Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/323830343a316466633a383030303a3a2f33362d3336203d3e20323632373635.roa
File:                     323830343a316466633a383030303a3a2f33362d3336203d3e20323632373635.roa (raw, json)
Hash identifier:          fiUwKtsf2APN6pZzuAB+VYWVqchcjOU07XICoI8h/+k=
Subject key identifier:   7A:F2:9D:82:DC:C1:DE:7D:2A:2F:39:06:DD:F9:2D:EB:41:5F:F7:BC
Certificate issuer:       /CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
Certificate serial:       18E9D762B125E17683AFDEF56D7A3760196151B9
Authority key identifier: 5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/323830343a316466633a383030303a3a2f33362d3336203d3e20323632373635.roa
Signing time:             Tue 20 Jun 2023 13:53:33 +0000
ROA not before:           Tue 20 Jun 2023 13:48:33 +0000
ROA not after:            Tue 18 Jun 2024 13:53:33 +0000
asID:                     262765
IP address blocks:        2804:1dfc:8000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:e9:d7:62:b1:25:e1:76:83:af:de:f5:6d:7a:37:60:19:61:51:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
        Validity
            Not Before: Jun 20 13:48:33 2023 GMT
            Not After : Jun 18 13:53:33 2024 GMT
        Subject: CN=7AF29D82DCC1DE7D2A2F3906DDF92DEB415FF7BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1f:57:d7:2e:5f:ae:c3:af:86:09:7c:38:e4:
                    7d:ae:a6:c7:2c:dc:72:96:74:b5:3c:b5:98:73:31:
                    0a:c7:69:74:47:ff:07:e2:65:44:df:0c:5a:63:f7:
                    dc:ab:d9:2d:85:29:2d:3a:e0:99:d7:77:fa:34:b5:
                    ae:0b:8a:a6:e2:d9:4f:23:41:3a:3b:50:4f:ba:1c:
                    fb:c1:71:ad:d6:19:05:b7:1b:71:6c:d0:d1:07:f6:
                    87:07:ca:30:fc:e7:e2:75:6e:a2:38:6c:51:a7:78:
                    53:90:9e:51:3f:4b:4d:57:88:54:b2:85:e5:bf:98:
                    0a:b0:9b:35:1d:51:ca:cf:a8:aa:c8:fa:a9:dc:83:
                    e8:81:28:a8:06:02:9a:94:87:32:e5:e0:bd:e1:9b:
                    11:e7:af:42:34:a4:7a:af:9b:60:84:9c:ed:a8:ae:
                    59:3d:fe:4a:26:13:d7:5e:b1:c0:9a:dc:3a:fb:07:
                    8e:14:9f:cb:12:c3:d7:e9:65:4d:76:30:2e:7f:0a:
                    e7:90:7d:60:15:83:ab:08:1f:b0:8a:fc:7f:23:46:
                    87:21:ee:ae:9b:a1:52:51:b2:fc:db:a4:5f:73:92:
                    7d:19:a5:51:05:c8:1e:24:e6:18:e2:ce:86:5b:c8:
                    46:d9:db:82:0c:5e:c6:ec:4c:1d:f8:1c:8b:40:03:
                    f0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F2:9D:82:DC:C1:DE:7D:2A:2F:39:06:DD:F9:2D:EB:41:5F:F7:BC
            X509v3 Authority Key Identifier:
                keyid:5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/323830343a316466633a383030303a3a2f33362d3336203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dfc:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6f:32:a4:52:f1:26:d7:c4:ff:da:e5:bf:8f:4d:40:34:70:82:
         7d:0a:b5:3c:61:95:86:cd:8d:8a:cf:7f:67:9d:d3:d4:be:f4:
         62:9f:60:fb:16:56:07:60:10:e2:1c:4a:a6:da:23:b1:df:55:
         1c:88:63:ce:8b:95:48:86:3e:63:64:48:7b:2d:79:f3:0a:7f:
         c1:1f:96:5c:0f:9d:c0:c0:7b:67:ca:4a:0d:e7:0f:a7:6b:1f:
         63:9c:74:3f:ee:e6:c2:af:6a:2a:ef:d6:e7:9d:fa:53:6f:36:
         44:79:5f:22:4a:26:33:33:22:75:d1:a0:b7:b3:81:7e:f7:c5:
         ab:d3:1f:c7:b5:26:97:bd:ee:e2:12:d3:6e:1d:65:32:76:31:
         42:e4:5e:03:ff:6a:db:09:2b:f6:3a:57:5b:eb:13:20:7e:07:
         f4:46:ea:0f:26:64:54:f5:9d:71:fe:78:93:64:ca:4e:23:d7:
         ad:fb:85:16:07:50:32:fa:9f:c3:99:88:89:81:6f:ee:98:57:
         b6:69:35:f7:30:1b:b5:03:92:7c:05:ab:96:f2:fc:5f:29:64:
         d1:ea:bc:a9:d2:8c:9c:37:30:80:58:8d:84:e1:28:ca:65:ee:
         da:b9:7c:bb:ad:ce:8c:28:0b:2c:ae:52:74:1b:42:44:19:c9:
         0b:db:d2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org