Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28cvfRi3XczG6oB5AU1PyUqJ3k85Wh64RSQYwhBGjJko/0/323830343a316133343a3a2f33322d313238203d3e203631383435.roa
File:                     323830343a316133343a3a2f33322d313238203d3e203631383435.roa (raw, json)
Hash identifier:          AmB6GGrygIAYXiCk7HdgY+lVCLQy/oCBfI7hKzWeVRs=
Subject key identifier:   93:90:27:DF:E5:8A:73:0F:5F:AA:B1:F0:4A:27:9D:01:04:2E:67:D2
Certificate issuer:       /CN=6AD4934D9F89340252A8965DF7DE6D28AA7758CA
Certificate serial:       78AA08F6109BC1317A083B2015D55EE5D0C23680
Authority key identifier: 6A:D4:93:4D:9F:89:34:02:52:A8:96:5D:F7:DE:6D:28:AA:77:58:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AD4934D9F89340252A8965DF7DE6D28AA7758CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28cvfRi3XczG6oB5AU1PyUqJ3k85Wh64RSQYwhBGjJko/0/323830343a316133343a3a2f33322d313238203d3e203631383435.roa
Signing time:             Mon 25 Sep 2023 19:58:41 +0000
ROA not before:           Mon 25 Sep 2023 19:53:41 +0000
ROA not after:            Mon 23 Sep 2024 19:58:41 +0000
asID:                     61845
IP address blocks:        2804:1a34::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:aa:08:f6:10:9b:c1:31:7a:08:3b:20:15:d5:5e:e5:d0:c2:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD4934D9F89340252A8965DF7DE6D28AA7758CA
        Validity
            Not Before: Sep 25 19:53:41 2023 GMT
            Not After : Sep 23 19:58:41 2024 GMT
        Subject: CN=939027DFE58A730F5FAAB1F04A279D01042E67D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ba:20:9b:d4:7f:8f:a7:84:4f:95:73:1b:25:
                    47:91:db:9e:af:d6:b8:31:e2:de:d2:7c:0a:6b:f8:
                    47:7d:92:79:05:63:cf:34:ed:2a:95:8c:84:ae:5d:
                    08:36:40:d5:55:c3:b2:ce:ac:b4:25:1a:0a:c4:44:
                    bf:76:a3:5f:48:b7:a3:c1:4e:98:28:31:61:a8:d3:
                    2b:c8:1d:64:3c:f8:e0:6d:9f:5d:43:14:67:e0:34:
                    58:c4:61:5b:e4:47:35:8c:3c:5b:a3:10:31:0c:ae:
                    e6:55:fd:f5:4c:a9:ed:e7:7e:a3:82:1e:55:43:a7:
                    44:c7:03:9b:2b:f7:d4:7c:46:19:08:89:48:88:a2:
                    71:8f:36:70:bc:ab:b9:b9:ac:b7:65:18:aa:dd:cb:
                    84:5b:80:66:97:98:60:23:62:53:2b:67:ae:48:94:
                    ca:85:df:95:79:4d:4f:13:7c:51:cc:47:c7:e9:f9:
                    87:9e:00:44:42:0a:f2:78:89:40:93:b2:92:2c:53:
                    7b:a1:0c:36:e9:f6:f6:59:2c:2e:31:39:8c:07:70:
                    bb:e1:a9:29:bc:7f:cd:1f:ce:db:2b:6d:99:c0:83:
                    f1:68:8a:07:78:e7:2a:95:75:28:db:b0:8b:3b:66:
                    e8:96:95:89:56:c7:c9:8b:7c:80:46:51:ab:a9:ae:
                    5e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:90:27:DF:E5:8A:73:0F:5F:AA:B1:F0:4A:27:9D:01:04:2E:67:D2
            X509v3 Authority Key Identifier:
                keyid:6A:D4:93:4D:9F:89:34:02:52:A8:96:5D:F7:DE:6D:28:AA:77:58:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28cvfRi3XczG6oB5AU1PyUqJ3k85Wh64RSQYwhBGjJko/0/6AD4934D9F89340252A8965DF7DE6D28AA7758CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AD4934D9F89340252A8965DF7DE6D28AA7758CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28cvfRi3XczG6oB5AU1PyUqJ3k85Wh64RSQYwhBGjJko/0/323830343a316133343a3a2f33322d313238203d3e203631383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a34::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:e4:70:05:f3:cf:74:31:fe:24:f5:4e:c5:b2:9c:ba:b2:64:
         90:fa:a9:4e:37:1e:84:cc:67:42:28:a6:1b:ea:aa:37:05:c3:
         aa:e7:60:b1:f6:2f:42:3e:88:59:3e:23:75:16:10:ad:2e:0c:
         42:ed:ca:18:70:0a:33:46:d0:e8:5c:36:cd:00:00:bb:8c:25:
         3a:53:6b:09:eb:78:f8:58:4f:c7:89:10:81:a0:d1:34:3e:25:
         72:19:ef:10:ba:f1:89:c9:39:bf:a0:6a:36:a8:b7:d2:46:13:
         87:29:c0:6b:c8:21:c0:51:39:97:f4:54:8f:d2:fc:17:90:11:
         22:d7:5e:cb:60:36:b5:cf:67:1d:bd:c5:ab:c9:e3:cc:22:96:
         5a:ec:b3:d5:2f:30:3b:60:19:69:3d:4e:e2:b8:d8:14:33:39:
         2e:ca:08:52:63:1f:e6:d1:d3:86:cf:aa:6c:59:b7:db:ab:29:
         e1:3f:67:2d:2f:7d:cb:1f:de:fb:a1:4e:c7:68:33:43:2e:a6:
         eb:06:b5:98:db:c1:3a:60:d7:32:aa:2d:6e:8f:13:e3:0e:5e:
         05:71:35:75:de:28:c9:94:06:6f:2b:93:2b:64:ce:0d:f6:48:
         9b:55:48:d8:b0:4b:ca:c5:b4:37:96:57:d7:26:5b:7c:ed:d0:
         67:7e:b7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:01 2024 by rpki-client on console-ams.rpki-client.org