Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/323830343a346161633a313030303a3a2f33382d3338203d3e20323637323536.roa
File:                     323830343a346161633a313030303a3a2f33382d3338203d3e20323637323536.roa (raw, json)
Hash identifier:          ZInpwQzmegUR3/74xinJYkiDf8mWq3j3R+6qHVd6SMw=
Subject key identifier:   30:64:56:0D:90:C7:AA:48:3F:50:35:8B:08:06:E9:4E:3B:43:28:80
Certificate issuer:       /CN=892E6D3C0D9395B16EE74F4027A98C0876C2E78D
Certificate serial:       6AD996F177D29C1FEDFC0D017013981C2B75BA86
Authority key identifier: 89:2E:6D:3C:0D:93:95:B1:6E:E7:4F:40:27:A9:8C:08:76:C2:E7:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/892E6D3C0D9395B16EE74F4027A98C0876C2E78D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/323830343a346161633a313030303a3a2f33382d3338203d3e20323637323536.roa
Signing time:             Fri 08 Mar 2024 20:03:20 +0000
ROA not before:           Fri 08 Mar 2024 19:58:20 +0000
ROA not after:            Fri 07 Mar 2025 20:03:20 +0000
asID:                     267256
IP address blocks:        2804:4aac:1000::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d9:96:f1:77:d2:9c:1f:ed:fc:0d:01:70:13:98:1c:2b:75:ba:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892E6D3C0D9395B16EE74F4027A98C0876C2E78D
        Validity
            Not Before: Mar  8 19:58:20 2024 GMT
            Not After : Mar  7 20:03:20 2025 GMT
        Subject: CN=3064560D90C7AA483F50358B0806E94E3B432880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:88:2d:6d:74:b6:9a:6d:35:c8:c0:12:26:8e:
                    08:84:4d:c5:71:ea:d0:9d:3c:c8:fb:31:3e:d7:14:
                    b2:49:66:c2:08:19:bd:5c:9b:72:eb:12:6a:b6:79:
                    5e:27:4d:1e:2f:92:09:00:be:6f:08:eb:97:07:25:
                    68:33:10:ba:c2:4f:4f:e4:77:21:27:ad:e5:40:5e:
                    18:99:0e:96:53:11:0e:15:7e:94:bb:ee:46:04:d6:
                    3c:6b:d9:41:b1:7b:98:2a:60:a3:c3:54:a7:3b:80:
                    6d:1d:48:f4:b1:9c:a4:0a:76:11:83:f1:83:00:93:
                    d9:95:45:09:8e:99:18:7b:1a:e5:a3:ce:1b:d5:6e:
                    7d:10:69:30:75:84:b9:ea:06:92:06:fc:6a:8b:41:
                    b0:be:ad:7a:a8:ce:01:a8:82:f3:67:f1:70:d0:5c:
                    95:4b:45:58:8a:0e:88:78:fc:8d:22:c1:a0:54:fd:
                    55:3c:de:f5:f0:2c:c5:65:ba:f7:65:33:c4:43:17:
                    71:d4:2f:1a:f0:40:3d:ab:92:36:05:77:3a:34:64:
                    f4:8a:72:a1:73:d9:cb:ce:3b:e9:df:fd:50:9b:c4:
                    09:29:fe:80:17:29:1d:76:94:bb:5f:f8:e2:e3:eb:
                    ca:9d:53:ff:eb:f0:53:02:56:7d:ea:bb:ae:7a:90:
                    12:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:64:56:0D:90:C7:AA:48:3F:50:35:8B:08:06:E9:4E:3B:43:28:80
            X509v3 Authority Key Identifier:
                keyid:89:2E:6D:3C:0D:93:95:B1:6E:E7:4F:40:27:A9:8C:08:76:C2:E7:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/892E6D3C0D9395B16EE74F4027A98C0876C2E78D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/892E6D3C0D9395B16EE74F4027A98C0876C2E78D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/323830343a346161633a313030303a3a2f33382d3338203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4aac:1000::/38

    Signature Algorithm: sha256WithRSAEncryption
         aa:db:f4:5b:08:63:bb:f1:01:e1:a4:c2:ab:54:a2:8f:93:1e:
         f7:99:ce:a9:4c:d1:cc:1a:f2:e7:7a:a0:01:a4:ca:92:12:20:
         e8:b2:ef:a7:d3:36:dc:3b:09:e1:c3:10:5a:3f:c1:5a:ce:dd:
         89:b7:e1:63:e5:46:dc:64:b5:db:da:8e:a4:4f:e1:64:d4:58:
         b0:b4:5e:12:c5:a7:87:74:c0:73:39:45:fa:70:15:42:db:1a:
         c7:6d:a3:f4:70:e1:dd:c8:84:72:a8:13:8a:8f:eb:03:82:0b:
         6c:64:23:e3:89:06:65:e1:cf:fa:67:c4:76:33:50:ab:4e:3a:
         d9:53:35:5f:dc:5b:84:7f:88:1b:26:af:58:44:c8:4a:dc:c8:
         99:dd:1e:28:c9:4f:7a:a4:cd:1f:85:5d:3d:b6:e4:88:ca:1f:
         99:67:53:57:c9:be:8e:c1:37:96:ed:86:b6:1a:df:24:8b:d2:
         45:dc:28:85:99:41:aa:08:db:34:0c:1b:80:30:2d:9a:2e:70:
         18:90:01:1a:a5:1b:4e:a3:6c:09:ef:6f:2a:50:3b:05:b4:a5:
         0d:80:a1:76:14:e5:b1:f6:11:7c:ef:3d:47:f8:9a:e7:f0:74:
         e4:e8:2a:f2:16:97:8b:dc:35:20:cc:16:41:86:fd:82:62:b0:
         7d:c7:d1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org