Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/grwLJneaer6puWPkwg916YnJ9K9rfJ5PeWiAHUxCKeb/0/323830343a313537633a3a2f33322d313238203d3e20323633333930.roa
File:                     323830343a313537633a3a2f33322d313238203d3e20323633333930.roa (raw, json)
Hash identifier:          WyD7X75c47eOD+S13x5pUFdM8pseq4CbJXq/5TQ4nzc=
Subject key identifier:   1F:94:84:28:CD:34:6B:0A:AC:97:0B:24:6F:2A:55:A4:27:DE:7E:B6
Certificate issuer:       /CN=13A5EAF78E79BD43FD7B4074AA688398B5272B37
Certificate serial:       5A8BF89B320CFFEB0A701E1CAE8802CE52A2743A
Authority key identifier: 13:A5:EA:F7:8E:79:BD:43:FD:7B:40:74:AA:68:83:98:B5:27:2B:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13A5EAF78E79BD43FD7B4074AA688398B5272B37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/grwLJneaer6puWPkwg916YnJ9K9rfJ5PeWiAHUxCKeb/0/323830343a313537633a3a2f33322d313238203d3e20323633333930.roa
Signing time:             Fri 15 Dec 2023 16:00:00 +0000
ROA not before:           Fri 15 Dec 2023 15:55:00 +0000
ROA not after:            Fri 13 Dec 2024 16:00:00 +0000
asID:                     263390
IP address blocks:        2804:157c::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:8b:f8:9b:32:0c:ff:eb:0a:70:1e:1c:ae:88:02:ce:52:a2:74:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13A5EAF78E79BD43FD7B4074AA688398B5272B37
        Validity
            Not Before: Dec 15 15:55:00 2023 GMT
            Not After : Dec 13 16:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b9:5b:50:69:b6:dd:a2:7c:c7:4d:36:e0:41:
                    a3:f3:4a:0e:e8:16:9e:1f:16:f6:7f:74:09:a4:18:
                    e8:9b:5b:bf:0b:14:e5:7b:3c:e0:7c:9d:8d:60:a5:
                    1e:2a:a3:4d:23:e7:46:8d:7e:d8:63:1b:92:36:86:
                    99:fc:9a:a3:64:b6:e4:88:04:19:12:10:c1:30:b4:
                    b5:01:f0:93:6d:7f:96:72:6a:f1:38:df:98:06:c1:
                    be:24:87:6d:09:e9:c1:b3:2f:34:e6:b6:74:06:22:
                    e5:8f:33:0b:a5:98:39:94:21:7f:9c:db:b6:60:c2:
                    a6:fa:50:f0:4b:da:f0:76:b6:d8:13:aa:d5:38:fa:
                    fb:25:86:36:3a:72:47:ab:b8:7f:b8:1d:5b:08:4a:
                    16:d7:c0:1b:2a:da:b2:8e:2e:73:8b:30:7e:7f:03:
                    2e:cf:d9:ce:c0:d4:6f:51:07:7b:80:69:92:eb:8c:
                    42:08:49:8c:eb:a6:ab:bc:cd:05:5b:31:eb:0b:da:
                    81:54:e2:8c:1a:13:1e:09:6b:a1:73:72:bc:fa:df:
                    b7:83:6b:d6:94:da:51:04:ce:b8:c6:22:1a:d4:6b:
                    9a:53:50:71:0a:9b:f0:79:f3:84:20:fd:e0:1b:be:
                    da:c1:1b:be:bd:fd:2e:97:19:57:4c:c8:db:a0:b7:
                    fe:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:94:84:28:CD:34:6B:0A:AC:97:0B:24:6F:2A:55:A4:27:DE:7E:B6
            X509v3 Authority Key Identifier:
                keyid:13:A5:EA:F7:8E:79:BD:43:FD:7B:40:74:AA:68:83:98:B5:27:2B:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/grwLJneaer6puWPkwg916YnJ9K9rfJ5PeWiAHUxCKeb/0/13A5EAF78E79BD43FD7B4074AA688398B5272B37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13A5EAF78E79BD43FD7B4074AA688398B5272B37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/grwLJneaer6puWPkwg916YnJ9K9rfJ5PeWiAHUxCKeb/0/323830343a313537633a3a2f33322d313238203d3e20323633333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:157c::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:d5:b4:b5:ad:cf:40:ed:48:96:97:06:cb:1f:bf:4a:16:2b:
         85:54:fa:a1:8f:1f:25:e6:d9:d6:ed:d6:b1:c2:a6:75:83:99:
         95:8f:16:7a:86:78:dc:5d:43:1c:2d:6f:06:f2:3c:c7:8d:31:
         74:2b:09:da:e2:87:bf:61:52:61:a5:01:a0:06:0f:5b:24:0f:
         67:04:88:ca:04:29:fb:bb:33:96:05:3e:a0:43:09:4a:66:98:
         23:97:fc:74:03:e2:61:ea:f0:a6:44:34:f2:d4:2a:fd:31:56:
         18:39:f1:75:54:fc:0b:84:70:07:7e:44:b1:55:46:87:b4:81:
         be:80:80:61:19:2a:32:5e:60:29:5c:21:f4:60:97:3a:91:21:
         5b:99:fc:fd:01:aa:25:fd:a5:68:30:85:f3:44:0b:d9:1f:97:
         85:57:86:90:f1:9a:eb:0b:7f:b9:d0:77:4d:c4:88:a8:3a:75:
         97:a0:a2:04:e3:45:a5:57:63:fa:93:01:02:e0:c9:82:36:0c:
         6d:6b:64:4d:4b:40:1a:98:e6:22:19:b9:21:28:62:47:83:ff:
         97:48:bb:98:7b:15:bc:f8:4f:ca:e4:fc:97:8f:5c:3f:e4:59:
         a1:e4:2a:97:78:2b:67:49:9e:3b:f7:5c:eb:b8:1f:39:c0:72:
         5d:73:b1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:01 2024 by rpki-client on console-ams.rpki-client.org