Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/323830343a326363303a386130303a3a2f34302d3430203d3e20323635323431.roa
File:                     323830343a326363303a386130303a3a2f34302d3430203d3e20323635323431.roa (raw, json)
Hash identifier:          MYKPkE0SIxl3PWZq0cyQYhs41UUgDd0jSy6Yw2YK4/w=
Subject key identifier:   EC:0B:C6:1A:FC:29:09:68:A3:8E:19:F2:2D:E4:86:61:9F:37:36:55
Certificate issuer:       /CN=206AA74F8C9E65605FA9A3C6970DAE15CFC48016
Certificate serial:       1AA484413852E0F1A88D0951609D660D69780189
Authority key identifier: 20:6A:A7:4F:8C:9E:65:60:5F:A9:A3:C6:97:0D:AE:15:CF:C4:80:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/206AA74F8C9E65605FA9A3C6970DAE15CFC48016.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/323830343a326363303a386130303a3a2f34302d3430203d3e20323635323431.roa
Signing time:             Wed 06 Dec 2023 20:11:24 +0000
ROA not before:           Wed 06 Dec 2023 20:06:24 +0000
ROA not after:            Wed 04 Dec 2024 20:11:24 +0000
asID:                     265241
IP address blocks:        2804:2cc0:8a00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:a4:84:41:38:52:e0:f1:a8:8d:09:51:60:9d:66:0d:69:78:01:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=206AA74F8C9E65605FA9A3C6970DAE15CFC48016
        Validity
            Not Before: Dec  6 20:06:24 2023 GMT
            Not After : Dec  4 20:11:24 2024 GMT
        Subject: CN=EC0BC61AFC290968A38E19F22DE486619F373655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b6:08:3b:07:94:c4:41:02:9d:72:1d:2c:fa:
                    42:0b:b2:ed:e3:1b:a1:f5:f0:cd:23:ad:08:38:40:
                    2c:73:ff:0a:ae:94:0a:04:2f:0c:d3:70:f1:8e:aa:
                    f9:b7:64:30:8c:77:09:7f:e8:dd:d3:16:9c:56:c8:
                    ad:65:be:61:df:16:55:c0:a2:e6:0a:cf:75:06:a2:
                    bc:be:3a:86:f1:f2:77:a2:f1:79:df:3a:16:25:0f:
                    1b:b3:5d:bd:6c:6e:67:2b:6d:6d:29:8a:4d:27:03:
                    ba:36:f4:0d:1e:d6:1a:8d:e9:d3:8f:43:32:25:ea:
                    34:75:51:09:63:8b:9d:6f:39:82:9b:fc:b3:c6:25:
                    71:e1:0f:db:82:5d:e3:5c:d7:30:d4:9f:dc:07:5f:
                    f7:ff:9c:e0:27:83:22:14:1d:65:3b:af:d7:51:10:
                    8d:d5:01:21:dc:4a:6d:df:ed:63:c3:b4:24:64:ab:
                    ed:12:ec:d2:76:be:e3:f7:f6:89:fc:91:a8:a4:b3:
                    76:32:de:ab:79:c2:14:60:fd:e9:75:3a:82:42:54:
                    1e:6c:fd:71:a8:6e:93:12:70:d3:97:13:4c:cc:4b:
                    ee:d5:d7:4a:31:4d:99:ae:ce:aa:74:d6:99:de:f8:
                    e1:36:0f:bf:c9:6d:10:5d:48:9c:fd:a3:bb:27:f6:
                    0a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0B:C6:1A:FC:29:09:68:A3:8E:19:F2:2D:E4:86:61:9F:37:36:55
            X509v3 Authority Key Identifier:
                keyid:20:6A:A7:4F:8C:9E:65:60:5F:A9:A3:C6:97:0D:AE:15:CF:C4:80:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/206AA74F8C9E65605FA9A3C6970DAE15CFC48016.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/206AA74F8C9E65605FA9A3C6970DAE15CFC48016.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/323830343a326363303a386130303a3a2f34302d3430203d3e20323635323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2cc0:8a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         3d:41:29:26:1f:17:69:ef:30:08:83:dd:20:84:d5:dd:28:e7:
         45:d6:2a:02:94:66:ef:a3:1a:51:81:a0:94:8b:2d:1e:e3:c1:
         9b:b5:49:f8:e0:85:0c:a6:c5:1c:ad:76:b1:d0:da:c0:45:fb:
         57:2b:0d:4a:6b:9d:6e:06:24:46:47:ac:d5:c5:f1:6e:22:3b:
         91:bf:b9:4e:8b:fa:59:36:1a:34:3e:3f:98:bc:21:b9:cc:63:
         b0:4d:6d:46:62:47:62:24:8b:f0:88:24:57:8f:2c:1e:86:10:
         e3:e2:f7:15:5f:7c:14:39:4e:22:54:ba:5f:6c:a0:97:bc:6f:
         85:de:dc:b6:81:c7:6b:41:4c:0b:10:b6:8f:0c:b7:7b:d9:54:
         9b:d1:8f:eb:f7:16:51:39:42:61:2c:b7:ba:d6:74:f4:8e:60:
         df:58:96:b7:21:69:2e:ca:47:3e:a3:4f:cc:30:06:9e:42:d0:
         bc:9c:81:51:d2:34:9b:1c:46:d6:42:e1:78:93:7c:c0:79:b0:
         50:50:29:04:51:48:19:43:d9:de:d9:97:ae:cb:7f:e2:b0:1e:
         af:55:17:f9:23:70:d2:12:f3:bf:4c:51:fd:11:a1:ed:b1:b8:
         8a:55:ac:23:81:c6:a2:25:d7:89:6f:94:4f:e8:25:2d:df:ff:
         f4:19:cb:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org