Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/323830343a323732303a3a2f33322d313238203d3e20323633383738.roa
File:                     323830343a323732303a3a2f33322d313238203d3e20323633383738.roa (raw, json)
Hash identifier:          tSdiakqnHWkQDonptMzzZdCWJj1Wwh/DiT2vpZqW0qE=
Subject key identifier:   DC:65:AF:B5:D5:84:D7:86:D4:5C:4B:34:F1:D9:34:54:EB:B3:6B:9A
Certificate issuer:       /CN=6B86CF0FC583A543CC3A0F89839F5D9A3F97C8CB
Certificate serial:       10C2049256660B2807CCDEC7ED825432A4243C3D
Authority key identifier: 6B:86:CF:0F:C5:83:A5:43:CC:3A:0F:89:83:9F:5D:9A:3F:97:C8:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6B86CF0FC583A543CC3A0F89839F5D9A3F97C8CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/323830343a323732303a3a2f33322d313238203d3e20323633383738.roa
Signing time:             Fri 23 Feb 2024 22:03:39 +0000
ROA not before:           Fri 23 Feb 2024 21:58:39 +0000
ROA not after:            Fri 21 Feb 2025 22:03:39 +0000
asID:                     263878
IP address blocks:        2804:2720::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c2:04:92:56:66:0b:28:07:cc:de:c7:ed:82:54:32:a4:24:3c:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B86CF0FC583A543CC3A0F89839F5D9A3F97C8CB
        Validity
            Not Before: Feb 23 21:58:39 2024 GMT
            Not After : Feb 21 22:03:39 2025 GMT
        Subject: CN=DC65AFB5D584D786D45C4B34F1D93454EBB36B9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f8:03:f9:0e:e6:65:ca:e3:a8:be:97:92:59:
                    24:28:55:f5:41:d0:f2:4f:f9:1b:96:3f:ba:f7:86:
                    a1:b5:e5:57:02:c4:89:e4:68:a3:5b:eb:0b:49:2c:
                    37:f3:34:98:a5:16:86:8b:64:3e:2b:28:80:03:86:
                    81:47:48:6f:2b:d8:36:f3:c1:75:45:6d:c8:3e:06:
                    f3:e6:37:67:46:46:55:d3:c3:2d:69:2f:1f:a1:50:
                    82:30:3b:02:a7:ab:e3:33:3b:d1:0e:06:b1:63:08:
                    10:11:41:3c:74:cf:41:ed:a6:88:9e:fe:2d:09:bb:
                    2d:11:9b:3f:81:ac:9d:61:5f:4d:fc:89:a9:43:a8:
                    52:0a:16:7a:b1:6b:27:d0:03:22:61:21:92:96:2e:
                    f9:88:8d:b3:0b:e5:a8:f9:42:68:41:36:52:23:1a:
                    ea:59:e3:87:44:1f:13:4a:0a:24:4b:97:58:af:f5:
                    f8:e3:0f:ee:46:d8:5c:4f:e1:9b:d3:4c:23:0e:36:
                    41:2d:f8:8e:9a:85:7e:2e:d2:b5:57:1e:a8:6b:86:
                    e0:d1:f7:92:cb:f9:07:c6:f6:b8:e2:c4:a7:25:bd:
                    ba:36:96:d8:2d:53:a4:01:ab:61:fb:92:14:3b:dd:
                    ff:14:84:31:20:ca:a4:6f:20:39:8a:bd:81:8c:29:
                    69:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:65:AF:B5:D5:84:D7:86:D4:5C:4B:34:F1:D9:34:54:EB:B3:6B:9A
            X509v3 Authority Key Identifier:
                keyid:6B:86:CF:0F:C5:83:A5:43:CC:3A:0F:89:83:9F:5D:9A:3F:97:C8:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/6B86CF0FC583A543CC3A0F89839F5D9A3F97C8CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6B86CF0FC583A543CC3A0F89839F5D9A3F97C8CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/323830343a323732303a3a2f33322d313238203d3e20323633383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2720::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:8f:b8:ef:85:76:54:d4:00:dd:47:a5:7b:04:db:b9:e7:e6:
         a4:4d:dd:35:25:01:7c:9d:8f:2f:7e:53:25:a6:23:b5:29:81:
         3e:2d:34:52:13:64:4c:6c:19:bc:21:c3:30:2e:99:44:49:da:
         c4:4c:13:34:10:37:b2:0f:ee:d7:82:59:aa:26:98:f9:41:da:
         bb:62:43:5d:2c:aa:ef:31:7e:47:e3:5c:8f:6a:a5:73:4f:53:
         6d:06:98:dd:00:fa:8f:64:7c:ed:e2:fd:13:cd:03:5a:fa:f8:
         d6:1b:cf:1c:79:dd:57:7a:55:15:ad:21:95:93:b3:7e:b3:93:
         04:d7:e7:bf:1a:fb:92:ee:d8:71:a1:81:0a:df:05:ee:13:23:
         4e:97:72:75:45:2a:74:a0:99:2e:c8:b1:6c:2f:70:13:e7:63:
         b9:db:f0:34:92:94:65:1d:e3:84:33:16:4c:42:6e:34:03:b4:
         31:69:9c:34:d0:98:97:37:7c:63:53:17:27:c8:e0:c7:49:af:
         a8:25:dd:3c:6a:15:8a:b8:6a:71:f3:47:b7:6c:df:1b:32:a8:
         1b:dc:6c:06:86:2f:fc:6b:a7:1f:55:ac:f1:b0:08:16:58:38:
         98:1f:8d:e9:e4:c0:25:5d:57:bf:5b:38:38:08:55:54:a5:f3:
         23:d2:83:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-ams.rpki-client.org