Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a383030323a3a2f34382d3438203d3e203631363738.roa
File:                     323830343a316364343a383030323a3a2f34382d3438203d3e203631363738.roa (raw, json)
Hash identifier:          YnC4iBGxfbznYAbaVKp6hExm8o9mr+2pFZyD1aDQ5vo=
Subject key identifier:   68:00:CB:55:C0:9F:66:A3:2B:5E:41:07:22:AF:C6:9F:DB:CD:FA:27
Certificate issuer:       /CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
Certificate serial:       39FB231AE5E69E10FA027F0C9129B64995CF284A
Authority key identifier: 5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a383030323a3a2f34382d3438203d3e203631363738.roa
Signing time:             Tue 24 Oct 2023 12:43:54 +0000
ROA not before:           Tue 24 Oct 2023 12:38:54 +0000
ROA not after:            Tue 22 Oct 2024 12:43:54 +0000
asID:                     61678
IP address blocks:        2804:1cd4:8002::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:fb:23:1a:e5:e6:9e:10:fa:02:7f:0c:91:29:b6:49:95:cf:28:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
        Validity
            Not Before: Oct 24 12:38:54 2023 GMT
            Not After : Oct 22 12:43:54 2024 GMT
        Subject: CN=6800CB55C09F66A32B5E410722AFC69FDBCDFA27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:90:2c:85:0e:c0:96:5c:c4:6d:24:28:b4:78:
                    c8:cf:1c:88:1c:86:3b:1d:88:92:e9:1e:fb:46:99:
                    aa:7f:ee:74:3f:c1:d5:46:ea:5b:b8:6d:5a:54:d7:
                    79:90:2e:f7:8d:ed:d1:51:d8:16:39:e4:17:61:9d:
                    2f:a8:47:f6:a7:26:d9:c9:0c:66:d9:a4:63:04:21:
                    50:9c:35:85:0f:c4:0b:83:ec:77:06:f7:09:35:fe:
                    71:8b:56:a5:e8:1d:2a:b6:66:7b:54:20:5e:03:b9:
                    19:48:6b:18:26:73:16:80:ae:f9:33:59:ee:48:a8:
                    63:47:9a:b8:96:e6:86:2e:5c:74:03:4d:5a:fc:bc:
                    f8:e3:74:40:00:a2:10:b0:0e:d0:9f:ff:11:da:db:
                    da:9a:9b:33:92:26:4c:0c:54:00:43:43:e2:a0:42:
                    c4:b0:da:e5:75:aa:6b:ff:c1:8c:62:6f:84:ab:cf:
                    27:bc:5a:32:98:9f:60:32:81:b3:fd:f4:ae:4c:a4:
                    b9:26:42:41:31:36:bf:b5:13:bb:41:fa:ec:52:61:
                    5d:7f:3d:0f:78:3e:c5:48:59:d8:f6:90:f5:6a:fd:
                    a7:77:7f:92:fe:fe:1f:f7:67:5f:94:3b:4f:b9:6e:
                    7f:07:c6:96:e3:2a:32:d4:df:21:06:0a:f8:7a:b4:
                    c4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:00:CB:55:C0:9F:66:A3:2B:5E:41:07:22:AF:C6:9F:DB:CD:FA:27
            X509v3 Authority Key Identifier:
                keyid:5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a383030323a3a2f34382d3438203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cd4:8002::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:e2:27:75:f4:d7:6e:d2:39:b7:b0:a5:26:bf:09:1d:96:62:
         1e:1d:2d:ec:47:cd:5a:4f:5e:f6:a2:7c:36:96:8a:cc:3f:92:
         ea:f0:25:bd:10:a5:2e:83:27:d4:2a:44:c7:9a:91:f2:fb:8e:
         60:8a:80:f4:c3:62:9f:f7:e3:d0:59:84:0e:41:3a:2f:44:55:
         ab:4e:9b:88:8f:33:84:b1:61:23:28:bb:ce:fc:95:a7:00:5c:
         dc:50:d8:dc:81:0f:15:f2:37:cc:0a:ca:a1:7f:aa:77:3e:8c:
         7f:a0:de:92:70:fa:a2:ba:e2:ee:10:95:f8:b3:e2:39:2c:91:
         f3:ac:33:1c:e7:7f:7b:52:3a:7c:ac:b2:ed:b5:51:c1:bc:71:
         e9:84:6d:ba:b0:26:82:4d:56:ef:31:18:01:57:fc:d8:c7:17:
         11:05:c5:f1:63:40:c2:11:2e:54:df:49:81:80:0b:c3:03:45:
         e0:c9:40:e0:cf:59:47:eb:1f:24:51:2d:e9:97:7d:22:8c:66:
         47:23:ab:89:d5:a2:41:7b:d6:aa:9f:46:1e:b3:85:54:ae:fa:
         38:6a:0d:3b:c7:27:e7:c5:9b:a1:3d:4c:0e:64:6a:22:ad:5a:
         84:3e:01:2b:1c:01:da:ab:3b:d1:3d:2f:8b:21:8a:9c:69:ba:
         64:95:69:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org