Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/323830343a3235303a633030303a3a2f33342d3336203d3e20323632383033.roa
File:                     323830343a3235303a633030303a3a2f33342d3336203d3e20323632383033.roa (raw, json)
Hash identifier:          MANAFHIU/I/aK3pcF2Q/8zGVStkFyaeAATgvI+FWIgc=
Subject key identifier:   60:32:2A:03:1D:50:6F:D9:CE:87:8B:22:0D:7B:60:D2:F6:C8:3E:FB
Certificate issuer:       /CN=A28C39408C13CA9DE27BAEFCF4DD6FB66B0BE72B
Certificate serial:       39453AF98927B375589D435B68FB369568FD36AD
Authority key identifier: A2:8C:39:40:8C:13:CA:9D:E2:7B:AE:FC:F4:DD:6F:B6:6B:0B:E7:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A28C39408C13CA9DE27BAEFCF4DD6FB66B0BE72B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/323830343a3235303a633030303a3a2f33342d3336203d3e20323632383033.roa
Signing time:             Fri 22 Dec 2023 19:09:40 +0000
ROA not before:           Fri 22 Dec 2023 19:04:40 +0000
ROA not after:            Fri 20 Dec 2024 19:09:40 +0000
asID:                     262803
IP address blocks:        2804:250:c000::/34 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:45:3a:f9:89:27:b3:75:58:9d:43:5b:68:fb:36:95:68:fd:36:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A28C39408C13CA9DE27BAEFCF4DD6FB66B0BE72B
        Validity
            Not Before: Dec 22 19:04:40 2023 GMT
            Not After : Dec 20 19:09:40 2024 GMT
        Subject: CN=60322A031D506FD9CE878B220D7B60D2F6C83EFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a8:52:cf:31:4a:2d:e9:88:a6:9b:25:3e:91:
                    c1:a2:9d:51:09:51:3e:94:b8:ca:34:56:92:28:00:
                    09:66:83:b1:c0:ac:bf:0d:a5:f3:7b:79:ad:86:53:
                    84:ed:a3:5d:48:83:e3:d5:9a:e1:fe:7e:1d:27:e7:
                    4b:f5:f7:1e:50:45:7e:a0:53:f1:c0:f0:58:d6:1e:
                    6f:16:fc:40:e2:8d:26:59:7c:dc:4d:a6:8b:6b:c7:
                    71:49:09:f7:62:1a:6a:ec:30:15:61:81:81:0a:ae:
                    43:08:b5:e3:9e:71:74:f4:9d:e1:ad:3a:5d:9a:bd:
                    4b:8c:e0:ff:d2:8e:56:70:64:f0:c1:93:d7:a4:7f:
                    8f:81:c4:9f:10:45:20:12:eb:5a:2c:4c:68:19:8b:
                    80:a1:74:bb:f7:a7:ad:eb:25:fd:20:32:26:f5:6a:
                    97:a8:54:07:23:62:8f:40:97:8d:e7:6f:2b:f0:39:
                    55:5d:82:cc:20:41:72:3a:36:29:b1:3e:3c:41:77:
                    f9:ad:cd:d5:3a:bf:17:cc:b8:ef:f5:95:84:82:f1:
                    0a:5a:55:4b:5c:b5:e0:05:e3:59:7d:5b:25:75:a7:
                    90:54:fe:0d:c8:75:9f:b9:96:13:17:d6:4b:c9:0b:
                    6b:45:34:aa:b7:a7:ab:95:f1:72:af:7e:1e:08:f3:
                    08:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:32:2A:03:1D:50:6F:D9:CE:87:8B:22:0D:7B:60:D2:F6:C8:3E:FB
            X509v3 Authority Key Identifier:
                keyid:A2:8C:39:40:8C:13:CA:9D:E2:7B:AE:FC:F4:DD:6F:B6:6B:0B:E7:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/A28C39408C13CA9DE27BAEFCF4DD6FB66B0BE72B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A28C39408C13CA9DE27BAEFCF4DD6FB66B0BE72B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/323830343a3235303a633030303a3a2f33342d3336203d3e20323632383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:250:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b2:75:af:3f:84:d1:f4:ea:74:c7:31:da:ef:bb:81:f5:43:cf:
         96:49:00:1e:d6:e9:db:49:ba:4d:d6:df:14:38:44:86:70:6f:
         9d:6c:cb:46:32:f1:fa:6b:9c:c8:e2:f4:eb:de:c5:92:ef:1d:
         41:13:cf:ab:1f:30:3b:30:62:e8:c9:68:c7:fa:b1:c5:14:01:
         da:10:a0:cb:30:54:e9:f3:6a:98:0e:19:20:bf:cd:c6:bf:7c:
         65:4d:b5:44:61:71:04:9c:dc:04:8e:f5:bc:05:b7:f7:1c:6e:
         a4:b3:0c:c8:19:79:03:c2:9c:b9:42:00:d6:48:1d:07:7f:bc:
         33:25:07:f6:b1:d6:26:64:1c:b1:9b:55:44:55:16:35:81:06:
         d2:c2:e0:d1:35:93:67:9d:f2:fd:c7:3a:d2:c1:8c:70:62:55:
         e8:e5:aa:16:7b:74:84:7a:05:55:b0:a4:3a:a7:14:51:a1:54:
         e9:90:f4:11:a9:97:5d:c0:8d:a6:23:21:a2:b5:29:b2:e4:82:
         63:5c:bb:13:c3:0b:e3:29:ae:de:44:68:e8:02:c2:8d:03:d4:
         5d:6e:2d:66:28:a5:e6:49:29:91:09:e6:1f:ab:fe:7f:ed:81:
         f1:39:56:66:4c:5f:b8:b1:99:79:ef:86:05:49:c9:c3:a2:35:
         76:a1:3a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org