Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/323830313a38303a333761303a3a2f34382d3438203d3e203631363030.roa
File:                     323830313a38303a333761303a3a2f34382d3438203d3e203631363030.roa (raw, json)
Hash identifier:          SpdwT1JW+gYhidW7Ti3R1wewjEJ5wAeOvK9Pf+hDdt4=
Subject key identifier:   64:DA:08:1F:19:C5:A7:CC:71:16:34:22:1F:8A:92:85:56:88:E4:1E
Certificate issuer:       /CN=53BB4AACFE0205BA1F1E509DF70EDF60BE99246B
Certificate serial:       7B4051C3895A6B60E6ED28A92F01566A191C4F40
Authority key identifier: 53:BB:4A:AC:FE:02:05:BA:1F:1E:50:9D:F7:0E:DF:60:BE:99:24:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53BB4AACFE0205BA1F1E509DF70EDF60BE99246B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/323830313a38303a333761303a3a2f34382d3438203d3e203631363030.roa
Signing time:             Sat 23 Sep 2023 19:30:24 +0000
ROA not before:           Sat 23 Sep 2023 19:25:24 +0000
ROA not after:            Sat 21 Sep 2024 19:30:24 +0000
asID:                     61600
IP address blocks:        2801:80:37a0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:40:51:c3:89:5a:6b:60:e6:ed:28:a9:2f:01:56:6a:19:1c:4f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53BB4AACFE0205BA1F1E509DF70EDF60BE99246B
        Validity
            Not Before: Sep 23 19:25:24 2023 GMT
            Not After : Sep 21 19:30:24 2024 GMT
        Subject: CN=64DA081F19C5A7CC711634221F8A92855688E41E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2c:9b:99:5c:99:7b:81:23:fd:be:b3:3a:36:
                    42:18:a6:91:6e:4b:92:91:bc:74:7c:ff:26:d8:9d:
                    bb:5e:50:2f:ba:e3:85:4b:d3:92:1e:37:a2:47:d0:
                    90:7b:9a:7e:71:a9:27:fb:0b:6e:15:b2:17:66:42:
                    9f:72:3b:ee:3d:51:fc:ba:f0:37:f4:16:2d:05:3d:
                    72:66:44:55:18:26:94:5d:24:d8:6e:84:4a:a6:ee:
                    51:4a:76:e0:5b:20:76:6d:4f:a4:9c:18:b4:43:6b:
                    56:84:b6:ef:da:3f:a7:1e:ee:8a:ae:47:80:be:30:
                    d9:3b:4f:98:a5:06:74:16:44:29:8b:52:0e:0b:99:
                    be:36:53:f5:d2:15:47:12:59:a5:c5:60:cf:62:3f:
                    c4:4b:b7:0a:c0:7d:f9:ab:de:a4:a8:fc:8c:88:42:
                    e2:c1:ba:9d:30:1d:37:03:80:81:77:73:62:99:2c:
                    47:63:52:98:83:e2:4f:ee:87:13:61:07:03:d4:b0:
                    81:01:a2:bf:b5:38:83:5b:42:4f:cb:b6:99:f5:d9:
                    9d:e4:df:b4:f6:53:0d:93:75:f4:65:70:a2:75:0a:
                    d3:79:73:07:3c:32:f5:3e:a8:4e:4b:3e:7b:d4:ea:
                    65:49:97:ad:ff:f8:78:d7:35:b0:cf:ce:2b:ee:fb:
                    9b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:DA:08:1F:19:C5:A7:CC:71:16:34:22:1F:8A:92:85:56:88:E4:1E
            X509v3 Authority Key Identifier:
                keyid:53:BB:4A:AC:FE:02:05:BA:1F:1E:50:9D:F7:0E:DF:60:BE:99:24:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/53BB4AACFE0205BA1F1E509DF70EDF60BE99246B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53BB4AACFE0205BA1F1E509DF70EDF60BE99246B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/323830313a38303a333761303a3a2f34382d3438203d3e203631363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:37a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:4a:c4:be:39:e6:76:cc:b2:b3:49:e6:31:ed:b4:db:0f:f3:
         ca:1e:30:b2:5a:1a:bb:68:e6:4f:f7:a0:8a:06:4c:b7:65:b1:
         12:f7:57:01:08:f9:bc:13:f2:d9:a6:08:ea:ab:14:07:e1:5d:
         55:b8:d0:e2:75:8f:43:bb:d1:9c:8e:c0:d9:84:9e:06:8a:8b:
         47:bf:81:6a:2e:79:0e:46:41:c5:88:65:0e:5d:1e:a4:23:42:
         e9:ca:82:c4:05:c9:59:30:32:70:db:03:67:54:9a:b7:9b:8d:
         41:f7:05:73:52:a0:23:71:c1:70:cd:dd:b5:31:33:ca:bf:0a:
         e5:34:33:0b:8f:1b:db:c9:63:88:3a:f4:5a:ce:15:a4:f2:99:
         27:29:10:d1:a5:ea:04:f5:14:ed:85:2f:df:97:1f:74:56:ae:
         b6:bf:8e:f6:62:ee:46:54:c7:17:ab:f3:9a:47:a0:d2:32:bd:
         75:0b:ec:24:3f:0e:61:30:f6:5e:6c:f1:d6:c2:c0:db:07:5f:
         2c:7c:a2:01:09:e7:4e:7f:c0:d1:f7:7c:ce:2c:30:ab:b0:88:
         40:90:ef:37:be:52:1e:ef:7c:11:5a:34:f6:77:cc:5b:c3:91:
         e5:1a:dc:a2:31:43:21:cf:4b:8b:26:cb:0c:66:ed:fd:cd:5f:
         f3:0d:98:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:05 2024 by rpki-client on console-ams.rpki-client.org