Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/2/323830343a333265303a3a2f33322d3336203d3e20323635313032.roa
File:                     323830343a333265303a3a2f33322d3336203d3e20323635313032.roa (raw, json)
Hash identifier:          OWCu7R/MY2JMpGbP14wWbFLKptw6yoJnFRmwmE3gZB0=
Subject key identifier:   44:B2:7A:17:DE:94:07:ED:2F:4E:48:B0:75:7B:18:74:CF:7B:AC:4A
Certificate issuer:       /CN=6B000F8A633C0B39C38D951C0A953771C088CEC7
Certificate serial:       60F770C2DF12C6BFFFAB81510BCB0088818B5136
Authority key identifier: 6B:00:0F:8A:63:3C:0B:39:C3:8D:95:1C:0A:95:37:71:C0:88:CE:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B000F8A633C0B39C38D951C0A953771C088CEC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/2/323830343a333265303a3a2f33322d3336203d3e20323635313032.roa
Signing time:             Mon 08 Apr 2024 17:35:32 +0000
ROA not before:           Mon 08 Apr 2024 17:30:32 +0000
ROA not after:            Mon 07 Apr 2025 17:35:32 +0000
asID:                     265102
IP address blocks:        2804:32e0::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:f7:70:c2:df:12:c6:bf:ff:ab:81:51:0b:cb:00:88:81:8b:51:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B000F8A633C0B39C38D951C0A953771C088CEC7
        Validity
            Not Before: Apr  8 17:30:32 2024 GMT
            Not After : Apr  7 17:35:32 2025 GMT
        Subject: CN=44B27A17DE9407ED2F4E48B0757B1874CF7BAC4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c0:dd:69:2e:83:d9:ae:3e:ca:77:d7:1b:fe:
                    5d:85:ed:eb:6d:59:84:dd:77:48:b3:d0:32:6d:da:
                    d8:b3:ac:22:ff:0f:b1:b2:35:17:38:a5:62:b2:7a:
                    4c:a3:80:0d:80:93:58:79:2d:d7:b5:2a:fc:8c:91:
                    60:74:ad:ba:77:3d:57:76:86:d5:65:c4:2d:4e:3d:
                    db:1d:8d:9c:9d:c7:25:66:b4:9a:ae:e0:98:fb:39:
                    05:3d:32:54:9a:8c:fe:25:78:ed:1d:74:01:fe:36:
                    6b:52:4e:21:60:33:11:cc:ba:b0:70:b6:45:d9:4e:
                    32:33:0c:cb:ee:78:17:66:59:97:3c:e1:21:bc:b6:
                    88:b8:87:02:6f:18:17:df:e6:a3:97:a0:38:df:b1:
                    33:74:e4:aa:59:6c:e0:00:55:c1:3e:93:2b:4a:7c:
                    8a:63:3b:12:35:a2:96:d1:2a:db:d2:fe:e9:86:9f:
                    d0:af:f9:ee:6f:a6:ef:a6:7a:f2:09:fe:31:b7:11:
                    b2:08:3c:3a:8b:6d:5b:a9:96:bf:be:ba:22:32:c3:
                    d1:78:68:19:c9:1c:5b:50:e2:bd:03:a5:01:16:01:
                    d8:1d:dc:ec:03:34:36:0a:88:3e:af:9a:00:1c:b0:
                    bb:2e:91:f7:7d:f9:22:c0:77:22:6e:e0:b5:15:e8:
                    02:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B2:7A:17:DE:94:07:ED:2F:4E:48:B0:75:7B:18:74:CF:7B:AC:4A
            X509v3 Authority Key Identifier:
                keyid:6B:00:0F:8A:63:3C:0B:39:C3:8D:95:1C:0A:95:37:71:C0:88:CE:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/2/6B000F8A633C0B39C38D951C0A953771C088CEC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B000F8A633C0B39C38D951C0A953771C088CEC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/2/323830343a333265303a3a2f33322d3336203d3e20323635313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:32e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:4f:fd:e3:4f:4b:60:78:60:79:9a:92:49:85:1d:73:62:79:
         e9:79:47:3d:61:9d:93:83:09:72:7e:04:fd:50:9d:78:80:f3:
         fb:2f:bf:6c:58:b1:23:c9:e9:b3:d6:a8:e2:b6:fb:3e:ae:51:
         3d:45:38:a2:03:e9:d7:27:d0:d8:09:da:32:10:6f:12:64:cf:
         14:e6:84:a5:b1:9e:e7:9d:61:15:2e:40:3f:05:2b:53:f7:22:
         79:7b:00:e6:f6:af:ea:f0:11:62:4c:f2:c6:42:12:fc:49:38:
         e1:83:5c:0a:49:cf:b3:0a:8d:79:89:13:96:a6:ae:92:10:df:
         72:31:35:15:e2:10:72:eb:e5:72:8f:a0:1f:a7:c2:2e:36:04:
         d6:5c:62:3c:5d:32:91:a6:dd:33:34:5d:92:82:be:15:87:eb:
         8a:c6:7a:6f:0b:1d:eb:09:db:12:f6:db:cb:a7:39:19:a9:1d:
         e6:96:af:68:da:e6:51:cb:b9:d6:7e:37:34:f4:0a:38:2d:36:
         45:f9:bb:70:77:3a:86:81:c0:92:f4:46:ba:be:8e:38:15:e5:
         fd:88:aa:81:f6:22:75:3b:10:9c:f2:b1:03:36:a2:6e:f9:14:
         4e:ab:35:e3:9e:fe:af:f8:46:a6:73:89:89:df:24:5b:5a:0b:
         1e:2a:cb:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:31 2024 by rpki-client on console-fra.rpki-client.org