Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4niNMbKxUFqTvuiNomjnEYU2VgEVtYEDaMS7H23Sgqg8/0/323830343a313964383a3a2f33322d3335203d3e203631383232.roa
File:                     323830343a313964383a3a2f33322d3335203d3e203631383232.roa (raw, json)
Hash identifier:          VlVxHYJb2DT1f3+KCEKsHFXrCKJlOZAMo0MYYcHhcRQ=
Subject key identifier:   21:0F:0E:9A:54:80:AC:96:B9:C1:16:5D:98:9E:ED:F6:A9:FB:81:C2
Certificate issuer:       /CN=B6594718FFDD3374D78BED43B0A99EA95E3DE550
Certificate serial:       1457719D1CBF8F31ACE2265D11F97B2CD232D010
Authority key identifier: B6:59:47:18:FF:DD:33:74:D7:8B:ED:43:B0:A9:9E:A9:5E:3D:E5:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6594718FFDD3374D78BED43B0A99EA95E3DE550.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4niNMbKxUFqTvuiNomjnEYU2VgEVtYEDaMS7H23Sgqg8/0/323830343a313964383a3a2f33322d3335203d3e203631383232.roa
Signing time:             Mon 16 Oct 2023 16:00:01 +0000
ROA not before:           Mon 16 Oct 2023 15:55:01 +0000
ROA not after:            Mon 14 Oct 2024 16:00:01 +0000
asID:                     61822
IP address blocks:        2804:19d8::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:57:71:9d:1c:bf:8f:31:ac:e2:26:5d:11:f9:7b:2c:d2:32:d0:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6594718FFDD3374D78BED43B0A99EA95E3DE550
        Validity
            Not Before: Oct 16 15:55:01 2023 GMT
            Not After : Oct 14 16:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e2:5f:a9:35:8d:cf:16:92:77:50:15:65:8a:
                    00:cc:ee:30:a7:99:a1:b9:97:33:84:f7:2d:09:c8:
                    d6:22:b6:31:26:69:5a:bc:4f:40:a2:bf:10:aa:84:
                    e7:b0:d1:3c:17:90:19:a8:a3:2d:94:f1:c5:d2:c3:
                    ac:8d:f5:e8:19:0d:7c:9d:83:d8:cb:d2:78:5e:37:
                    a0:7e:2a:1f:9e:21:d9:f6:45:89:cb:ac:b7:56:2d:
                    84:99:35:85:47:34:54:a6:ba:fe:1c:38:85:67:f0:
                    a9:99:60:9a:73:c4:10:1a:73:1f:1f:e2:c6:7e:5e:
                    a9:b7:a0:ef:02:a9:12:67:c8:71:d9:d3:cc:10:f2:
                    56:57:ea:c5:24:82:1e:39:22:c9:f3:c5:dc:a9:aa:
                    66:af:12:b1:74:48:7c:b9:a4:0a:07:d3:22:53:8a:
                    d1:2c:2e:86:1a:1a:e1:4b:56:19:61:ec:cf:b7:56:
                    60:f8:5c:d9:c4:93:ce:2f:df:57:5d:88:b5:03:7b:
                    7f:fb:11:9d:13:1b:fc:81:bf:46:58:9f:8c:e9:df:
                    df:ff:96:91:75:73:83:fe:fb:20:d6:0f:87:1c:04:
                    ea:e1:2a:b4:1c:9e:0c:6f:f1:a9:58:c4:02:c3:2b:
                    b4:7f:d4:fc:58:58:9e:eb:d8:f4:59:c0:45:3a:24:
                    25:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:0F:0E:9A:54:80:AC:96:B9:C1:16:5D:98:9E:ED:F6:A9:FB:81:C2
            X509v3 Authority Key Identifier:
                keyid:B6:59:47:18:FF:DD:33:74:D7:8B:ED:43:B0:A9:9E:A9:5E:3D:E5:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4niNMbKxUFqTvuiNomjnEYU2VgEVtYEDaMS7H23Sgqg8/0/B6594718FFDD3374D78BED43B0A99EA95E3DE550.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6594718FFDD3374D78BED43B0A99EA95E3DE550.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4niNMbKxUFqTvuiNomjnEYU2VgEVtYEDaMS7H23Sgqg8/0/323830343a313964383a3a2f33322d3335203d3e203631383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:19d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:78:59:47:ed:ce:f6:b4:2f:c2:cf:96:9f:57:4f:37:a9:71:
         87:d1:b3:7f:b9:b6:59:89:22:3e:f9:e1:64:b4:c3:18:bc:cf:
         25:c7:62:51:84:58:15:e1:29:21:73:51:b9:58:e1:94:71:b8:
         5d:45:b7:12:cf:d5:40:79:22:5b:a8:98:91:e6:d2:f4:36:a5:
         80:1e:49:50:54:0c:f4:ff:99:0c:45:9e:72:16:76:2d:2c:c3:
         5d:9e:be:b9:1f:4c:55:eb:c0:76:d0:8e:50:ba:95:85:00:80:
         2f:02:6c:97:53:c6:5c:14:b5:05:ca:04:df:48:3b:b2:ba:d7:
         05:d9:87:42:62:07:10:f2:e4:85:cc:8e:a1:cd:a3:df:a1:50:
         36:f8:a5:d9:00:d2:1e:20:e2:85:11:9d:bc:ae:1e:01:21:6f:
         4d:2f:9e:f5:25:97:6d:fb:2c:1e:21:1a:9a:47:44:94:55:7f:
         1c:fe:17:ff:88:86:ba:d8:0a:19:c9:48:fb:94:36:ed:d7:b4:
         e4:63:30:d1:4d:4f:f5:ed:88:4e:25:09:89:e7:04:9b:85:ae:
         eb:03:60:ac:c6:81:2b:9e:e1:df:43:95:2f:4a:9d:bf:04:eb:
         22:5c:ed:04:f6:3d:a3:63:20:22:c8:27:91:83:8f:c9:98:b4:
         f6:99:78:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org