Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/323830343a326363303a383930303a3a2f34302d3430203d3e20323635323431.roa
File:                     323830343a326363303a383930303a3a2f34302d3430203d3e20323635323431.roa (raw, json)
Hash identifier:          qL/ivcnGKAgfYcK4Vd5uqeHu82dyFYIbmsTRsrpzAII=
Subject key identifier:   86:D9:01:72:D0:76:8C:26:06:B9:1F:97:EF:67:E0:7B:F8:55:CE:83
Certificate issuer:       /CN=206AA74F8C9E65605FA9A3C6970DAE15CFC48016
Certificate serial:       5ABA532354942B47EF8BA812DFC96F6A304C333F
Authority key identifier: 20:6A:A7:4F:8C:9E:65:60:5F:A9:A3:C6:97:0D:AE:15:CF:C4:80:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/206AA74F8C9E65605FA9A3C6970DAE15CFC48016.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/323830343a326363303a383930303a3a2f34302d3430203d3e20323635323431.roa
Signing time:             Wed 06 Dec 2023 20:11:24 +0000
ROA not before:           Wed 06 Dec 2023 20:06:24 +0000
ROA not after:            Wed 04 Dec 2024 20:11:24 +0000
asID:                     265241
IP address blocks:        2804:2cc0:8900::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:ba:53:23:54:94:2b:47:ef:8b:a8:12:df:c9:6f:6a:30:4c:33:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=206AA74F8C9E65605FA9A3C6970DAE15CFC48016
        Validity
            Not Before: Dec  6 20:06:24 2023 GMT
            Not After : Dec  4 20:11:24 2024 GMT
        Subject: CN=86D90172D0768C2606B91F97EF67E07BF855CE83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a6:55:e0:78:91:dd:bf:f2:f4:d3:80:8c:ed:
                    56:65:b2:8e:c7:fd:f1:42:61:cc:80:46:09:c5:e5:
                    9d:ca:dc:cb:e0:9f:3e:57:28:5f:e6:09:f1:de:1f:
                    e0:ff:33:8e:55:8d:26:af:ee:c0:0b:7e:0f:0a:ff:
                    17:2e:18:3b:90:80:fb:18:cd:4c:bb:bf:3f:71:a3:
                    10:fb:86:99:7a:9b:92:9f:13:a8:4c:16:3b:68:2f:
                    e3:a7:03:bd:86:35:28:81:cd:6b:44:e8:1b:3d:d8:
                    9f:25:5b:5c:08:f1:5e:72:2c:47:96:71:a3:52:4b:
                    75:e9:28:7c:34:cc:e6:14:2c:5e:17:1c:9c:9d:7b:
                    31:14:62:ac:32:86:b9:bd:24:13:76:44:2c:45:66:
                    ff:45:9d:ce:82:f7:d9:72:c8:74:fc:5c:1d:ed:c0:
                    0d:3a:fb:5c:98:f8:a1:a9:e8:88:e3:ce:48:40:7d:
                    91:1c:da:2c:5b:77:59:ef:48:83:0f:f8:5c:16:3f:
                    d5:81:95:c2:a4:28:62:cc:cd:e3:c2:ac:ee:e8:6f:
                    8c:4a:a6:56:ff:44:80:66:7a:5d:9f:c0:4c:e4:6b:
                    2d:23:40:c5:36:25:a4:f0:81:1f:57:61:91:51:cf:
                    12:ec:44:af:52:ec:a0:79:7b:8d:60:06:c8:ae:dc:
                    80:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D9:01:72:D0:76:8C:26:06:B9:1F:97:EF:67:E0:7B:F8:55:CE:83
            X509v3 Authority Key Identifier:
                keyid:20:6A:A7:4F:8C:9E:65:60:5F:A9:A3:C6:97:0D:AE:15:CF:C4:80:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/206AA74F8C9E65605FA9A3C6970DAE15CFC48016.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/206AA74F8C9E65605FA9A3C6970DAE15CFC48016.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/323830343a326363303a383930303a3a2f34302d3430203d3e20323635323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2cc0:8900::/40

    Signature Algorithm: sha256WithRSAEncryption
         5e:d9:3c:8c:74:0c:4c:9c:cf:a3:9f:6d:06:5d:2f:c0:02:fc:
         eb:64:23:b0:63:d4:dc:be:ca:9f:d4:9f:34:c9:2a:df:70:b7:
         a1:eb:91:db:d6:47:56:8a:97:48:62:4a:6c:4e:e3:81:d3:72:
         54:7f:fb:a5:06:97:53:de:e5:6f:0c:67:d4:44:1c:64:a2:6d:
         db:57:37:ec:ce:0b:ad:43:7d:5f:44:28:4a:07:67:25:8d:1f:
         2b:39:24:a1:f1:10:8c:3e:11:4f:5a:4e:d6:41:c9:3f:1f:16:
         db:9d:a4:02:bc:e8:d4:df:d1:4d:02:4d:75:7e:26:ec:9a:99:
         91:86:b1:f4:a5:a1:0d:b5:e5:31:bf:17:0e:b2:59:a6:67:20:
         70:c2:31:25:6b:07:b1:fa:f6:db:62:dc:2b:29:3d:a9:22:39:
         50:17:57:0d:c2:2d:2d:c0:08:c9:c5:53:2f:b9:bb:70:ee:09:
         ba:22:c7:ce:7c:4b:59:75:8b:52:d7:31:0c:8e:e0:a3:b9:f6:
         2d:ed:2b:93:e4:b5:6d:f2:49:f6:f1:a3:21:fb:38:4a:7c:73:
         98:d3:2e:8f:5d:50:83:96:1a:dd:dc:d4:21:eb:19:f1:f0:c8:
         a4:a9:92:00:86:5e:ad:ca:6e:39:be:08:4f:fa:ef:39:49:cc:
         8b:b2:81:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org