Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a3a2f34382d3438203d3e20323635303130.roa
File:                     323830343a333136303a3a2f34382d3438203d3e20323635303130.roa (raw, json)
Hash identifier:          HPVF3rn43j7ohn6jo9m8CHyJS/Lhdghsd5ucFNEwXJ4=
Subject key identifier:   D1:1A:E7:11:8B:50:59:36:17:F6:96:AD:7E:F8:34:17:72:F2:13:E4
Certificate issuer:       /CN=687F395543B5D15C9C42523E96B842CE61DD4B90
Certificate serial:       0940417EF6EE1CD811930D0EDB171BBDAC2E4162
Authority key identifier: 68:7F:39:55:43:B5:D1:5C:9C:42:52:3E:96:B8:42:CE:61:DD:4B:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687F395543B5D15C9C42523E96B842CE61DD4B90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a3a2f34382d3438203d3e20323635303130.roa
Signing time:             Thu 04 Apr 2024 06:03:44 +0000
ROA not before:           Thu 04 Apr 2024 05:58:44 +0000
ROA not after:            Thu 03 Apr 2025 06:03:44 +0000
asID:                     265010
IP address blocks:        2804:3160::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:40:41:7e:f6:ee:1c:d8:11:93:0d:0e:db:17:1b:bd:ac:2e:41:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687F395543B5D15C9C42523E96B842CE61DD4B90
        Validity
            Not Before: Apr  4 05:58:44 2024 GMT
            Not After : Apr  3 06:03:44 2025 GMT
        Subject: CN=D11AE7118B50593617F696AD7EF8341772F213E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5f:bc:35:36:61:fe:f4:2c:b5:df:d6:c5:e7:
                    7b:43:83:30:0f:d2:5d:05:ec:84:97:5a:ab:2a:62:
                    4c:bf:8c:07:03:02:a4:8a:09:8e:5d:15:6d:3d:1c:
                    4a:1f:32:03:08:77:58:30:fd:5c:a5:5d:ba:22:cd:
                    34:68:36:90:eb:e5:32:75:3b:d7:6d:b8:1c:f0:6a:
                    3f:9f:70:59:8f:e5:f6:eb:c5:39:13:98:2f:e5:cf:
                    b3:4f:f6:7a:c2:07:fb:94:bc:a5:6e:55:e9:e0:de:
                    61:c0:dc:ef:71:8f:38:8b:6b:56:ad:2b:c3:34:06:
                    e1:40:ce:ba:27:5e:07:f6:e8:a3:08:5e:13:f2:a9:
                    b4:f9:f1:dd:0c:28:69:c5:33:a5:bc:e5:7a:db:0a:
                    78:88:4e:de:c0:ab:1f:1f:2a:18:9e:fa:25:4d:6b:
                    9d:e1:89:28:b6:58:bf:63:0d:9b:a2:74:bc:4a:c7:
                    8e:c0:37:92:ab:7c:68:b3:8d:cc:06:03:40:24:f7:
                    05:e9:df:8e:83:79:a5:d2:60:0a:c0:b9:5f:41:c1:
                    dd:77:7e:4f:45:22:54:0c:01:fa:1c:1d:9e:2d:ae:
                    de:e9:a2:d7:0e:bd:85:38:fc:59:fe:2b:81:af:f0:
                    94:98:ec:b0:f1:0a:c5:1c:a1:59:74:e6:f0:f4:3f:
                    93:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:1A:E7:11:8B:50:59:36:17:F6:96:AD:7E:F8:34:17:72:F2:13:E4
            X509v3 Authority Key Identifier:
                keyid:68:7F:39:55:43:B5:D1:5C:9C:42:52:3E:96:B8:42:CE:61:DD:4B:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/687F395543B5D15C9C42523E96B842CE61DD4B90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687F395543B5D15C9C42523E96B842CE61DD4B90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a3a2f34382d3438203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3160::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:4e:ed:54:88:dd:18:69:05:62:86:b2:1c:9b:6c:35:cd:fb:
         fe:10:d9:9e:8c:a7:36:f3:f5:d6:e7:f7:27:0b:95:6c:6e:d2:
         b3:12:b8:35:7b:ec:58:60:39:2d:29:8a:d8:14:0a:3e:a7:07:
         34:b2:fe:7f:46:9d:14:65:7e:7c:7a:be:bf:a5:17:15:57:63:
         9d:0b:d2:6d:2b:c3:15:0d:b7:b9:e8:fa:0d:7e:a9:bd:09:ac:
         1f:4e:a1:99:b0:f3:70:ac:f9:28:79:85:f0:69:d4:33:08:60:
         0a:72:e7:cb:b4:35:ef:43:fb:1d:b1:bc:08:7c:1d:9b:79:e3:
         38:77:6f:3c:5c:8a:5b:ab:85:e1:89:73:35:6d:ea:c3:a9:83:
         b0:65:8d:e0:16:f8:d0:2b:6d:db:72:1a:47:d4:7a:f0:18:5a:
         f7:1c:c9:f3:84:92:de:2d:f0:b4:0c:69:d9:a1:ce:04:df:7f:
         35:1f:45:a6:00:bc:f3:b7:25:32:5d:a6:91:03:6a:c7:1a:32:
         20:ed:11:22:2a:3d:71:fa:6c:f7:66:f8:d7:62:67:f1:64:ee:
         ce:75:86:47:7d:27:6e:eb:17:9f:8e:e6:a9:1e:eb:5c:5c:89:
         ff:21:9a:be:a6:9b:3c:fd:f1:77:2a:0c:11:9a:65:e4:9e:5e:
         fa:93:60:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org