Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/323830343a363861383a3a2f33322d313238203d3e20323639373037.roa
File:                     323830343a363861383a3a2f33322d313238203d3e20323639373037.roa (raw, json)
Hash identifier:          YsrO6Aw0SrNNO2OHee3KVphxOEL/iDEfkw5ptpRoeHo=
Subject key identifier:   6C:95:4F:24:E8:56:07:DF:C7:B0:91:0F:9A:69:2F:B7:93:05:4C:E0
Certificate issuer:       /CN=892CB5478DA1F90883BE5E6CA0136EFFD21FAF48
Certificate serial:       69CA785E08B523549D7F278617B6FF3B2B801BAA
Authority key identifier: 89:2C:B5:47:8D:A1:F9:08:83:BE:5E:6C:A0:13:6E:FF:D2:1F:AF:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/892CB5478DA1F90883BE5E6CA0136EFFD21FAF48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/323830343a363861383a3a2f33322d313238203d3e20323639373037.roa
Signing time:             Fri 26 Jan 2024 11:31:42 +0000
ROA not before:           Fri 26 Jan 2024 11:26:42 +0000
ROA not after:            Fri 24 Jan 2025 11:31:42 +0000
asID:                     269707
IP address blocks:        2804:68a8::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ca:78:5e:08:b5:23:54:9d:7f:27:86:17:b6:ff:3b:2b:80:1b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892CB5478DA1F90883BE5E6CA0136EFFD21FAF48
        Validity
            Not Before: Jan 26 11:26:42 2024 GMT
            Not After : Jan 24 11:31:42 2025 GMT
        Subject: CN=6C954F24E85607DFC7B0910F9A692FB793054CE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5b:9d:ee:c4:72:3a:23:6e:8f:d9:84:53:7a:
                    2b:29:f3:53:10:e7:10:9b:f8:53:50:7a:74:b2:5c:
                    fe:42:45:4c:a6:1b:f2:5c:cb:f0:c3:df:3b:d1:72:
                    c4:1e:f6:d2:8c:d8:c6:e9:af:f7:9a:09:74:ba:6c:
                    c6:96:20:a2:17:17:09:d4:f0:5c:43:0a:9f:15:98:
                    37:e1:4b:43:bf:d5:fa:33:c2:76:f4:9f:7e:95:96:
                    3b:42:fd:48:9c:08:73:27:35:d5:a4:dc:14:fe:2d:
                    dc:15:0b:0d:eb:94:7a:e8:9f:1c:76:f5:c8:86:b1:
                    c3:5a:ac:a0:fa:db:42:82:37:ed:1f:70:66:cc:33:
                    e5:3c:4a:66:2d:a8:d9:0a:39:8c:7b:2b:17:fa:43:
                    6c:4d:9e:bb:3a:18:3e:05:65:96:45:7a:86:b4:82:
                    30:17:ba:d5:81:f8:21:28:77:f2:64:f4:dd:26:37:
                    35:62:71:fc:81:03:d6:5a:16:28:1e:cb:0e:53:e2:
                    6b:b8:90:70:ef:94:48:f5:87:e4:97:bb:92:0f:4e:
                    e0:2d:79:86:2a:d1:f3:c1:21:65:33:c8:69:35:55:
                    79:6b:df:26:1a:75:dd:27:28:41:ea:77:9f:6b:45:
                    28:c9:bd:60:3c:50:fb:b4:85:df:29:6a:97:74:08:
                    6e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:95:4F:24:E8:56:07:DF:C7:B0:91:0F:9A:69:2F:B7:93:05:4C:E0
            X509v3 Authority Key Identifier:
                keyid:89:2C:B5:47:8D:A1:F9:08:83:BE:5E:6C:A0:13:6E:FF:D2:1F:AF:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/892CB5478DA1F90883BE5E6CA0136EFFD21FAF48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/892CB5478DA1F90883BE5E6CA0136EFFD21FAF48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/323830343a363861383a3a2f33322d313238203d3e20323639373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:68a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:5a:7e:7c:09:f5:c6:a7:11:91:ba:b3:3d:16:35:5d:ee:7a:
         29:35:3b:9c:ce:7b:cc:bc:1c:fd:1b:88:ba:29:40:cd:68:65:
         02:ab:d6:e8:a2:60:40:d6:5f:45:f9:94:38:da:47:16:a5:f9:
         38:a0:69:d4:05:c9:99:2b:61:e7:6e:ee:bb:4f:be:6c:d9:20:
         ea:99:52:43:09:4c:74:1f:28:23:ea:96:27:a9:94:1d:e0:2f:
         33:51:1c:c3:32:7a:3d:e6:80:9e:ee:99:2b:92:29:7e:08:a8:
         66:8a:be:50:61:84:11:88:8c:5b:fd:aa:64:39:68:8e:62:cc:
         50:89:91:ff:55:3a:6f:ee:a2:c9:e5:f1:5d:cf:c2:ce:14:94:
         6f:d4:c8:1b:24:51:b1:de:79:c6:93:66:86:4f:dd:f1:bf:86:
         83:ab:c3:6a:fe:fe:d6:8c:cc:4c:ee:ec:d2:f2:93:07:04:2f:
         a1:4e:f7:37:46:ff:2b:b3:7a:f5:8a:8a:ab:e7:7a:18:b2:12:
         29:be:a7:e2:48:d7:ec:19:94:bc:93:25:e8:24:49:5e:3b:29:
         15:5c:ba:34:7b:d0:84:7d:55:10:4b:ba:a4:bb:e6:79:86:97:
         fc:de:7d:00:5c:6d:09:e6:b7:b6:23:7f:c1:6d:c8:dd:25:eb:
         3b:4d:3d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org