Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/323830343a333161383a3a2f33322d3334203d3e20323635303239.roa
File:                     323830343a333161383a3a2f33322d3334203d3e20323635303239.roa (raw, json)
Hash identifier:          FKI1k2Rduimsobps4LimAAfI4awB4VLGij41uCQddxQ=
Subject key identifier:   A5:F0:BE:58:39:55:D5:71:AE:1F:D1:08:9E:45:2A:D8:1F:D6:15:2D
Certificate issuer:       /CN=A03486539CF993B45B5DFE200C7DCC6785D63CBF
Certificate serial:       10BD0662871F6025942BD614CF705ABD326BA7BC
Authority key identifier: A0:34:86:53:9C:F9:93:B4:5B:5D:FE:20:0C:7D:CC:67:85:D6:3C:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A03486539CF993B45B5DFE200C7DCC6785D63CBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/323830343a333161383a3a2f33322d3334203d3e20323635303239.roa
Signing time:             Fri 30 Jun 2023 03:02:00 +0000
ROA not before:           Fri 30 Jun 2023 02:57:00 +0000
ROA not after:            Fri 28 Jun 2024 03:02:00 +0000
asID:                     265029
IP address blocks:        2804:31a8::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:bd:06:62:87:1f:60:25:94:2b:d6:14:cf:70:5a:bd:32:6b:a7:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A03486539CF993B45B5DFE200C7DCC6785D63CBF
        Validity
            Not Before: Jun 30 02:57:00 2023 GMT
            Not After : Jun 28 03:02:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b6:6f:37:cc:ec:de:ad:3e:ee:5a:c1:7f:b6:
                    f8:48:25:ca:9c:38:67:5a:9b:23:ba:59:32:fc:0a:
                    a7:e5:e1:61:69:40:8e:29:50:60:2f:b2:99:30:d9:
                    8f:77:ce:54:16:d0:41:d8:67:15:5f:8f:4f:65:b6:
                    78:f6:46:dd:6d:2d:34:38:6f:c7:9e:3a:0e:95:b6:
                    71:7f:b1:ee:cd:42:05:20:69:3d:12:69:a1:b0:31:
                    58:55:d3:7b:65:46:a3:fb:84:28:f6:e7:7a:64:65:
                    af:ac:83:95:95:6f:a2:f1:17:12:3a:f8:1a:0e:58:
                    c8:06:c9:4a:25:2e:84:62:63:9b:74:40:46:ae:8f:
                    f2:f9:68:5f:d4:37:4e:22:5a:44:aa:dc:7a:eb:9b:
                    13:c9:c1:40:79:ff:0b:99:cb:8d:ec:b2:92:d0:b0:
                    0e:de:5e:af:b0:78:7f:d9:f0:7d:9b:d7:88:5e:fc:
                    8b:82:f7:12:b1:2c:17:06:c4:93:5f:df:4e:9a:97:
                    85:ae:2e:7d:08:6d:1b:d3:fc:e5:1e:cb:2d:1d:9c:
                    81:c2:95:75:49:5d:57:cf:8b:c9:d9:0a:b3:e7:8a:
                    57:9e:2a:87:7f:bd:58:dc:1e:08:14:c3:91:1d:89:
                    e6:07:b4:ef:ae:62:55:df:fe:7b:b9:6b:18:60:b7:
                    09:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F0:BE:58:39:55:D5:71:AE:1F:D1:08:9E:45:2A:D8:1F:D6:15:2D
            X509v3 Authority Key Identifier:
                keyid:A0:34:86:53:9C:F9:93:B4:5B:5D:FE:20:0C:7D:CC:67:85:D6:3C:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/A03486539CF993B45B5DFE200C7DCC6785D63CBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A03486539CF993B45B5DFE200C7DCC6785D63CBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/323830343a333161383a3a2f33322d3334203d3e20323635303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:31a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:fa:17:44:2a:07:29:58:02:eb:11:f6:17:75:c1:dd:25:15:
         82:ec:f3:37:2d:ea:56:ca:b4:b1:90:da:2f:ab:92:cb:62:82:
         ae:8b:48:1b:8a:e4:e9:ad:01:cd:ea:c3:4c:60:70:08:6d:12:
         dd:23:ca:db:b3:6c:10:d6:72:b6:41:ef:a0:79:ff:23:a4:0c:
         b9:88:6c:09:3c:46:28:96:f2:d4:a9:f3:9c:ad:c6:29:aa:6c:
         7e:62:6a:71:48:ef:7c:1b:a9:04:dc:49:78:b6:f0:51:f2:e1:
         15:0d:3e:ba:23:f1:96:05:7e:f5:f2:ed:fa:ad:99:80:5b:80:
         65:a4:3d:37:11:d1:5e:43:8e:b5:0a:32:f7:94:96:ac:48:7e:
         29:40:a3:c1:81:19:6e:49:88:8b:1e:83:fa:be:ac:39:48:39:
         5f:69:1f:d2:32:c5:39:1a:b7:9d:2f:45:82:c7:cd:1d:c8:5d:
         c3:0f:de:2b:51:31:3d:6d:c3:e8:b6:a6:44:e4:60:ab:54:c0:
         65:5c:4b:93:0d:a1:89:3d:95:45:bd:64:9f:66:20:7f:5e:53:
         0d:4f:be:1c:25:06:d5:92:cc:96:1d:d5:2b:66:d3:fd:20:15:
         f4:62:4a:d9:ce:af:c3:d3:1d:38:36:31:3b:e5:99:86:24:52:
         ec:ad:a7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org