Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a333030303a3a2f33362d3336203d3e20323635303130.roa
File:                     323830343a333136303a333030303a3a2f33362d3336203d3e20323635303130.roa (raw, json)
Hash identifier:          CCxLpUMEUSae4ZYZGMdwHyg/IZdrSHw7O1v0RnFFODY=
Subject key identifier:   1F:FC:81:A2:1B:91:75:8C:8A:46:89:3E:BC:3E:CB:00:6E:BD:75:4A
Certificate issuer:       /CN=687F395543B5D15C9C42523E96B842CE61DD4B90
Certificate serial:       1E34ED1D4ADF79A687618E9AC3ECFB59C3B8EE28
Authority key identifier: 68:7F:39:55:43:B5:D1:5C:9C:42:52:3E:96:B8:42:CE:61:DD:4B:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687F395543B5D15C9C42523E96B842CE61DD4B90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a333030303a3a2f33362d3336203d3e20323635303130.roa
Signing time:             Thu 04 Apr 2024 06:03:45 +0000
ROA not before:           Thu 04 Apr 2024 05:58:45 +0000
ROA not after:            Thu 03 Apr 2025 06:03:45 +0000
asID:                     265010
IP address blocks:        2804:3160:3000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:34:ed:1d:4a:df:79:a6:87:61:8e:9a:c3:ec:fb:59:c3:b8:ee:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687F395543B5D15C9C42523E96B842CE61DD4B90
        Validity
            Not Before: Apr  4 05:58:45 2024 GMT
            Not After : Apr  3 06:03:45 2025 GMT
        Subject: CN=1FFC81A21B91758C8A46893EBC3ECB006EBD754A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:68:37:36:95:b4:6f:8f:d2:aa:74:65:ca:a3:
                    be:6c:28:67:a4:18:0f:b2:5b:63:78:01:43:75:00:
                    ac:cc:02:91:6b:f0:84:da:6f:9a:a9:b9:95:38:51:
                    96:5c:00:7d:05:80:79:9d:36:17:a6:62:bc:eb:0d:
                    32:71:97:e2:41:ca:ea:73:9a:a9:cb:36:32:e2:3b:
                    0b:82:3c:09:ae:d8:93:5f:86:9d:f9:29:e5:07:ba:
                    4e:8e:03:94:a4:88:54:fa:83:b7:56:9b:37:1f:6c:
                    f5:3f:31:96:1d:49:be:8e:b4:7f:e7:14:cb:bf:d8:
                    c6:0f:47:0f:64:40:4a:c4:e6:7d:24:bf:86:4e:8b:
                    93:91:5d:61:8b:79:0b:08:08:a0:67:7e:d9:9c:6e:
                    b0:5d:71:8d:5e:bd:d7:ac:aa:e5:85:43:8e:a9:ed:
                    ed:9f:a7:29:43:89:3a:73:12:50:4d:d9:a0:f7:c9:
                    e6:42:63:b5:f1:d4:ef:05:87:3f:7f:41:78:d6:ce:
                    18:59:97:2a:d7:74:77:77:dc:89:8e:36:cd:19:c9:
                    c8:5d:dd:6f:e7:a9:6d:6e:2d:c9:ee:63:d5:30:ea:
                    99:44:31:83:8b:b1:82:bf:ed:30:65:14:a8:23:86:
                    29:f4:f1:7e:58:33:3b:58:01:14:d7:ba:3b:a4:db:
                    54:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:FC:81:A2:1B:91:75:8C:8A:46:89:3E:BC:3E:CB:00:6E:BD:75:4A
            X509v3 Authority Key Identifier:
                keyid:68:7F:39:55:43:B5:D1:5C:9C:42:52:3E:96:B8:42:CE:61:DD:4B:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/687F395543B5D15C9C42523E96B842CE61DD4B90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687F395543B5D15C9C42523E96B842CE61DD4B90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a333030303a3a2f33362d3336203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3160:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1f:1a:a0:cb:6d:76:57:2c:5c:d4:c7:3b:85:23:cd:a8:6d:2a:
         ac:3f:a7:3e:f9:9f:bb:dd:82:40:45:12:48:71:8d:0a:7b:0a:
         5e:de:7e:37:97:2f:94:b7:c0:62:ad:61:e7:96:cc:46:31:a7:
         2d:b8:72:01:9f:a1:3f:e9:25:80:78:0c:8c:7d:f3:a2:1e:5a:
         e1:a8:80:6b:39:db:5e:33:22:c6:db:20:ff:a9:1e:a5:43:42:
         fd:02:e3:6b:69:f3:a2:48:a2:49:97:31:19:6b:1f:51:73:26:
         4c:a3:6f:b5:02:c3:a4:cf:6c:f2:d8:63:80:3d:fa:82:71:99:
         db:ab:8b:9a:ef:dd:fa:fd:72:54:08:1f:15:6e:4d:78:97:85:
         d8:27:02:19:ab:3a:22:24:2b:04:23:6f:05:75:d6:49:9a:8b:
         79:8f:74:cb:df:d9:96:b1:f1:e7:dd:85:57:b4:bd:13:51:eb:
         fa:a7:76:72:01:e3:48:d6:ff:46:03:11:e1:84:5a:83:f5:d7:
         2d:f2:1f:72:52:b6:44:72:83:8e:80:6b:a1:60:1a:fd:e8:8b:
         e1:8f:3e:f6:f3:82:43:89:f2:c4:5a:13:b3:23:8a:b1:8f:06:
         84:89:9d:0f:e2:0e:c1:a7:38:9d:c5:97:f0:ac:82:f8:f7:ed:
         94:91:fe:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org