Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/0/323830343a363035343a383030303a3a2f33332d3333203d3e20323639313630.roa
File:                     323830343a363035343a383030303a3a2f33332d3333203d3e20323639313630.roa (raw, json)
Hash identifier:          4mHv6aEXcxmNR3H6P7jdNxz/7Klq/Q4TPy1nbqwBkQU=
Subject key identifier:   59:40:80:2C:0A:C7:D6:C3:03:FA:82:01:81:6D:EE:E4:4F:85:82:D2
Certificate issuer:       /CN=72B98D1E08BC566416F2A78F6210C20E8F8E6700
Certificate serial:       7EB4168E5F26F7D8F6BF1EBADBA592070E0D7273
Authority key identifier: 72:B9:8D:1E:08:BC:56:64:16:F2:A7:8F:62:10:C2:0E:8F:8E:67:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72B98D1E08BC566416F2A78F6210C20E8F8E6700.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/0/323830343a363035343a383030303a3a2f33332d3333203d3e20323639313630.roa
Signing time:             Tue 19 Dec 2023 22:31:40 +0000
ROA not before:           Tue 19 Dec 2023 22:26:40 +0000
ROA not after:            Tue 17 Dec 2024 22:31:40 +0000
asID:                     269160
IP address blocks:        2804:6054:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:b4:16:8e:5f:26:f7:d8:f6:bf:1e:ba:db:a5:92:07:0e:0d:72:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72B98D1E08BC566416F2A78F6210C20E8F8E6700
        Validity
            Not Before: Dec 19 22:26:40 2023 GMT
            Not After : Dec 17 22:31:40 2024 GMT
        Subject: CN=5940802C0AC7D6C303FA8201816DEEE44F8582D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f2:6b:e0:c2:2a:26:df:ba:38:09:1d:5e:11:
                    f2:07:75:4e:9b:f1:05:a1:c8:bc:de:cb:9a:b8:aa:
                    2a:ad:5d:60:f2:cf:1e:c0:7e:8f:25:66:d4:05:f2:
                    a1:6c:cf:ec:d5:f7:63:21:5c:14:41:87:57:28:11:
                    99:32:2f:a0:5f:11:fa:43:f5:f5:4b:12:c1:65:6f:
                    4d:6a:f7:42:08:bd:19:f3:b6:e0:5b:69:4c:4d:e7:
                    7b:c9:8e:b4:2c:e3:65:e6:e9:4a:cf:6a:3a:4d:16:
                    86:42:97:c4:68:5e:ef:64:47:48:15:0d:78:0a:a1:
                    59:74:76:93:04:48:3b:b4:03:e0:a5:76:63:74:83:
                    a7:fe:14:22:65:7f:28:e6:e5:b5:ce:79:1e:78:e7:
                    2f:ab:fc:b5:f5:bf:bc:89:d5:9d:db:74:b3:2e:6d:
                    83:f9:45:fa:37:cc:95:d6:5e:40:5a:56:f8:d8:c8:
                    2a:32:3e:45:2f:53:a4:9d:15:ce:49:21:61:6b:db:
                    a6:a9:26:ff:11:55:49:22:4e:50:81:47:5c:3c:8e:
                    a9:b8:df:a4:2a:18:2f:cd:7a:c1:33:45:ee:80:c6:
                    b7:f6:d4:cb:80:b9:df:c1:c3:c9:3f:f5:bc:a6:d0:
                    48:1b:89:d9:25:bf:e1:5b:88:b6:a7:82:da:44:de:
                    f3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:40:80:2C:0A:C7:D6:C3:03:FA:82:01:81:6D:EE:E4:4F:85:82:D2
            X509v3 Authority Key Identifier:
                keyid:72:B9:8D:1E:08:BC:56:64:16:F2:A7:8F:62:10:C2:0E:8F:8E:67:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/0/72B98D1E08BC566416F2A78F6210C20E8F8E6700.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72B98D1E08BC566416F2A78F6210C20E8F8E6700.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/0/323830343a363035343a383030303a3a2f33332d3333203d3e20323639313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6054:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         5a:03:7d:7d:b2:fe:3d:1b:99:5c:ec:a2:68:60:8f:70:d6:4f:
         ac:12:e2:d6:a0:88:2d:8c:ef:7c:ee:9b:97:5c:d8:44:82:cc:
         33:d2:8e:67:0e:76:6b:e0:5d:f2:73:ad:4c:df:76:9a:31:ff:
         49:b2:8e:70:8a:2f:53:81:1b:40:a9:27:0f:99:a5:8c:d9:5b:
         e2:a6:b6:f8:67:08:1e:9d:71:74:4b:11:b1:40:9b:10:d1:fb:
         e8:52:c8:01:9d:63:a7:61:85:59:8d:92:4b:e3:57:98:e8:2d:
         5e:f3:4a:4c:41:0b:2c:5e:f1:71:1c:c5:5c:6b:21:68:b9:91:
         a0:26:99:bf:b6:75:4c:93:4d:c8:bb:94:1f:e2:03:23:92:ac:
         00:6e:f4:55:da:47:48:6f:6f:d7:d8:3b:06:c8:df:a6:9a:9f:
         c4:ee:45:e5:33:ed:3c:bf:e2:9b:cf:e6:29:0f:4a:c4:3f:35:
         58:f0:37:d1:e0:aa:2e:f4:a1:00:fd:a6:64:73:0e:ac:33:5d:
         80:8a:2c:13:99:99:40:07:40:46:a0:d3:5b:d9:d6:fd:91:a5:
         37:3a:4a:5c:59:ee:05:62:fb:c7:3e:14:bb:29:a0:e3:06:17:
         a2:8b:d7:14:69:cf:d8:aa:8e:5f:1c:47:6f:c5:09:e3:9b:c4:
         6b:dd:e4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:01 2024 by rpki-client on console-ams.rpki-client.org