Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0/323830343a363634383a3a2f33322d3332203d3e20323639353436.roa
File:                     323830343a363634383a3a2f33322d3332203d3e20323639353436.roa (raw, json)
Hash identifier:          4SBz9PzAzuR4hWr/o5QD5lJUwbA1z8oYSZ7dSX+G56k=
Subject key identifier:   2A:C6:9D:2B:1E:D5:96:22:61:94:7D:73:78:3D:6F:25:42:17:3E:E3
Certificate issuer:       /CN=09F8FCD6DF30EE8E51B08BF20A61B5C916236B0C
Certificate serial:       54509CCE78410918289DB539855F4C33F4E3BEA4
Authority key identifier: 09:F8:FC:D6:DF:30:EE:8E:51:B0:8B:F2:0A:61:B5:C9:16:23:6B:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09F8FCD6DF30EE8E51B08BF20A61B5C916236B0C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0/323830343a363634383a3a2f33322d3332203d3e20323639353436.roa
Signing time:             Thu 07 Mar 2024 12:20:21 +0000
ROA not before:           Thu 07 Mar 2024 12:15:21 +0000
ROA not after:            Thu 06 Mar 2025 12:20:21 +0000
asID:                     269546
IP address blocks:        2804:6648::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:50:9c:ce:78:41:09:18:28:9d:b5:39:85:5f:4c:33:f4:e3:be:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09F8FCD6DF30EE8E51B08BF20A61B5C916236B0C
        Validity
            Not Before: Mar  7 12:15:21 2024 GMT
            Not After : Mar  6 12:20:21 2025 GMT
        Subject: CN=2AC69D2B1ED5962261947D73783D6F2542173EE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cb:e0:16:17:59:9f:6a:96:5f:f3:84:c3:4d:
                    be:6e:31:ae:0d:88:c5:1f:59:e2:c2:6a:d5:2d:f3:
                    bd:b1:4a:73:24:a9:71:09:29:95:b8:9a:f2:c3:60:
                    a6:91:4d:01:36:f2:2d:4a:7d:6a:94:53:1d:a8:c6:
                    65:79:96:bf:4e:3d:41:56:b0:b3:7d:26:7c:f3:fa:
                    e1:ac:92:24:3e:f2:f7:59:94:2e:db:6b:90:cd:b5:
                    69:4a:dc:ed:ed:2d:a8:7e:30:1e:f3:ef:8e:dc:f8:
                    69:4e:6b:96:7d:ad:25:9b:6d:9d:18:4d:92:4c:58:
                    f9:7e:00:94:15:15:34:23:1c:ff:15:9b:c3:7e:7e:
                    c8:7a:db:ab:18:12:ff:ce:bb:4e:46:74:57:64:da:
                    c7:c3:f1:0c:70:3b:a5:2b:32:5d:39:17:75:d6:22:
                    d6:3f:07:dc:98:47:f4:61:38:83:2f:87:ee:57:cb:
                    2c:b0:5c:5e:d8:1c:1b:0d:9f:fe:06:3a:82:de:a1:
                    9f:d0:14:bc:92:eb:18:97:cc:1d:bc:fa:1e:89:56:
                    79:05:eb:19:35:07:0d:0d:87:b8:65:66:a3:aa:93:
                    d6:c8:d2:b2:55:0d:0e:e1:b8:f9:7a:ce:ee:dc:b6:
                    90:5b:00:24:d9:c9:d7:4c:ad:b9:76:e5:9c:50:c8:
                    9a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C6:9D:2B:1E:D5:96:22:61:94:7D:73:78:3D:6F:25:42:17:3E:E3
            X509v3 Authority Key Identifier:
                keyid:09:F8:FC:D6:DF:30:EE:8E:51:B0:8B:F2:0A:61:B5:C9:16:23:6B:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0/09F8FCD6DF30EE8E51B08BF20A61B5C916236B0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09F8FCD6DF30EE8E51B08BF20A61B5C916236B0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0/323830343a363634383a3a2f33322d3332203d3e20323639353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6648::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:c0:20:96:0b:02:3c:8e:99:d0:d9:8d:48:a3:7a:64:b7:26:
         ad:af:4e:10:e2:d7:89:0a:0a:86:d2:28:07:53:9c:40:65:1c:
         74:14:b7:27:c4:13:f5:3e:cf:93:da:86:ff:34:5d:f7:25:b4:
         ed:0b:53:1b:38:60:51:5b:3e:2c:b1:6a:a6:8d:7e:35:82:e4:
         51:76:99:99:06:26:c9:84:ae:e0:25:b5:af:14:f4:9e:e9:47:
         b2:4e:91:be:0d:88:36:99:c1:e4:8a:d6:fc:26:dd:09:0f:2a:
         69:3d:7c:a2:1b:4a:48:b8:f0:22:ab:f0:84:78:73:49:b6:4a:
         96:9a:54:6e:50:03:6d:80:87:1c:bc:73:14:ba:5e:df:c9:0f:
         9d:81:19:41:5c:4b:88:9d:e1:a6:8e:9e:a0:5f:cc:23:e5:c7:
         8e:1d:6a:5a:50:69:39:93:16:f2:ae:4c:88:f3:0a:51:fb:29:
         d9:9b:5e:ae:bc:d1:b6:8e:03:20:f7:54:6c:75:55:32:4d:ac:
         09:21:cc:49:17:fb:79:83:4a:de:2d:4d:a0:ad:dc:ca:6b:13:
         38:87:50:93:58:48:b7:36:7e:0b:92:01:03:39:4d:8e:a9:0f:
         62:7a:65:aa:b3:22:4f:33:91:e9:c3:28:5b:27:7e:9c:13:eb:
         d3:a2:59:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:25 2024 by rpki-client on console-fra.rpki-client.org