Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/1/323830343a363035343a633030303a3a2f33342d3334203d3e20323639313630.roa
File:                     323830343a363035343a633030303a3a2f33342d3334203d3e20323639313630.roa (raw, json)
Hash identifier:          icAebZYhYAGXkglnTR9PtFMTfNKYTgO3PFm0McNXsRE=
Subject key identifier:   4B:44:5A:F4:BA:7E:EB:A3:E5:B6:AD:84:9E:9A:84:81:83:3E:A2:6B
Certificate issuer:       /CN=0DC81BC85B5AB508688D8AB7148F9DB0E39679A2
Certificate serial:       7849CDD4C8923AA4121F939115657A2F94E3591F
Authority key identifier: 0D:C8:1B:C8:5B:5A:B5:08:68:8D:8A:B7:14:8F:9D:B0:E3:96:79:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DC81BC85B5AB508688D8AB7148F9DB0E39679A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/1/323830343a363035343a633030303a3a2f33342d3334203d3e20323639313630.roa
Signing time:             Thu 04 Apr 2024 00:49:47 +0000
ROA not before:           Thu 04 Apr 2024 00:44:47 +0000
ROA not after:            Thu 03 Apr 2025 00:49:47 +0000
asID:                     269160
IP address blocks:        2804:6054:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:49:cd:d4:c8:92:3a:a4:12:1f:93:91:15:65:7a:2f:94:e3:59:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DC81BC85B5AB508688D8AB7148F9DB0E39679A2
        Validity
            Not Before: Apr  4 00:44:47 2024 GMT
            Not After : Apr  3 00:49:47 2025 GMT
        Subject: CN=4B445AF4BA7EEBA3E5B6AD849E9A8481833EA26B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7c:8e:87:98:6a:37:2a:e7:c5:05:2a:54:f5:
                    00:c7:0b:5a:41:6a:81:7f:e5:0a:40:7e:be:fd:35:
                    81:fb:31:50:f0:84:3b:48:8a:98:6e:da:95:18:55:
                    6b:db:66:eb:eb:e5:76:33:e4:80:20:5b:df:e5:b3:
                    a2:30:26:2e:9a:e2:d8:1d:e3:3c:09:37:4c:aa:ec:
                    eb:dc:2b:d3:a7:79:18:d6:81:ea:a2:22:f7:eb:07:
                    75:15:26:ec:22:e6:84:d5:01:3b:35:52:a6:ba:48:
                    f9:21:84:97:bc:78:9e:1a:16:50:b2:47:3e:c6:a2:
                    97:f6:fa:e5:6f:a4:27:76:f6:cb:83:16:bc:c4:51:
                    a1:c0:76:c9:a5:70:34:32:c9:83:00:80:ee:22:4a:
                    d9:21:eb:2b:bf:1f:29:00:e8:1d:28:03:78:e5:4e:
                    0c:6a:48:44:a7:99:34:d1:61:3b:94:31:c5:cf:38:
                    54:06:1e:d7:3e:c5:37:8e:b3:5f:36:64:61:c2:8c:
                    dd:33:ab:6a:68:b0:70:06:32:26:6a:80:b6:b4:41:
                    61:e0:45:2c:01:f8:05:9b:8d:7c:23:39:94:30:2d:
                    b9:75:37:35:4e:fb:df:5d:64:e8:7b:fd:f8:72:96:
                    75:50:37:36:d2:87:5a:40:d2:be:1a:f9:02:20:31:
                    c0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:44:5A:F4:BA:7E:EB:A3:E5:B6:AD:84:9E:9A:84:81:83:3E:A2:6B
            X509v3 Authority Key Identifier:
                keyid:0D:C8:1B:C8:5B:5A:B5:08:68:8D:8A:B7:14:8F:9D:B0:E3:96:79:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/1/0DC81BC85B5AB508688D8AB7148F9DB0E39679A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DC81BC85B5AB508688D8AB7148F9DB0E39679A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/1/323830343a363035343a633030303a3a2f33342d3334203d3e20323639313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6054:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         2a:83:9b:ac:4c:a1:8d:a7:a2:0c:df:85:05:09:07:08:98:3d:
         3c:30:4b:cb:e8:85:a7:af:f2:99:45:4e:37:65:91:3a:21:ad:
         53:d3:d5:59:5a:9e:27:c5:1f:f6:ca:59:c0:5b:62:c1:bb:b7:
         f4:48:e7:40:24:f0:ef:a9:b4:00:bf:db:dd:0f:72:32:6a:cd:
         aa:b5:0d:aa:d2:f9:f7:c3:29:16:e1:7b:60:65:f7:ed:e3:bf:
         34:ea:ec:4c:fd:07:29:43:6e:ce:c4:13:db:2e:7d:1d:c6:9d:
         3a:43:dd:65:55:00:ac:3a:75:bb:da:30:7f:2a:c7:7c:60:65:
         2c:f2:6a:38:65:54:81:a6:05:42:4e:7e:6f:1d:1d:2a:cd:fd:
         d0:12:68:c9:8e:d8:db:f3:b7:93:13:fa:fa:d2:f8:ca:22:96:
         72:82:a3:b0:d9:2a:5e:37:30:00:00:1b:43:93:1a:57:f7:fc:
         c9:22:13:4d:e0:1b:98:77:55:b0:67:ed:55:e5:42:ab:67:0f:
         e9:ff:35:01:19:fa:fc:e2:f3:4a:20:f8:55:b0:fd:91:1a:76:
         75:1d:21:0f:4f:b6:09:53:62:40:9d:0f:bc:99:d9:02:f4:79:
         50:ed:39:27:be:d8:46:ab:ca:8e:2c:89:dc:b9:c3:80:62:8c:
         a0:e2:98:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org