Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/323830343a316466633a333030303a3a2f33362d3336203d3e20323632373635.roa
File:                     323830343a316466633a333030303a3a2f33362d3336203d3e20323632373635.roa (raw, json)
Hash identifier:          FpYHYKiiTo2WDYQco/hPRO24e/xUhc5Q7Wz1b/HoXQk=
Subject key identifier:   A2:94:1D:8E:4C:05:DE:3D:6E:DA:A7:46:17:66:06:7C:A0:EC:73:26
Certificate issuer:       /CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
Certificate serial:       3E612C19C67A1BFD5495BFC28F02E3DB26512175
Authority key identifier: 5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/323830343a316466633a333030303a3a2f33362d3336203d3e20323632373635.roa
Signing time:             Tue 20 Jun 2023 13:53:29 +0000
ROA not before:           Tue 20 Jun 2023 13:48:29 +0000
ROA not after:            Tue 18 Jun 2024 13:53:29 +0000
asID:                     262765
IP address blocks:        2804:1dfc:3000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:61:2c:19:c6:7a:1b:fd:54:95:bf:c2:8f:02:e3:db:26:51:21:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
        Validity
            Not Before: Jun 20 13:48:29 2023 GMT
            Not After : Jun 18 13:53:29 2024 GMT
        Subject: CN=A2941D8E4C05DE3D6EDAA7461766067CA0EC7326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:65:24:cd:9d:1a:4a:40:c6:40:37:1f:40:39:
                    88:4a:24:10:23:a5:7b:ff:a8:ca:92:d7:37:44:10:
                    58:d6:bb:9c:2d:b6:1d:02:b1:83:d1:83:e8:c6:20:
                    82:b9:cf:59:00:bf:04:e1:3c:f3:99:49:90:e2:ab:
                    37:0b:bc:63:d4:2f:5f:2d:12:e0:b2:49:91:28:a7:
                    39:19:5f:11:ad:82:d5:4b:e7:b1:a4:8e:a8:9f:ce:
                    79:2a:99:4b:9b:74:99:a9:3e:91:d6:3b:ec:29:08:
                    66:74:20:40:6b:b6:68:4e:15:43:6f:35:1a:83:6a:
                    7e:21:fd:02:b4:51:47:db:fa:dc:ff:59:bb:2e:38:
                    39:3a:d2:bb:d8:63:33:cc:40:37:0b:87:9d:20:a3:
                    10:36:63:7e:e2:40:60:7f:69:dc:db:a7:a2:46:7c:
                    49:c9:4c:1b:f6:83:f9:9f:ad:44:3f:b0:18:79:49:
                    5e:1b:09:51:a8:04:54:75:f5:26:33:b1:58:93:a2:
                    4e:c7:ab:80:64:b0:2b:7a:6b:4a:5c:66:d9:32:15:
                    9b:85:c4:7f:d9:9f:44:fd:9b:e0:92:92:5e:18:a5:
                    83:f7:5f:ce:34:b2:36:23:19:b3:28:ea:1e:91:d5:
                    6b:62:b7:34:1b:dc:99:23:43:07:b1:25:97:85:0c:
                    0e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:94:1D:8E:4C:05:DE:3D:6E:DA:A7:46:17:66:06:7C:A0:EC:73:26
            X509v3 Authority Key Identifier:
                keyid:5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/323830343a316466633a333030303a3a2f33362d3336203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dfc:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8b:fc:a7:38:f6:dc:3f:60:40:b8:2f:70:4f:60:d2:3d:97:24:
         27:e2:d5:c9:f6:5e:f0:bb:d7:bf:d8:6e:bb:88:a2:ab:b9:0d:
         e0:e0:df:40:5e:0f:f3:b6:b6:bd:bd:7f:a6:02:35:91:eb:eb:
         53:49:17:30:b3:ea:60:f2:ab:b1:02:f6:4d:ff:f6:23:a3:12:
         7e:8b:16:16:38:58:94:e0:a8:d6:cd:16:9b:e4:d4:76:46:10:
         e6:5d:81:4b:6d:f1:ff:1f:5d:78:94:0d:d6:70:8c:81:4d:d2:
         39:df:4a:bc:02:e7:35:d1:af:80:75:1e:e2:2c:a6:87:de:3b:
         54:45:c4:19:88:f1:4d:7e:6c:15:bb:50:ea:54:a7:8f:96:50:
         d5:87:71:17:68:82:8c:78:78:2f:17:80:19:ec:6b:d0:60:b3:
         5e:b1:ab:a8:57:0e:ca:82:fa:44:c1:d4:83:62:3f:47:9b:1f:
         43:fb:be:2c:5d:3a:2a:96:b1:bd:b6:bd:3f:4e:e3:a5:fa:22:
         4b:52:fd:0a:b3:0d:b1:e4:a5:6c:cc:f4:a4:83:a0:81:72:36:
         d6:0c:c3:13:ea:88:67:7d:e5:a0:d4:da:2c:4b:57:8f:d8:6f:
         7c:c2:ab:e6:e4:cd:ee:e5:89:d6:84:38:8d:91:2c:d5:77:b0:
         5c:58:9c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org