Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/323830343a363566303a383030303a3a2f33332d3333203d3e20323639353234.roa
File:                     323830343a363566303a383030303a3a2f33332d3333203d3e20323639353234.roa (raw, json)
Hash identifier:          Ic/qd0t3sxNrNI75akNT8jEOTjJXUh5zYY4QibDdgEY=
Subject key identifier:   04:EC:F1:AB:BD:BD:82:48:3F:BC:2B:2E:4C:E1:C3:5A:A3:B0:6A:68
Certificate issuer:       /CN=5CFD4BD8357F505D6CB1A47E9C153D57129592B6
Certificate serial:       231BA85C5C5704912E479681B1F3348FF3A19C2D
Authority key identifier: 5C:FD:4B:D8:35:7F:50:5D:6C:B1:A4:7E:9C:15:3D:57:12:95:92:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFD4BD8357F505D6CB1A47E9C153D57129592B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/323830343a363566303a383030303a3a2f33332d3333203d3e20323639353234.roa
Signing time:             Mon 08 Apr 2024 17:09:32 +0000
ROA not before:           Mon 08 Apr 2024 17:04:32 +0000
ROA not after:            Mon 07 Apr 2025 17:09:32 +0000
asID:                     269524
IP address blocks:        2804:65f0:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:1b:a8:5c:5c:57:04:91:2e:47:96:81:b1:f3:34:8f:f3:a1:9c:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CFD4BD8357F505D6CB1A47E9C153D57129592B6
        Validity
            Not Before: Apr  8 17:04:32 2024 GMT
            Not After : Apr  7 17:09:32 2025 GMT
        Subject: CN=04ECF1ABBDBD82483FBC2B2E4CE1C35AA3B06A68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:dd:e9:c2:41:e7:70:69:7e:1e:6a:53:ee:89:
                    10:ee:be:16:7c:b9:5b:bb:5c:e4:24:1b:a5:21:4e:
                    4d:cd:30:35:6b:42:c4:f5:2c:a8:23:56:79:bd:62:
                    a9:14:df:be:fa:88:13:c4:b3:8e:18:22:b0:1c:8b:
                    7f:bb:b8:7c:aa:74:41:ec:f2:85:a1:b4:c6:a7:3d:
                    69:e0:5b:c0:38:b7:80:6f:d4:9a:59:14:32:fd:28:
                    c4:9f:b5:5b:28:9e:ed:c6:b9:ad:de:ab:ba:44:46:
                    36:43:8e:e5:c8:9e:43:b2:98:d0:08:14:a2:74:d5:
                    2d:41:50:da:b5:a6:fc:1e:5a:73:e6:fa:99:1f:2e:
                    6a:ad:71:b2:82:ff:8d:37:af:17:f7:6e:9a:cc:4a:
                    a7:e5:9d:91:e5:3a:30:d3:7f:43:e9:b0:90:5c:0b:
                    75:49:68:c1:ab:6f:24:61:b9:42:e3:80:95:b9:b9:
                    e7:39:f8:c9:66:b9:c0:d1:75:77:ca:3b:58:03:f7:
                    2c:d4:69:07:a3:46:db:7c:59:aa:30:60:75:27:9b:
                    93:84:a2:d2:99:05:06:ff:e8:2c:92:44:13:ca:3d:
                    ee:25:f3:aa:a8:e3:ad:d4:b0:64:5d:0f:a2:84:a4:
                    f2:da:54:b0:81:e8:db:be:5e:9a:83:38:90:a9:38:
                    5b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:EC:F1:AB:BD:BD:82:48:3F:BC:2B:2E:4C:E1:C3:5A:A3:B0:6A:68
            X509v3 Authority Key Identifier:
                keyid:5C:FD:4B:D8:35:7F:50:5D:6C:B1:A4:7E:9C:15:3D:57:12:95:92:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/5CFD4BD8357F505D6CB1A47E9C153D57129592B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFD4BD8357F505D6CB1A47E9C153D57129592B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/323830343a363566303a383030303a3a2f33332d3333203d3e20323639353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65f0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         b0:dd:46:90:6c:1c:62:3c:aa:6c:3f:8c:63:68:2a:ba:cc:1a:
         99:db:45:ab:ba:87:5f:7c:04:24:da:d5:46:fd:bb:76:11:4c:
         fa:ad:18:04:60:77:e1:b2:92:fa:c4:ff:c3:b6:93:2c:b7:fd:
         9a:88:72:31:fe:4a:8a:63:3b:41:f4:ee:e6:9a:71:1b:9c:2b:
         8f:9e:f5:f0:7e:db:cf:97:c6:ea:a6:ab:f1:bd:86:18:aa:40:
         46:b9:0e:34:db:43:43:74:ff:cb:16:85:1a:b1:66:e9:d0:0c:
         e4:3e:d5:75:0e:b3:8b:c1:e5:1d:d8:b3:9f:9c:dc:59:a3:0b:
         1b:ee:c9:89:66:cb:24:ae:fd:fa:b9:a0:7c:49:50:ed:d9:a0:
         c3:f1:b7:96:26:a5:53:c9:50:71:6e:b6:88:59:b8:de:00:fc:
         7f:8c:d1:29:5a:4f:ce:84:41:97:2c:05:91:e3:ab:8e:29:e1:
         b1:ee:31:21:96:c2:70:4c:51:52:b9:bf:fa:73:df:67:bf:20:
         10:23:80:24:64:c5:9d:8a:85:d2:1c:f6:f6:bd:a3:1a:6a:2a:
         07:6a:f8:a7:a6:81:f4:f3:f6:5b:c0:a6:ba:e9:d6:f9:5a:f8:
         42:9d:58:45:50:a8:e2:c1:80:fe:64:33:dd:56:51:2f:e0:ba:
         8a:59:3e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org