Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/323830343a313333383a373a3a2f34382d3438203d3e20323633353232.roa
File:                     323830343a313333383a373a3a2f34382d3438203d3e20323633353232.roa (raw, json)
Hash identifier:          pH0Rst5ANlSpIyaVs8wA1veqcRMwyCXeNRNNY8CANCo=
Subject key identifier:   FF:3A:C8:46:0C:90:F0:2C:C8:1A:8C:55:1C:80:39:DF:15:12:33:92
Certificate issuer:       /CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
Certificate serial:       7F2B6D71F847898BCBBA7F6ACE10C612A81E2E26
Authority key identifier: 6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/323830343a313333383a373a3a2f34382d3438203d3e20323633353232.roa
Signing time:             Thu 28 Dec 2023 17:10:06 +0000
ROA not before:           Thu 28 Dec 2023 17:05:06 +0000
ROA not after:            Thu 26 Dec 2024 17:10:06 +0000
asID:                     263522
IP address blocks:        2804:1338:7::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:2b:6d:71:f8:47:89:8b:cb:ba:7f:6a:ce:10:c6:12:a8:1e:2e:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
        Validity
            Not Before: Dec 28 17:05:06 2023 GMT
            Not After : Dec 26 17:10:06 2024 GMT
        Subject: CN=FF3AC8460C90F02CC81A8C551C8039DF15123392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:19:94:0f:7e:d8:d6:d4:20:4e:87:50:fe:23:
                    b7:ab:81:d0:03:0d:83:93:82:15:ed:0c:2e:62:76:
                    12:71:0a:6a:4e:55:16:c8:58:6f:00:47:8c:60:15:
                    f7:f2:4a:b1:13:43:11:25:a1:6e:a6:71:36:07:64:
                    03:92:1a:80:01:8e:53:b9:6b:ad:b3:93:6a:94:21:
                    33:c0:9f:84:b7:13:e8:e7:dd:35:f4:dc:3e:3d:3a:
                    38:57:ea:88:b4:ff:58:27:89:09:bb:ff:0d:79:c9:
                    01:dc:17:7f:a8:50:c4:43:e8:04:9b:ae:50:9f:65:
                    45:05:77:88:3c:5c:6f:0d:d8:8b:dc:57:7d:4e:48:
                    3a:04:87:d1:47:58:72:e4:3b:82:68:7a:48:4a:74:
                    79:00:85:b4:ed:02:60:41:c3:2d:ca:76:84:ce:b1:
                    1a:8b:e1:de:ed:ef:c6:cb:3f:12:15:a4:bf:27:31:
                    0c:dd:8f:b9:0a:d4:1a:ee:63:71:06:dc:3b:2a:dd:
                    37:94:93:ce:05:63:b1:ea:83:1f:28:fd:03:95:4f:
                    59:a3:27:74:08:6b:90:b6:2b:88:89:a2:f3:4f:6f:
                    16:61:3c:2a:ae:f6:1e:a1:40:0d:87:5c:81:e1:9c:
                    1c:ff:6a:10:55:e8:30:62:fa:94:fe:cf:77:87:ed:
                    34:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:3A:C8:46:0C:90:F0:2C:C8:1A:8C:55:1C:80:39:DF:15:12:33:92
            X509v3 Authority Key Identifier:
                keyid:6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/323830343a313333383a373a3a2f34382d3438203d3e20323633353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1338:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:81:1b:a1:a2:a6:48:82:30:8b:e7:19:72:d8:51:2e:dd:51:
         1a:9b:ac:54:86:92:78:ac:9b:f1:aa:ba:d2:2a:6b:26:a8:4c:
         40:2b:2c:d4:84:9b:c0:c6:dd:2a:19:29:cc:38:a2:93:cd:e1:
         ae:3f:2c:94:43:c7:05:f1:68:0a:a0:6b:f7:70:ff:0a:c4:3a:
         a0:39:4f:98:f5:cf:ec:62:0b:5a:7c:0b:e9:ad:85:9b:8e:41:
         a0:17:4e:ec:b4:11:bb:0e:72:c6:a4:aa:62:dd:81:1a:fc:38:
         cd:76:e3:c8:d1:81:f1:30:8e:c8:af:fa:e3:3c:27:b1:5c:d0:
         67:5e:f4:4e:1d:82:f6:48:fc:e0:2a:3c:91:da:37:54:aa:3a:
         95:85:59:d5:a4:52:d2:4e:c2:7b:fe:de:ac:93:bd:9e:b3:07:
         29:de:7d:59:10:6b:f0:52:48:3b:0a:d9:e4:1d:2c:51:2b:d9:
         97:e5:d8:ac:3a:23:72:a1:bd:25:64:3e:a9:03:c3:c6:71:d9:
         dd:08:96:bf:39:b7:69:2f:35:a8:b8:e0:93:5f:e6:09:f2:0e:
         f1:e6:8f:41:39:16:f5:98:48:52:27:02:89:a3:bc:62:76:50:
         7b:f3:2e:bd:5a:93:a2:bc:23:4d:41:9f:44:9d:88:56:4b:eb:
         ed:d2:aa:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:31 2024 by rpki-client on console-ams.rpki-client.org