Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/323830343a316238343a3a2f33322d3438203d3e203631373332.roa
File:                     323830343a316238343a3a2f33322d3438203d3e203631373332.roa (raw, json)
Hash identifier:          74nPI6W41oNXQ0r+U+2JeCRguoL6fncqEd15vZ46DC4=
Subject key identifier:   35:81:86:BA:5B:5E:1E:E6:92:C5:75:BC:C6:7A:71:DD:8E:44:9A:B1
Certificate issuer:       /CN=081B6CC526A6AFE4085F7AC1D1591A9AE1595D6B
Certificate serial:       7CF2AFB16573722626024DD3621EE1784D450D21
Authority key identifier: 08:1B:6C:C5:26:A6:AF:E4:08:5F:7A:C1:D1:59:1A:9A:E1:59:5D:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/081B6CC526A6AFE4085F7AC1D1591A9AE1595D6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/323830343a316238343a3a2f33322d3438203d3e203631373332.roa
Signing time:             Fri 22 Sep 2023 21:03:47 +0000
ROA not before:           Fri 22 Sep 2023 20:58:47 +0000
ROA not after:            Fri 20 Sep 2024 21:03:47 +0000
asID:                     61732
IP address blocks:        2804:1b84::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:f2:af:b1:65:73:72:26:26:02:4d:d3:62:1e:e1:78:4d:45:0d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=081B6CC526A6AFE4085F7AC1D1591A9AE1595D6B
        Validity
            Not Before: Sep 22 20:58:47 2023 GMT
            Not After : Sep 20 21:03:47 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f5:24:dc:22:1c:70:b5:49:f5:26:ac:1b:ab:
                    77:4c:0d:2d:c4:0c:fe:46:11:da:d5:62:27:a4:25:
                    e5:a1:35:1f:d7:cc:88:14:34:de:72:55:44:18:a8:
                    27:2f:94:0c:31:5e:8b:e2:c8:a7:bd:15:2d:45:f3:
                    58:2b:87:71:5d:84:1c:86:90:fd:34:7a:59:28:46:
                    64:6f:79:d0:27:b1:76:9d:a0:12:03:2c:d1:9c:e9:
                    b3:f6:5b:83:82:22:30:c2:ed:d3:6c:fa:88:c3:bf:
                    6c:0b:c7:7f:b6:06:f0:bf:e0:4e:48:aa:00:12:d8:
                    22:9e:54:21:7e:cf:ec:b5:93:6e:80:aa:50:d3:a7:
                    35:e8:dc:e0:c8:54:5e:66:78:c7:c1:c7:9c:e6:7e:
                    37:f5:0f:f8:50:ba:6d:b3:1d:30:0a:be:4b:90:f3:
                    9e:82:b0:f5:21:7a:03:6f:b8:fb:35:c4:75:10:bc:
                    bd:ff:30:29:2f:34:17:8e:9f:a3:69:4b:31:af:0a:
                    97:cf:4b:b2:b1:0b:1b:1c:39:2a:37:0f:ba:8b:e4:
                    51:01:e1:11:9a:b8:d9:32:22:5f:60:a4:19:8f:c3:
                    15:40:95:96:6f:36:40:76:e6:cd:b0:3e:85:da:97:
                    f1:99:0a:0f:f2:0a:cd:02:50:ec:20:a4:93:04:46:
                    d1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:81:86:BA:5B:5E:1E:E6:92:C5:75:BC:C6:7A:71:DD:8E:44:9A:B1
            X509v3 Authority Key Identifier:
                keyid:08:1B:6C:C5:26:A6:AF:E4:08:5F:7A:C1:D1:59:1A:9A:E1:59:5D:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/081B6CC526A6AFE4085F7AC1D1591A9AE1595D6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/081B6CC526A6AFE4085F7AC1D1591A9AE1595D6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/323830343a316238343a3a2f33322d3438203d3e203631373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b84::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:74:46:21:2e:ab:c2:d2:0a:94:a9:f7:ef:ea:93:e8:58:5d:
         1a:d4:4e:e0:fd:27:ef:dd:99:f3:b6:eb:19:99:c1:62:90:a8:
         ea:69:89:74:b1:b8:be:0d:16:6d:3b:e2:03:fa:f6:62:dd:a9:
         3d:58:bb:21:f7:e3:aa:1b:db:3b:79:d3:58:bf:23:a1:4f:11:
         c9:fb:9c:43:3a:ea:e1:7e:31:6b:40:73:f5:b7:ad:82:4d:60:
         57:7f:b5:8a:90:7d:26:44:1e:43:53:50:14:15:d3:78:1b:cd:
         ac:3d:9a:16:30:5f:6d:01:e1:3b:f2:55:77:ea:87:34:ab:85:
         b1:cb:44:8a:c8:e3:fb:95:a9:bd:06:1e:07:bf:4b:6f:b1:13:
         0b:cf:81:18:54:92:bf:ad:6a:de:e6:79:e7:59:61:23:8d:87:
         9e:30:e8:08:53:f7:98:bf:98:62:35:1f:c2:8c:89:52:0f:85:
         65:9b:d9:8a:94:00:cd:81:eb:6f:28:6b:fb:3c:43:51:28:6b:
         c3:14:ed:5f:ff:c3:d7:a0:23:1c:34:34:b8:50:a2:b1:21:74:
         d4:85:7f:ad:3b:27:27:34:c6:8d:9d:e4:75:b7:cf:12:21:04:
         28:c3:93:f4:ca:19:30:b6:6a:c1:4b:2c:9d:39:82:9e:45:df:
         eb:d0:09:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org