Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/323830343a373935303a3a2f33322d3438203d3e20323731323938.roa
File:                     323830343a373935303a3a2f33322d3438203d3e20323731323938.roa (raw, json)
Hash identifier:          5f3txehjYZlue2cIi0+y1wQ9Zz3+1gPf0gtooOUNoyk=
Subject key identifier:   93:74:47:BD:79:69:83:EB:71:6C:A8:41:0A:56:80:A5:50:16:16:B6
Certificate issuer:       /CN=8AB43450812E7308AED6C09E136F489C2EAC6E66
Certificate serial:       61B42C341A42B572000AB8052D16273D252A900E
Authority key identifier: 8A:B4:34:50:81:2E:73:08:AE:D6:C0:9E:13:6F:48:9C:2E:AC:6E:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AB43450812E7308AED6C09E136F489C2EAC6E66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/323830343a373935303a3a2f33322d3438203d3e20323731323938.roa
Signing time:             Mon 23 Oct 2023 00:01:26 +0000
ROA not before:           Sun 22 Oct 2023 23:56:26 +0000
ROA not after:            Mon 21 Oct 2024 00:01:26 +0000
asID:                     271298
IP address blocks:        2804:7950::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b4:2c:34:1a:42:b5:72:00:0a:b8:05:2d:16:27:3d:25:2a:90:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AB43450812E7308AED6C09E136F489C2EAC6E66
        Validity
            Not Before: Oct 22 23:56:26 2023 GMT
            Not After : Oct 21 00:01:26 2024 GMT
        Subject: CN=937447BD796983EB716CA8410A5680A5501616B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ff:d6:c1:47:c7:cd:d2:d8:26:07:39:e7:6d:
                    e0:9e:81:73:17:df:fc:5d:29:88:58:c0:dd:16:ee:
                    89:c7:08:f4:90:4d:90:dd:97:1b:4c:51:1d:6f:11:
                    19:86:80:38:be:ea:2f:10:50:f7:59:3d:06:f8:68:
                    e1:ef:c0:a6:ea:11:ae:bd:c8:47:9f:1f:1b:32:60:
                    d6:6a:c7:4e:06:62:13:6f:83:3f:c8:12:05:d8:7e:
                    8d:c2:22:2f:13:af:fb:fb:53:f5:82:4b:00:0a:e6:
                    80:b5:14:06:8e:12:e9:3f:0b:77:72:4b:e0:d0:f5:
                    34:11:3f:80:d6:fd:64:e9:85:fd:96:2f:ea:74:32:
                    44:a3:4b:ec:ca:32:05:45:29:75:dd:d5:9c:a5:48:
                    25:07:a9:15:9a:ca:a9:c8:d7:27:85:9e:14:2e:1b:
                    01:0d:f6:b1:9e:4a:e8:d3:17:53:05:69:99:43:9b:
                    f9:a8:6b:aa:ec:aa:42:8f:da:44:4c:6f:bf:1d:5f:
                    1d:16:78:b6:40:17:52:5d:6b:f1:b2:0d:7c:5c:db:
                    a0:ae:7c:6b:9b:d9:b1:f0:71:00:b8:54:3a:65:3a:
                    ab:ad:3f:68:fb:1c:43:c9:bf:81:96:d1:a0:09:2f:
                    ed:64:54:3a:ee:2e:60:86:49:4c:07:76:46:79:5f:
                    e6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:74:47:BD:79:69:83:EB:71:6C:A8:41:0A:56:80:A5:50:16:16:B6
            X509v3 Authority Key Identifier:
                keyid:8A:B4:34:50:81:2E:73:08:AE:D6:C0:9E:13:6F:48:9C:2E:AC:6E:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/8AB43450812E7308AED6C09E136F489C2EAC6E66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AB43450812E7308AED6C09E136F489C2EAC6E66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/323830343a373935303a3a2f33322d3438203d3e20323731323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7950::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:7d:3a:35:c0:1a:af:eb:ec:78:5c:1d:df:e4:5a:da:f9:27:
         4a:2c:3f:a4:05:65:a3:85:8a:b6:17:98:59:ef:35:8f:5d:08:
         48:90:f2:22:dc:96:a7:ff:19:9e:bb:71:db:0f:3c:fa:02:c0:
         16:b0:f7:36:b6:f1:5e:47:b8:35:18:17:5f:e2:57:ae:1f:57:
         18:57:5d:68:06:cf:cc:a8:c6:f2:de:e1:09:79:26:7e:fb:e0:
         70:fb:55:38:99:6e:d5:8c:a5:b6:f0:7d:41:64:33:56:3d:89:
         e8:40:0d:46:a6:5f:c7:23:2f:ef:0f:78:95:aa:b0:fb:a8:8c:
         3a:35:e7:ac:cd:1b:5c:48:27:31:6c:ac:44:b0:3e:09:41:d2:
         21:97:74:69:c6:df:99:7f:55:1e:b8:12:c9:57:da:75:8b:0b:
         9b:52:a5:cd:8a:27:db:2d:19:10:7e:e4:63:77:dd:b3:6a:ca:
         5d:b7:b4:fd:2f:97:b0:26:45:0d:56:1a:fe:2e:b9:93:17:22:
         5b:1e:63:c2:b0:26:76:98:8b:4b:d8:93:7d:df:74:08:d5:6b:
         6e:22:63:8c:9b:7b:bb:d7:79:96:68:5d:1b:6e:ba:ef:bf:2d:
         1e:fd:c6:39:f6:df:bd:16:03:a7:6d:24:db:5d:0a:cf:69:bb:
         4e:8d:1a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org