Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/1/323830343a366264343a3a2f33322d3336203d3e20323730343238.roa
File:                     323830343a366264343a3a2f33322d3336203d3e20323730343238.roa (raw, json)
Hash identifier:          2rVZv2QBEVkF2bLrXfeYtc3hvBKYjeFGOl6+nIRgAn8=
Subject key identifier:   35:12:90:F8:54:46:F8:F9:C1:B1:5B:B5:41:FE:AB:94:13:AD:7E:31
Certificate issuer:       /CN=491DF027C89335A18A3A28961D8C093B7FAF2B03
Certificate serial:       22BC9788E6D912A59D1E656E87D01E03AA130264
Authority key identifier: 49:1D:F0:27:C8:93:35:A1:8A:3A:28:96:1D:8C:09:3B:7F:AF:2B:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/491DF027C89335A18A3A28961D8C093B7FAF2B03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/1/323830343a366264343a3a2f33322d3336203d3e20323730343238.roa
Signing time:             Mon 01 Jul 2024 06:05:13 +0000
ROA not before:           Mon 01 Jul 2024 06:00:13 +0000
ROA not after:            Mon 30 Jun 2025 06:05:13 +0000
asID:                     270428
IP address blocks:        2804:6bd4::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:bc:97:88:e6:d9:12:a5:9d:1e:65:6e:87:d0:1e:03:aa:13:02:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=491DF027C89335A18A3A28961D8C093B7FAF2B03
        Validity
            Not Before: Jul  1 06:00:13 2024 GMT
            Not After : Jun 30 06:05:13 2025 GMT
        Subject: CN=351290F85446F8F9C1B15BB541FEAB9413AD7E31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:eb:7e:97:72:d3:e9:36:71:a4:f6:c7:7e:1f:
                    a0:f4:d4:97:e5:39:ac:8a:b1:8a:06:b9:78:c3:9e:
                    e7:f2:1d:a5:e1:dc:45:40:0f:91:b8:15:50:4f:06:
                    e0:44:56:9d:b1:82:8c:99:81:22:0e:a2:95:11:53:
                    a1:09:e8:4d:53:8f:a3:79:8f:b7:17:88:5d:77:c9:
                    4c:7b:77:36:72:5e:89:fc:52:7c:43:a1:22:ad:4c:
                    2b:68:05:92:57:e9:2f:87:70:a6:06:a3:87:4a:7e:
                    1a:36:2a:bc:4e:d9:dc:01:e0:bd:b2:c5:f1:39:b4:
                    92:07:84:72:26:85:c9:61:5b:45:58:08:6a:36:29:
                    5b:82:2e:ad:01:df:fa:90:34:bf:b1:53:ad:b1:90:
                    d0:f3:6a:28:ce:9f:db:09:d6:95:13:7d:02:b8:dc:
                    f5:8c:f5:4f:26:8c:37:6c:94:96:3d:b6:a5:51:fa:
                    be:2c:89:6f:23:d6:90:18:0f:36:e7:3f:11:7d:6f:
                    7e:bd:00:cd:41:8a:54:45:96:30:5e:ae:0d:2f:02:
                    c8:51:37:ce:62:5b:cf:56:b8:78:54:7e:4f:51:08:
                    6a:7d:fb:0e:01:af:69:15:70:e3:4a:33:95:8f:24:
                    a0:82:e4:b0:ec:28:8b:7b:0f:5b:c5:6c:92:ba:59:
                    66:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:12:90:F8:54:46:F8:F9:C1:B1:5B:B5:41:FE:AB:94:13:AD:7E:31
            X509v3 Authority Key Identifier:
                keyid:49:1D:F0:27:C8:93:35:A1:8A:3A:28:96:1D:8C:09:3B:7F:AF:2B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/1/491DF027C89335A18A3A28961D8C093B7FAF2B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/491DF027C89335A18A3A28961D8C093B7FAF2B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/1/323830343a366264343a3a2f33322d3336203d3e20323730343238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6bd4::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:b4:7b:05:d8:65:87:0b:95:f0:e0:1e:91:5a:bb:b6:24:f7:
         2c:d9:2f:eb:44:de:51:9f:f7:cf:37:29:44:a1:8c:10:a4:3f:
         c2:0f:ae:94:08:d4:9d:62:ac:83:7b:c1:23:9a:10:18:0d:27:
         0b:c7:62:57:01:34:a5:62:2e:75:75:40:8d:de:e2:f5:b8:d8:
         42:84:45:8b:c2:79:2d:d3:43:9d:d3:36:c1:2f:7b:80:54:c7:
         0a:4b:23:8e:bd:69:63:d4:74:ae:26:97:2c:1d:34:f9:58:ba:
         0d:0e:1f:60:18:0a:dd:fb:e5:74:cf:61:8e:88:48:64:ea:06:
         3b:a1:26:bc:8a:a9:f4:88:7d:86:6e:45:3b:3f:44:60:5e:bc:
         c6:dd:94:3c:d1:51:22:8a:d7:bb:21:af:a1:bb:51:57:ba:6c:
         9e:f5:fe:7f:e8:e3:26:22:c2:a8:75:89:80:0a:a3:1f:de:68:
         a4:e7:ea:2a:52:70:4c:4e:43:bf:ea:df:39:d3:b8:ea:cc:16:
         ce:9e:d4:ed:df:79:99:88:a7:c5:40:ea:de:dd:1b:0f:64:7c:
         c5:cd:54:88:bd:36:05:88:fd:6e:dc:d8:82:0b:91:db:41:d3:
         09:65:50:b1:f1:67:37:a3:5c:c0:43:e9:d0:a2:9e:3c:b4:c7:
         49:e6:c3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 13:27:54 2024 by rpki-client on console-ams.rpki-client.org