Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a373030313a3a2f34382d3438203d3e20323635303130.roa
File:                     323830343a333136303a373030313a3a2f34382d3438203d3e20323635303130.roa (raw, json)
Hash identifier:          tbKL5fokwpcAZQIcsS18KPzeWnI+2vKDaQXiVrfcn5g=
Subject key identifier:   0A:8A:7C:C5:B1:82:89:49:F9:34:95:35:49:16:FC:35:8E:E4:E4:76
Certificate issuer:       /CN=687F395543B5D15C9C42523E96B842CE61DD4B90
Certificate serial:       28A3B8E5DC0C2D8933886E4CC4FE1F2C05411750
Authority key identifier: 68:7F:39:55:43:B5:D1:5C:9C:42:52:3E:96:B8:42:CE:61:DD:4B:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687F395543B5D15C9C42523E96B842CE61DD4B90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a373030313a3a2f34382d3438203d3e20323635303130.roa
Signing time:             Thu 04 Apr 2024 06:03:46 +0000
ROA not before:           Thu 04 Apr 2024 05:58:46 +0000
ROA not after:            Thu 03 Apr 2025 06:03:46 +0000
asID:                     265010
IP address blocks:        2804:3160:7001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:a3:b8:e5:dc:0c:2d:89:33:88:6e:4c:c4:fe:1f:2c:05:41:17:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687F395543B5D15C9C42523E96B842CE61DD4B90
        Validity
            Not Before: Apr  4 05:58:46 2024 GMT
            Not After : Apr  3 06:03:46 2025 GMT
        Subject: CN=0A8A7CC5B1828949F93495354916FC358EE4E476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:73:20:ea:61:ad:f2:bb:8c:eb:55:c1:96:ee:
                    f6:53:b6:40:40:68:b6:4c:ad:43:cb:12:6f:34:73:
                    67:d8:b8:47:0f:47:41:3a:58:86:6d:93:6b:6c:30:
                    d6:b5:43:21:12:6f:e4:68:5b:0e:12:49:4a:39:1b:
                    79:74:24:80:21:99:03:41:f8:31:82:cf:ca:87:43:
                    98:2d:c4:bb:fe:d3:06:bf:35:59:1a:a6:24:57:69:
                    f3:a8:ad:9a:12:a3:70:b7:35:ac:c6:01:f9:90:c5:
                    3b:53:8f:fd:20:d3:fd:38:43:cf:d0:5b:26:30:7c:
                    3d:b0:62:63:28:30:d1:fc:01:1b:85:e2:90:08:d5:
                    eb:fb:c3:ab:b5:1f:95:f9:6e:5b:63:89:93:e9:18:
                    b6:23:24:25:12:c1:aa:ac:8c:ab:29:52:2a:a7:34:
                    75:2b:79:0d:56:bf:1d:d9:9b:66:8e:3e:23:34:1c:
                    05:d7:93:08:6b:91:2e:47:8b:62:e7:fa:fe:d5:81:
                    cd:68:ad:66:50:fb:d9:16:3a:ab:c9:d2:50:b5:64:
                    fe:2b:6c:fe:69:a4:3f:08:5d:d1:d6:0a:43:fd:6e:
                    3c:09:58:ff:46:4a:a2:69:0c:33:42:fa:72:03:10:
                    83:97:4f:fd:88:74:ff:bb:e8:23:00:61:77:8c:44:
                    74:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:8A:7C:C5:B1:82:89:49:F9:34:95:35:49:16:FC:35:8E:E4:E4:76
            X509v3 Authority Key Identifier:
                keyid:68:7F:39:55:43:B5:D1:5C:9C:42:52:3E:96:B8:42:CE:61:DD:4B:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/687F395543B5D15C9C42523E96B842CE61DD4B90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687F395543B5D15C9C42523E96B842CE61DD4B90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a373030313a3a2f34382d3438203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3160:7001::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:eb:c6:e9:28:0c:73:bf:3e:bb:21:17:2c:62:80:49:72:6e:
         7c:c6:e2:d1:8c:be:c3:90:43:a5:57:57:db:fe:9d:55:3b:74:
         28:3c:48:87:b5:87:a6:6b:74:c3:ce:62:7f:c1:ab:4c:ad:3f:
         7f:ae:11:38:f9:ef:4d:b3:4e:28:94:22:b3:e4:46:83:aa:1a:
         a8:a0:08:e9:70:f0:4f:ad:33:0b:24:b0:14:1d:34:4e:4f:90:
         6a:69:99:16:59:33:b5:34:cb:f6:8b:23:a1:47:b9:6c:18:c0:
         0c:50:65:b5:fb:9f:ae:ac:38:6e:23:bf:32:5f:5d:8e:a1:79:
         a6:4a:85:ef:46:a3:d7:f1:91:4c:4f:79:39:14:20:46:f1:95:
         fd:da:20:2e:1f:a6:c0:15:d2:0c:54:14:e6:c9:11:ed:18:91:
         3b:f8:e1:7c:b4:89:75:d0:d5:d3:b9:0f:a2:63:48:63:19:be:
         91:32:c2:61:5f:21:02:50:3c:be:25:01:7d:8e:b6:72:fd:f9:
         94:a2:69:aa:b9:1d:9c:b7:b0:69:a3:66:22:62:5b:16:d8:12:
         e9:3b:57:79:42:e4:f5:09:50:5a:e0:97:8a:f6:48:ed:1b:b0:
         21:bb:1e:d1:31:86:cf:20:73:ea:67:a8:38:89:a7:2e:26:90:
         5e:a6:07:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org