Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a363030303a3a2f33362d3336203d3e20323635303130.roa
File:                     323830343a333136303a363030303a3a2f33362d3336203d3e20323635303130.roa (raw, json)
Hash identifier:          CsFB5roNJO0qviNbtpO3JCsGk1d6gkinAO5lRBTdvGA=
Subject key identifier:   11:86:E7:1A:51:5C:8A:BD:5F:B3:87:56:06:0E:B4:58:EC:57:78:B0
Certificate issuer:       /CN=687F395543B5D15C9C42523E96B842CE61DD4B90
Certificate serial:       0A39112D76B4022AAD8105DF4AF8A2463809334C
Authority key identifier: 68:7F:39:55:43:B5:D1:5C:9C:42:52:3E:96:B8:42:CE:61:DD:4B:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687F395543B5D15C9C42523E96B842CE61DD4B90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a363030303a3a2f33362d3336203d3e20323635303130.roa
Signing time:             Thu 04 Apr 2024 06:03:47 +0000
ROA not before:           Thu 04 Apr 2024 05:58:47 +0000
ROA not after:            Thu 03 Apr 2025 06:03:47 +0000
asID:                     265010
IP address blocks:        2804:3160:6000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:39:11:2d:76:b4:02:2a:ad:81:05:df:4a:f8:a2:46:38:09:33:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687F395543B5D15C9C42523E96B842CE61DD4B90
        Validity
            Not Before: Apr  4 05:58:47 2024 GMT
            Not After : Apr  3 06:03:47 2025 GMT
        Subject: CN=1186E71A515C8ABD5FB38756060EB458EC5778B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cb:4c:e4:68:e5:b8:53:93:04:71:bd:a3:3b:
                    02:31:d4:50:73:73:a9:0e:11:5d:0c:c1:67:1f:b8:
                    b1:8f:4a:9e:66:db:19:8d:11:28:24:4a:89:ed:1e:
                    a9:cc:c4:c0:8a:2f:d1:a8:bf:a5:b5:d4:db:76:6b:
                    f8:7a:cb:d0:bc:35:2a:c8:79:66:9a:54:97:c3:ee:
                    74:57:5f:6d:59:20:00:d7:6f:e3:a5:9c:0a:85:ef:
                    e4:bd:ba:c6:80:b9:c4:36:ab:e5:cb:3d:9b:b5:6b:
                    ae:3b:2b:a4:cd:88:b9:f6:f8:d8:86:0d:23:a3:06:
                    46:7e:b4:19:7a:af:15:30:ca:2f:06:23:01:fb:f0:
                    6b:33:9f:8e:08:3c:a7:c8:41:35:a2:30:a8:8b:ba:
                    42:4f:c4:77:2f:76:bd:04:59:98:47:d8:70:ed:e2:
                    a3:69:05:d0:c6:b7:bf:e7:16:fb:85:e5:fd:20:c4:
                    db:66:32:44:47:ad:d1:52:40:55:66:5c:d2:e7:41:
                    cf:bb:a2:66:56:5a:13:da:53:c2:ee:cf:50:62:b9:
                    28:55:9e:90:30:30:6f:40:6e:93:37:ef:44:69:9c:
                    d3:16:b2:4c:3d:c5:6c:cc:1c:e4:5d:25:b3:e5:0d:
                    81:c4:f5:e9:0e:c8:3c:ee:a3:1c:e8:96:75:97:94:
                    f1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:86:E7:1A:51:5C:8A:BD:5F:B3:87:56:06:0E:B4:58:EC:57:78:B0
            X509v3 Authority Key Identifier:
                keyid:68:7F:39:55:43:B5:D1:5C:9C:42:52:3E:96:B8:42:CE:61:DD:4B:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/687F395543B5D15C9C42523E96B842CE61DD4B90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687F395543B5D15C9C42523E96B842CE61DD4B90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a363030303a3a2f33362d3336203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3160:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         56:07:4a:3b:5a:f2:8f:72:b6:ca:05:70:45:75:84:1a:2d:49:
         86:eb:90:25:a2:f9:cd:a2:c1:b2:04:a3:01:74:8e:d0:8e:29:
         da:97:cf:fb:83:aa:be:7a:4b:15:5e:78:d8:c5:e3:0b:83:db:
         25:4c:6d:46:5d:c5:f5:fb:68:b5:44:72:6f:c9:3e:4d:fb:be:
         cc:81:f9:4c:86:57:6b:14:85:58:9b:11:25:93:c4:0f:92:b2:
         b9:ef:ef:4a:a8:2c:6b:97:3c:2a:5e:20:a8:c3:c5:06:ed:58:
         6d:a9:b2:12:99:9d:2d:40:ad:71:f5:b8:4a:27:a0:6c:41:c9:
         a7:36:72:35:04:91:77:b8:d9:9e:13:93:b3:9e:95:d3:5d:5c:
         d0:f8:a1:7d:00:9e:0a:c8:01:a6:0c:c8:7c:ba:64:af:da:93:
         f7:29:b2:34:6b:a6:5c:57:0c:96:87:ac:a0:74:4a:c8:7d:64:
         4f:9b:9b:01:ad:d2:82:cf:f3:42:69:d9:42:57:f7:fd:7e:97:
         89:08:c8:85:c5:e2:40:f6:42:23:e3:c6:c1:49:8b:99:73:ab:
         23:5a:16:63:67:f4:28:43:f4:ff:10:8e:84:a2:5e:60:7d:3d:
         d6:44:ae:47:1c:92:52:38:18:30:22:73:75:c6:74:af:be:8d:
         3e:e1:81:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org