Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/323830343a316466633a323030303a3a2f33362d3336203d3e20323632373635.roa
File:                     323830343a316466633a323030303a3a2f33362d3336203d3e20323632373635.roa (raw, json)
Hash identifier:          L+qCABs5fyHDhP3LJpyzSbUXnAkJqmCbz5ymkxInKhc=
Subject key identifier:   13:F9:52:46:AD:1F:73:B1:A6:0C:52:3D:EB:15:FE:95:F5:AB:2E:96
Certificate issuer:       /CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
Certificate serial:       13534B76EC0C545CC60D7ABAB0EFDAE153EA3E1A
Authority key identifier: 5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/323830343a316466633a323030303a3a2f33362d3336203d3e20323632373635.roa
Signing time:             Tue 20 Jun 2023 13:53:32 +0000
ROA not before:           Tue 20 Jun 2023 13:48:32 +0000
ROA not after:            Tue 18 Jun 2024 13:53:32 +0000
asID:                     262765
IP address blocks:        2804:1dfc:2000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:53:4b:76:ec:0c:54:5c:c6:0d:7a:ba:b0:ef:da:e1:53:ea:3e:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
        Validity
            Not Before: Jun 20 13:48:32 2023 GMT
            Not After : Jun 18 13:53:32 2024 GMT
        Subject: CN=13F95246AD1F73B1A60C523DEB15FE95F5AB2E96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9f:b3:4e:83:6c:68:d6:a2:ba:52:21:b8:d9:
                    af:49:e3:1f:6e:8f:f9:d4:18:1e:1d:af:dd:e6:f5:
                    cd:69:8c:38:1a:06:58:34:54:06:78:cb:ad:8d:31:
                    16:bc:81:9f:31:ed:9c:7a:75:40:96:1a:30:54:80:
                    51:d5:87:5a:1c:2a:f2:c3:a6:6f:e4:37:77:0c:4c:
                    8e:46:fb:ca:18:46:ed:3a:72:6c:1e:f7:a9:04:f6:
                    bd:5e:56:56:dd:cc:0a:5f:d5:9b:26:9d:35:d9:6a:
                    08:34:2e:51:1e:65:aa:6b:30:30:48:bc:3e:d0:a6:
                    b2:c4:61:31:cb:3e:e8:03:3d:93:54:42:c6:1c:08:
                    18:85:ff:18:31:06:23:49:9f:22:c7:d4:d2:3c:06:
                    bb:b6:b7:b3:30:a5:d9:0a:6e:4e:e4:cc:03:83:73:
                    5d:aa:84:4e:8d:7d:19:5a:9b:5d:65:e4:b9:27:c0:
                    be:2b:fc:b0:79:52:89:4a:b6:45:42:0e:c9:15:c7:
                    c8:45:57:c4:94:ce:0a:cb:10:a6:39:6e:53:a4:af:
                    b6:f0:41:bd:2d:0f:2d:11:2d:ef:c5:01:44:53:ee:
                    bb:91:38:38:7a:f0:75:4f:60:88:7a:73:21:e8:64:
                    9e:d5:e7:b0:17:d2:51:f1:1d:76:11:0f:8e:01:a4:
                    a1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F9:52:46:AD:1F:73:B1:A6:0C:52:3D:EB:15:FE:95:F5:AB:2E:96
            X509v3 Authority Key Identifier:
                keyid:5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/323830343a316466633a323030303a3a2f33362d3336203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dfc:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0e:6f:84:41:87:db:2a:6c:c0:bb:99:07:93:eb:19:15:9d:ba:
         c4:4c:66:98:43:60:e3:56:e9:1f:ce:38:b0:0f:be:5b:c6:dc:
         47:61:7d:97:2b:52:f0:3f:26:14:39:73:0a:4c:13:ff:b9:71:
         f4:8c:6b:1b:e1:25:7f:c9:88:cc:1e:91:f8:13:f2:ad:d6:ac:
         fa:93:9a:1d:4a:4c:c2:8e:fa:db:82:9a:ad:32:62:ab:cc:54:
         ec:2c:bc:ae:ad:f6:2e:5b:31:c0:42:d7:60:e7:07:ad:fa:62:
         e6:11:43:13:66:8b:8f:cd:04:81:26:df:0d:62:ec:0f:36:e3:
         19:93:a2:9f:26:f9:0e:40:68:2f:44:d5:2d:4b:18:fe:03:04:
         11:89:7f:cd:7c:a6:a4:6c:fe:76:07:da:5f:ff:fb:54:45:0e:
         40:be:e0:e0:11:ed:ca:b4:de:a3:56:0f:67:46:c2:ca:f4:ff:
         26:e8:e7:96:02:14:fd:a4:44:7d:bb:98:fc:37:61:40:07:8e:
         fd:52:9b:dd:32:36:d5:46:a0:9e:d9:fb:d0:a7:48:e3:00:e5:
         19:a2:a0:cc:a7:4c:0f:74:65:28:ae:e4:22:bd:b6:f9:5e:03:
         74:c1:79:e0:d8:76:f7:6b:9c:5b:6c:41:1e:af:a6:a7:34:8d:
         ca:45:70:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org