /CN=F62CADCD970D895C2B4D0ED12085ED68CB251904
Certificate serial:       7D8DD4715C322D1A379B49292DB3623C73DA5A00
Authority key identifier: F6:2C:AD:CD:97:0D:89:5C:2B:4D:0E:D1:20:85:ED:68:CB:25:19:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F62CADCD970D895C2B4D0ED12085ED68CB251904.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/1/323830343a356665343a3a2f33322d313238203d3e20323639313330.roa
Signing time:             Fri 20 Oct 2023 17:14:50 +0000
ROA not before:           Fri 20 Oct 2023 17:09:50 +0000
ROA not after:            Fri 18 Oct 2024 17:14:50 +0000
asID:                     269130
IP address blocks:        2804:5fe4::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:8d:d4:71:5c:32:2d:1a:37:9b:49:29:2d:b3:62:3c:73:da:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F62CADCD970D895C2B4D0ED12085ED68CB251904
        Validity
            Not Before: Oct 20 17:09:50 2023 GMT
            Not After : Oct 18 17:14:50 2024 GMT
        Subject: CN=2A431169B903C2440160CCD4DD388AA9995A8F79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ad:74:1b:b2:c3:40:0a:31:7e:4d:0b:73:93:
                    a2:25:1b:79:cc:ba:a2:25:8d:85:ae:da:cf:15:39:
                    bb:7d:5f:a3:7c:92:29:dd:be:f1:37:32:f4:7a:bc:
                    a3:2b:a9:d2:50:b3:ae:97:22:c2:8c:21:6e:33:0b:
                    3e:75:1d:53:9e:a2:6c:87:6b:d3:fa:f1:e8:af:77:
                    3f:e4:62:f5:c4:fb:bf:d5:67:7e:54:15:f9:db:8a:
                    77:49:67:00:92:84:c2:80:02:3d:91:bf:06:30:b3:
                    00:05:71:d2:88:2b:be:e3:8a:41:af:a6:06:e2:c6:
                    76:99:5c:00:58:88:a1:7b:b1:1a:01:03:58:93:ec:
                    f5:1c:46:e6:f7:31:4a:a8:58:13:db:34:cd:20:1f:
                    bd:ca:4f:2d:7a:45:4b:75:f6:d1:c9:f8:df:6f:fe:
                    92:62:a9:50:51:5a:60:fa:86:93:83:35:83:50:f4:
                    de:71:dd:a4:b6:69:5f:6f:2b:4e:e6:3b:be:ff:ac:
                    eb:51:5a:94:a5:b2:38:6d:7e:ab:ef:71:bf:ce:4b:
                    c0:2c:cc:45:95:49:fd:04:39:02:15:f7:ed:8b:17:
                    9e:db:34:47:66:83:be:95:77:64:56:5f:2e:a8:23:
                    29:69:20:c7:bf:43:5e:39:66:c1:57:6a:08:e9:43:
                    9b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:43:11:69:B9:03:C2:44:01:60:CC:D4:DD:38:8A:A9:99:5A:8F:79
            X509v3 Authority Key Identifier:
                keyid:F6:2C:AD:CD:97:0D:89:5C:2B:4D:0E:D1:20:85:ED:68:CB:25:19:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/1/F62CADCD970D895C2B4D0ED12085ED68CB251904.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F62CADCD970D895C2B4D0ED12085ED68CB251904.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/1/323830343a356665343a3a2f33322d313238203d3e20323639313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5fe4::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:9b:07:b1:7c:c4:16:f2:e1:09:6c:47:ce:5b:d6:09:91:a3:
         f1:b7:01:6f:9b:39:90:04:49:fa:db:a5:0f:95:98:78:a0:68:
         53:33:e3:42:90:70:5a:fc:9a:07:8c:a9:10:56:a0:83:d0:10:
         46:27:95:85:bd:1e:21:56:8d:4c:2d:6e:f0:4b:54:0d:ac:eb:
         b6:51:c4:14:ab:1c:32:9c:4a:36:8c:62:97:aa:05:78:bf:32:
         d5:2e:7f:84:1a:d2:49:f7:11:00:6c:bf:c7:38:89:a2:5a:26:
         04:bf:1d:7a:dd:eb:c1:46:ce:ee:ac:6d:83:53:6c:bb:0f:30:
         0a:21:51:6b:b2:24:4c:06:61:a9:d5:dd:6f:a6:5f:14:63:7c:
         95:66:54:d2:28:6e:b5:44:35:d9:bb:21:f3:11:5e:4d:e5:57:
         d0:f0:8f:16:6c:41:f6:af:23:cb:4f:f4:e3:cd:93:e4:f7:31:
         e8:5d:e9:b7:5f:cc:54:c9:d6:41:3a:0f:b7:1c:6b:ee:89:b6:
         e3:75:25:c6:e2:ba:6d:59:08:20:e4:c3:0e:0d:86:b2:9d:9e:
         fa:c4:a6:fc:3b:10:eb:ff:29:2b:96:b5:59:18:8e:d7:61:7a:
         16:4f:d6:fb:2b:7d:88:27:47:10:0b:ec:54:6a:ac:2b:93:a7:
         6b:d4:4d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org