Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/323830343a316165303a333030303a3a2f34322d3432203d3e203631363936.roa
File:                     323830343a316165303a333030303a3a2f34322d3432203d3e203631363936.roa (raw, json)
Hash identifier:          W/xIkEj/DROG6no8jjMSiY4HlNtGnb+AXmX199XhyCY=
Subject key identifier:   60:81:AF:F3:E6:0E:5E:94:C2:C6:B5:CB:5F:F0:CB:60:51:F1:37:16
Certificate issuer:       /CN=C3C02E9BA820D2E706528BC873C80443D02CE667
Certificate serial:       4610235B3F9CF8AFAEB6C2197C298C7B23BB65FA
Authority key identifier: C3:C0:2E:9B:A8:20:D2:E7:06:52:8B:C8:73:C8:04:43:D0:2C:E6:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3C02E9BA820D2E706528BC873C80443D02CE667.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/323830343a316165303a333030303a3a2f34322d3432203d3e203631363936.roa
Signing time:             Mon 16 Oct 2023 12:10:14 +0000
ROA not before:           Mon 16 Oct 2023 12:05:14 +0000
ROA not after:            Mon 14 Oct 2024 12:10:14 +0000
asID:                     61696
IP address blocks:        2804:1ae0:3000::/42 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:10:23:5b:3f:9c:f8:af:ae:b6:c2:19:7c:29:8c:7b:23:bb:65:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3C02E9BA820D2E706528BC873C80443D02CE667
        Validity
            Not Before: Oct 16 12:05:14 2023 GMT
            Not After : Oct 14 12:10:14 2024 GMT
        Subject: CN=6081AFF3E60E5E94C2C6B5CB5FF0CB6051F13716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:99:a9:89:8b:f2:f8:f2:c2:51:aa:50:03:9a:
                    fe:2a:f3:07:1e:0a:5e:41:d3:46:f2:6b:4a:0c:af:
                    fd:c4:8b:34:b9:d6:1b:98:24:d6:59:1a:25:ca:a4:
                    b7:79:a4:21:e3:4d:00:57:90:cb:20:a6:b4:25:5b:
                    d2:b2:72:e9:05:fb:68:42:2d:b5:35:be:ed:ac:f2:
                    3b:fb:21:ec:89:e7:7f:69:d5:ba:27:ea:0a:a1:25:
                    d2:55:77:4f:9e:f4:b8:dd:80:6f:02:f1:b1:9b:e1:
                    8f:ad:d7:97:2b:47:77:0d:cc:0e:c4:a4:11:50:82:
                    c5:46:14:a7:d7:a2:86:61:98:a6:89:93:64:59:a1:
                    09:a4:aa:5b:38:ad:dd:4a:85:a0:bf:ac:1d:16:19:
                    19:3d:78:cd:5f:79:6d:ff:a7:c5:29:9a:be:05:be:
                    ff:14:0a:96:6f:ad:5e:f3:1f:7a:a3:8e:89:34:ed:
                    c9:e1:77:5c:96:cf:19:a5:75:74:52:5e:88:93:3c:
                    80:8b:e7:e0:83:eb:11:7c:f7:39:29:77:67:c0:5d:
                    65:4e:ee:1d:f5:be:c8:1b:ac:05:9a:2e:eb:d4:bb:
                    1a:14:1b:7d:b3:00:84:9d:53:c7:ff:2a:e9:6a:22:
                    6a:25:7b:82:71:66:63:12:dd:c7:17:9d:4d:bb:f2:
                    80:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:81:AF:F3:E6:0E:5E:94:C2:C6:B5:CB:5F:F0:CB:60:51:F1:37:16
            X509v3 Authority Key Identifier:
                keyid:C3:C0:2E:9B:A8:20:D2:E7:06:52:8B:C8:73:C8:04:43:D0:2C:E6:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/C3C02E9BA820D2E706528BC873C80443D02CE667.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3C02E9BA820D2E706528BC873C80443D02CE667.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/323830343a316165303a333030303a3a2f34322d3432203d3e203631363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ae0:3000::/42

    Signature Algorithm: sha256WithRSAEncryption
         63:ac:c1:2a:75:c3:30:ad:7f:b2:d2:dd:e7:cc:44:6f:f0:ac:
         45:1e:ed:1a:30:a5:a6:13:15:55:91:81:22:1e:97:c0:60:56:
         ac:61:c9:17:76:e2:0b:95:13:1a:c4:c0:ab:c3:d9:78:84:49:
         1d:ae:a2:65:62:96:3b:80:c7:c3:8e:fa:5c:7d:d7:9b:d5:d5:
         98:d8:e2:57:c8:64:ed:bc:12:5f:65:76:00:86:47:35:76:66:
         bb:81:36:88:19:89:75:d7:f7:05:96:d3:75:c8:0a:ff:39:f2:
         41:51:3a:10:e5:36:eb:d8:37:89:99:0f:80:a1:c7:9a:3a:06:
         8c:16:37:0e:c7:16:d2:d4:19:98:aa:d7:62:cf:f8:d7:07:f2:
         d3:59:7d:98:20:8e:44:58:7e:ad:be:56:78:e0:99:e3:1a:70:
         d9:c0:19:5e:d6:69:cf:f7:88:91:e5:21:6e:3f:92:9c:80:a3:
         4c:f7:9f:18:f4:9e:20:56:7b:4a:1c:ae:38:1f:09:4c:7b:0d:
         6e:29:d4:18:27:81:04:12:d2:e9:d4:1e:a9:45:38:17:5d:42:
         40:35:61:01:3f:3d:8c:54:e1:7c:bc:d4:bd:c2:ab:62:77:74:
         8e:0e:1b:f5:0a:74:02:e7:36:75:50:5e:f5:cf:e7:7e:e2:ab:
         f1:8c:82:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org