Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a323a3a2f34382d3438203d3e20323635303130.roa
File:                     323830343a333136303a323a3a2f34382d3438203d3e20323635303130.roa (raw, json)
Hash identifier:          nQ6QiGlABW1F2REvI8CqE/ZXK4CNwz41NJt7GOSBMcw=
Subject key identifier:   2F:E7:31:42:6E:B5:9D:93:88:71:A1:9D:5D:00:70:7D:E9:44:E3:5C
Certificate issuer:       /CN=687F395543B5D15C9C42523E96B842CE61DD4B90
Certificate serial:       3645A3B4E829BFAF3B57271B92AB0CE8CCF75A60
Authority key identifier: 68:7F:39:55:43:B5:D1:5C:9C:42:52:3E:96:B8:42:CE:61:DD:4B:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687F395543B5D15C9C42523E96B842CE61DD4B90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a323a3a2f34382d3438203d3e20323635303130.roa
Signing time:             Thu 04 Apr 2024 06:03:44 +0000
ROA not before:           Thu 04 Apr 2024 05:58:44 +0000
ROA not after:            Thu 03 Apr 2025 06:03:44 +0000
asID:                     265010
IP address blocks:        2804:3160:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:45:a3:b4:e8:29:bf:af:3b:57:27:1b:92:ab:0c:e8:cc:f7:5a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687F395543B5D15C9C42523E96B842CE61DD4B90
        Validity
            Not Before: Apr  4 05:58:44 2024 GMT
            Not After : Apr  3 06:03:44 2025 GMT
        Subject: CN=2FE731426EB59D938871A19D5D00707DE944E35C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d7:42:0e:b1:45:c5:93:93:3b:19:56:c4:58:
                    9e:f7:bb:37:c9:98:a1:3a:f7:15:37:db:a5:99:05:
                    f1:51:6c:bf:ec:7a:ee:94:38:42:28:9b:13:ef:0c:
                    ab:f7:b2:35:2a:1a:aa:f3:71:93:1c:98:54:d0:30:
                    86:f2:0c:4d:7f:c8:7c:31:02:32:03:44:55:71:a1:
                    86:44:75:ae:4a:d3:7c:5c:88:0b:1b:b4:cb:6e:13:
                    39:b9:15:54:cf:18:7e:07:00:fb:df:36:2a:98:eb:
                    c6:0b:6e:36:75:6e:eb:24:d0:e7:6e:ce:7d:b7:73:
                    c4:64:8e:05:ba:95:0a:47:5c:f5:34:d4:c0:1a:3e:
                    d3:fa:d5:c6:76:cd:04:eb:8c:4f:72:19:f9:c4:00:
                    2a:ef:69:75:5a:39:26:c4:ed:22:80:6c:bb:c9:ca:
                    7f:d5:2d:e3:86:0a:00:0d:be:2d:19:1f:5c:03:82:
                    65:5c:b1:76:97:a8:0f:8b:69:c2:e2:88:e7:a2:01:
                    16:ff:14:a3:01:76:c2:0b:38:ff:59:33:5b:dd:a3:
                    17:8c:79:c2:a9:a7:95:92:d6:77:51:87:0a:85:3b:
                    f3:00:0b:c5:f8:c9:fc:02:bd:5f:16:3f:6a:ae:a4:
                    1d:62:37:ea:13:68:2b:ce:2f:ac:12:1a:f0:be:2c:
                    76:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E7:31:42:6E:B5:9D:93:88:71:A1:9D:5D:00:70:7D:E9:44:E3:5C
            X509v3 Authority Key Identifier:
                keyid:68:7F:39:55:43:B5:D1:5C:9C:42:52:3E:96:B8:42:CE:61:DD:4B:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/687F395543B5D15C9C42523E96B842CE61DD4B90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687F395543B5D15C9C42523E96B842CE61DD4B90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a323a3a2f34382d3438203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3160:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:11:4e:25:8b:88:05:1f:a7:ec:0d:38:d0:47:07:f7:2b:4c:
         e4:fb:27:d2:50:b0:65:c7:0a:86:df:1d:ff:fd:a6:95:7e:21:
         9a:6d:be:62:e8:9a:d4:fe:d0:0d:6a:64:46:46:84:5a:5e:32:
         28:7d:34:a1:e8:55:83:c7:be:5a:5c:5f:83:96:29:42:c8:c0:
         83:d7:57:8a:0d:5d:0a:d1:be:bf:76:f5:07:4c:1e:92:f9:f4:
         23:91:a6:cd:35:cb:68:cd:e8:3a:2f:23:69:85:13:09:05:80:
         9b:76:02:99:d1:40:73:fc:8c:62:df:36:4f:4a:e3:6f:bf:eb:
         a6:61:1d:2e:6b:83:fd:c0:bd:2b:a2:4f:60:7f:53:78:a8:ba:
         76:74:50:e3:6e:03:0c:b4:11:b4:28:5d:b6:4f:f4:d6:82:a9:
         5a:22:ab:2c:7f:ce:26:74:72:7a:50:75:8a:a1:04:13:44:5c:
         fe:9c:0b:e8:cc:72:7a:6a:ed:26:cb:0d:4d:69:94:d9:a2:49:
         16:d1:eb:ac:da:a8:a1:0a:40:4e:e2:21:21:bc:76:af:a5:bc:
         a0:e1:5a:2e:af:3b:90:d2:53:d4:4e:ae:02:a5:a4:6e:66:5c:
         52:71:32:19:8e:2e:0d:80:64:e7:2c:6d:0a:47:4e:23:90:66:
         93:90:6b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org