Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/323830343a366163383a3130383a3a2f34382d3438203d3e20323730333538.roa
File:                     323830343a366163383a3130383a3a2f34382d3438203d3e20323730333538.roa (raw, json)
Hash identifier:          Ns017zwozK5G8H//i5vMLTfo8bDFipJemaE5D/x5GS8=
Subject key identifier:   28:AD:44:DF:51:C7:C8:B5:0D:E9:F8:8F:29:A4:A9:62:1C:D5:A1:F3
Certificate issuer:       /CN=61F4874E6474A8E5CE242BD1FB7854FA15297D85
Certificate serial:       60ACAB9D50CB95BC268D2D0D32F8B9B2392D132C
Authority key identifier: 61:F4:87:4E:64:74:A8:E5:CE:24:2B:D1:FB:78:54:FA:15:29:7D:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F4874E6474A8E5CE242BD1FB7854FA15297D85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/323830343a366163383a3130383a3a2f34382d3438203d3e20323730333538.roa
Signing time:             Fri 24 Mar 2023 01:47:12 +0000
ROA not before:           Fri 24 Mar 2023 01:42:12 +0000
ROA not after:            Fri 22 Mar 2024 01:47:12 +0000
asID:                     270358
IP address blocks:        2804:6ac8:108::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ac:ab:9d:50:cb:95:bc:26:8d:2d:0d:32:f8:b9:b2:39:2d:13:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61F4874E6474A8E5CE242BD1FB7854FA15297D85
        Validity
            Not Before: Mar 24 01:42:12 2023 GMT
            Not After : Mar 22 01:47:12 2024 GMT
        Subject: CN=28AD44DF51C7C8B50DE9F88F29A4A9621CD5A1F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7d:aa:1d:f3:cb:69:a5:92:e7:c6:3c:f3:08:
                    d3:fd:cc:b5:76:8f:f1:70:1c:e1:76:d3:96:96:b4:
                    63:db:3e:2b:bd:e6:1e:97:88:ff:fd:55:f5:cb:c1:
                    53:af:5b:3b:1a:af:ca:1c:7b:b2:ca:06:8a:0c:d5:
                    a6:0f:f9:44:48:dc:c9:cd:2a:55:a9:33:14:d6:63:
                    a6:66:31:94:ba:6f:2c:07:b7:9e:e9:4c:20:fb:db:
                    c8:9b:42:1a:63:e7:da:bc:c6:8b:68:97:44:42:91:
                    73:36:39:7d:3e:27:c0:a0:b8:6e:f6:61:39:65:3a:
                    ed:c5:ee:ce:1d:d4:34:3a:9a:59:51:e3:8a:e0:f5:
                    18:d7:d8:17:fb:13:11:bf:b2:36:90:94:f6:00:71:
                    57:c7:ca:de:02:4a:e5:ed:28:9c:c0:6e:30:66:d6:
                    a6:be:26:c8:8f:37:5f:91:8c:39:4a:fc:60:0a:96:
                    a7:e8:1b:57:65:bc:53:f6:69:b7:d7:7a:04:ec:42:
                    8e:4b:9d:db:e3:de:7d:47:93:46:f7:50:aa:de:ce:
                    d5:7b:a9:e3:b8:bb:67:85:78:79:35:7d:eb:31:c7:
                    44:0f:a8:0d:05:f7:9c:29:33:54:8e:65:a1:ad:0f:
                    61:9b:9d:0b:7c:86:68:e7:35:33:18:fe:5d:35:83:
                    f9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:AD:44:DF:51:C7:C8:B5:0D:E9:F8:8F:29:A4:A9:62:1C:D5:A1:F3
            X509v3 Authority Key Identifier:
                keyid:61:F4:87:4E:64:74:A8:E5:CE:24:2B:D1:FB:78:54:FA:15:29:7D:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/61F4874E6474A8E5CE242BD1FB7854FA15297D85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F4874E6474A8E5CE242BD1FB7854FA15297D85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/323830343a366163383a3130383a3a2f34382d3438203d3e20323730333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ac8:108::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:04:e6:7a:5d:e5:af:20:1a:a0:6e:22:90:0a:b1:1a:70:c8:
         74:e3:76:1a:8c:16:ff:99:2e:9a:b0:c3:78:89:7a:b1:42:e3:
         92:81:52:c7:04:d2:20:01:2a:53:63:e9:c0:b1:90:a7:6d:e9:
         99:d6:cc:29:61:81:b8:bc:b2:b5:3c:83:7a:95:27:b3:df:df:
         97:16:79:1d:e3:a8:30:f5:1b:26:e1:83:07:b2:b4:bb:44:80:
         78:86:3c:23:16:18:28:da:30:c6:a7:da:9b:ae:cc:f3:60:2e:
         17:07:9e:06:4a:3e:97:f8:ce:ee:d4:0c:33:87:f7:e8:ba:cd:
         fa:7d:89:48:fb:0c:17:c1:60:11:bf:d4:d8:c0:0b:bc:16:1d:
         13:24:c2:5d:03:7b:24:3e:4b:6d:f0:90:f1:e9:79:c0:12:0e:
         4c:47:40:03:a0:f4:3e:3a:47:52:4a:06:3d:07:a4:15:ce:2c:
         c1:e2:45:7f:27:91:40:f6:84:9a:6c:64:ac:c1:74:de:4f:a0:
         0f:ed:e5:e4:02:21:a3:c9:1a:25:e3:8d:5e:f9:10:2e:7c:3c:
         a7:83:fc:3f:db:62:ec:6e:6a:53:7e:cd:a8:9c:1f:08:38:f2:
         8a:9c:77:27:e8:ca:58:2a:88:2e:64:81:ec:8c:29:b4:8b:31:
         a3:65:3b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org