Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/0/323830343a386133343a666330303a3a2f33382d3338203d3e20323733363534.roa
File:                     323830343a386133343a666330303a3a2f33382d3338203d3e20323733363534.roa (raw, json)
Hash identifier:          //jd2w85QmwunYT/ri0vozz+jepdct8yZHA4jsATOew=
Subject key identifier:   86:64:CA:30:F6:4F:06:9C:58:82:C7:CE:84:AA:D3:EE:F6:F7:BB:16
Certificate issuer:       /CN=489A4EF4D133DC9A829FC327FFED5038FD2206A5
Certificate serial:       2B20B6E6753262D42B2F56DF739C6DFE8FF2907D
Authority key identifier: 48:9A:4E:F4:D1:33:DC:9A:82:9F:C3:27:FF:ED:50:38:FD:22:06:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/489A4EF4D133DC9A829FC327FFED5038FD2206A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/0/323830343a386133343a666330303a3a2f33382d3338203d3e20323733363534.roa
Signing time:             Mon 11 Sep 2023 12:48:49 +0000
ROA not before:           Mon 11 Sep 2023 12:43:49 +0000
ROA not after:            Mon 09 Sep 2024 12:48:49 +0000
asID:                     273654
IP address blocks:        2804:8a34:fc00::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:20:b6:e6:75:32:62:d4:2b:2f:56:df:73:9c:6d:fe:8f:f2:90:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=489A4EF4D133DC9A829FC327FFED5038FD2206A5
        Validity
            Not Before: Sep 11 12:43:49 2023 GMT
            Not After : Sep  9 12:48:49 2024 GMT
        Subject: CN=8664CA30F64F069C5882C7CE84AAD3EEF6F7BB16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:a6:4a:f1:aa:af:c3:31:e8:37:18:46:8f:79:
                    c3:57:5a:80:65:85:ac:95:ff:c3:13:22:0c:a5:20:
                    80:da:63:f1:02:64:2d:99:ff:bf:16:50:d9:a0:84:
                    20:1c:44:4b:f1:4a:3a:c1:08:19:ab:c2:89:81:ca:
                    3c:53:c3:44:10:a4:6b:7e:3b:98:aa:1d:b2:66:c2:
                    1e:d3:a3:cd:2a:38:af:44:4c:95:8e:3b:f0:0a:34:
                    e8:9d:5c:4e:56:6e:a2:08:12:b5:69:c2:86:63:cc:
                    f8:37:f2:2e:fc:ba:2a:08:88:e8:fd:db:80:05:13:
                    c1:b1:58:6a:89:ff:db:26:b7:60:14:49:3a:d8:5c:
                    03:98:6d:77:a3:18:73:fb:b1:f4:69:b1:fd:2d:0c:
                    69:67:5e:c5:a6:fb:de:e2:94:97:e5:63:1e:8f:b4:
                    cf:7b:54:7d:d1:f4:a3:8d:43:55:3e:0e:f3:05:45:
                    09:af:f7:bf:8a:14:b1:74:55:1b:1a:aa:78:b6:39:
                    8e:cd:d7:f3:d3:1c:a5:bd:e6:62:32:67:f6:75:22:
                    c8:19:d8:c2:70:e1:74:1a:a3:5f:95:ec:a8:e4:52:
                    81:6e:bb:47:7b:99:c1:6c:fc:c6:b1:af:3f:20:d1:
                    78:25:c1:44:50:53:8e:0f:d5:b3:ca:b0:53:39:ef:
                    42:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:64:CA:30:F6:4F:06:9C:58:82:C7:CE:84:AA:D3:EE:F6:F7:BB:16
            X509v3 Authority Key Identifier:
                keyid:48:9A:4E:F4:D1:33:DC:9A:82:9F:C3:27:FF:ED:50:38:FD:22:06:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/0/489A4EF4D133DC9A829FC327FFED5038FD2206A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/489A4EF4D133DC9A829FC327FFED5038FD2206A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/0/323830343a386133343a666330303a3a2f33382d3338203d3e20323733363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a34:fc00::/38

    Signature Algorithm: sha256WithRSAEncryption
         6d:1a:02:3c:71:e5:f5:4d:f6:a5:ef:11:60:8e:34:fe:37:80:
         2a:5e:cc:d6:d5:e3:01:65:10:c8:77:23:88:c1:00:71:94:fd:
         51:71:8d:55:af:42:4b:bf:5b:a1:1d:c3:38:77:68:b0:35:8e:
         92:1f:23:76:3c:26:de:b5:a5:bd:07:2f:03:a9:10:8f:0a:c5:
         a2:a1:21:cb:8f:f8:5a:05:f8:cd:b4:cb:4e:cf:61:0d:c0:b6:
         28:59:ef:e6:64:a1:60:4f:bf:8a:f2:3a:1e:5e:59:cb:a5:c0:
         fe:d5:06:ff:c0:a4:34:70:2d:ec:bb:9a:fc:25:35:d2:75:d4:
         18:6d:25:03:12:66:b1:04:98:3f:e3:56:6d:f5:1a:4e:f0:22:
         8d:44:88:6a:b6:99:80:b1:ea:da:38:c3:39:eb:33:0e:1f:77:
         a8:72:0a:38:8f:42:3a:ef:76:62:79:9d:ae:9e:63:a8:20:e5:
         46:d3:57:8c:0e:8f:37:4d:46:57:99:8e:44:2d:96:b9:df:82:
         31:e0:8f:08:1e:3e:fa:c6:2e:8f:3c:a1:26:7d:16:8b:87:a2:
         7d:a5:ad:29:06:09:26:be:9e:a5:2f:2d:14:ea:45:31:dc:d1:
         94:d9:4c:fd:ff:7e:9e:02:f9:e8:05:3b:f7:84:be:95:6f:ee:
         b9:2c:93:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:10 2024 by rpki-client on console-fra.rpki-client.org