Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/323830343a333132633a3a2f33322d3332203d3e20323634393938.roa
File:                     323830343a333132633a3a2f33322d3332203d3e20323634393938.roa (raw, json)
Hash identifier:          rKclAqj86iRX/xUnP8yBgoz/wi8kuiZwXAc/zGgnis4=
Subject key identifier:   8A:F8:AE:F2:B6:F9:A9:84:18:F6:09:A4:65:F8:6C:FE:30:FC:2B:7F
Certificate issuer:       /CN=5F14B964EDC0AB5C2D826C5B7822688ABC4578BF
Certificate serial:       3847C3DC6895143F3443E27395374B4AA72F31F3
Authority key identifier: 5F:14:B9:64:ED:C0:AB:5C:2D:82:6C:5B:78:22:68:8A:BC:45:78:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5F14B964EDC0AB5C2D826C5B7822688ABC4578BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/323830343a333132633a3a2f33322d3332203d3e20323634393938.roa
Signing time:             Mon 19 Feb 2024 17:40:56 +0000
ROA not before:           Mon 19 Feb 2024 17:35:56 +0000
ROA not after:            Mon 17 Feb 2025 17:40:56 +0000
asID:                     264998
IP address blocks:        2804:312c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:47:c3:dc:68:95:14:3f:34:43:e2:73:95:37:4b:4a:a7:2f:31:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F14B964EDC0AB5C2D826C5B7822688ABC4578BF
        Validity
            Not Before: Feb 19 17:35:56 2024 GMT
            Not After : Feb 17 17:40:56 2025 GMT
        Subject: CN=8AF8AEF2B6F9A98418F609A465F86CFE30FC2B7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7a:72:53:69:dd:8f:24:aa:e5:06:4d:ef:d3:
                    32:50:d6:71:e1:41:47:e1:e8:a6:37:c1:57:a4:eb:
                    da:7e:5e:30:c9:18:83:08:fa:31:ad:a2:21:48:82:
                    57:06:21:02:d2:f9:80:b9:86:62:ec:df:3b:e7:4e:
                    5f:7d:ac:1d:2e:9b:68:04:9a:9f:67:21:2e:a4:78:
                    bd:2b:27:35:15:22:e1:05:10:64:d4:0d:b6:85:78:
                    68:98:28:9b:e2:bb:5a:3b:f4:a5:3b:c6:f7:a5:5a:
                    aa:1c:f8:b9:f4:ed:d7:51:28:2c:57:be:ce:ef:aa:
                    9f:d3:a4:ff:db:6f:f0:8b:e6:c0:56:9b:63:82:94:
                    f5:9e:ed:e7:c4:39:8d:a2:6e:c5:fa:5f:5f:26:11:
                    d5:b0:14:3c:3e:fc:e7:28:d7:cf:91:df:88:e0:40:
                    21:f3:b6:b1:ab:43:99:22:81:cd:c8:e5:7c:55:5a:
                    25:9c:2c:e5:de:37:d7:20:bc:62:53:c6:4e:90:a2:
                    92:05:18:1e:3d:d6:41:68:4b:02:81:81:ac:30:c6:
                    13:58:ed:8e:fa:3c:53:48:a2:cc:ad:40:8b:5f:ac:
                    c4:f1:c0:ff:11:01:29:5c:9a:c1:c6:38:d5:18:f4:
                    1d:b0:b6:2e:bf:53:9d:4c:a9:7e:63:63:11:c7:5f:
                    74:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F8:AE:F2:B6:F9:A9:84:18:F6:09:A4:65:F8:6C:FE:30:FC:2B:7F
            X509v3 Authority Key Identifier:
                keyid:5F:14:B9:64:ED:C0:AB:5C:2D:82:6C:5B:78:22:68:8A:BC:45:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/5F14B964EDC0AB5C2D826C5B7822688ABC4578BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5F14B964EDC0AB5C2D826C5B7822688ABC4578BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/323830343a333132633a3a2f33322d3332203d3e20323634393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:312c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:f2:70:3a:72:c6:4b:a6:45:00:8b:f0:0e:07:df:55:fa:bd:
         9b:29:b0:64:1c:0c:fa:b9:b0:4b:15:87:b5:67:90:79:e8:2d:
         67:51:3e:7e:f9:93:04:f1:24:ca:15:a8:59:93:46:de:77:3c:
         7e:fc:d9:0d:e6:93:b2:00:1a:2e:c6:ca:4e:db:fa:1e:f9:8f:
         6c:6f:14:63:4a:51:1c:7b:9d:05:b4:4b:f6:f7:59:25:fe:65:
         dd:46:b5:0f:0d:2d:3e:ec:a6:21:e3:f8:53:e6:40:36:a3:53:
         e5:bd:a4:a4:b6:24:3d:36:5e:7b:04:f5:83:ca:f5:d8:7f:32:
         71:7b:29:5e:23:6f:91:43:ba:ca:88:c7:a2:91:36:c7:69:7f:
         90:21:70:74:14:80:d5:fc:ba:6e:54:19:ae:2b:53:a9:40:d8:
         70:bf:34:08:f0:0e:44:a3:06:44:01:cf:e6:6b:6f:3a:f5:08:
         b2:e7:48:d3:9f:09:e3:d6:f4:48:a8:0a:21:6d:26:b4:c6:5a:
         6e:aa:29:ec:6c:c6:81:ba:a5:d7:c5:8c:c8:55:99:97:77:c8:
         6a:87:59:6e:75:26:70:cb:4b:b3:b5:78:ba:39:d7:88:92:24:
         9a:72:f7:50:83:57:17:a0:8d:eb:fa:71:52:97:58:e0:2a:fd:
         c3:00:8c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org