Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a343030303a3a2f33342d3334203d3e20323638363738.roa
File:                     323830343a353465633a343030303a3a2f33342d3334203d3e20323638363738.roa (raw, json)
Hash identifier:          EEM6fBPJleSIU5VVyvC+o7ifGt0ehtGr2yH+HIzE1n0=
Subject key identifier:   63:0A:1C:C7:B5:29:66:32:C2:FD:06:2D:23:85:3E:26:A6:F1:D1:68
Certificate issuer:       /CN=16E394B7AD89042F1F54B813EC0DA6DE112EC0D1
Certificate serial:       1CD36FBD88C1AEC04AD68F861722F9E3B9C52776
Authority key identifier: 16:E3:94:B7:AD:89:04:2F:1F:54:B8:13:EC:0D:A6:DE:11:2E:C0:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16E394B7AD89042F1F54B813EC0DA6DE112EC0D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a343030303a3a2f33342d3334203d3e20323638363738.roa
Signing time:             Wed 14 Feb 2024 20:09:45 +0000
ROA not before:           Wed 14 Feb 2024 20:04:45 +0000
ROA not after:            Wed 12 Feb 2025 20:09:45 +0000
asID:                     268678
IP address blocks:        2804:54ec:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d3:6f:bd:88:c1:ae:c0:4a:d6:8f:86:17:22:f9:e3:b9:c5:27:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16E394B7AD89042F1F54B813EC0DA6DE112EC0D1
        Validity
            Not Before: Feb 14 20:04:45 2024 GMT
            Not After : Feb 12 20:09:45 2025 GMT
        Subject: CN=630A1CC7B5296632C2FD062D23853E26A6F1D168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:30:f2:11:9a:07:e5:c2:2e:ef:f5:fb:eb:66:
                    32:57:7e:9b:74:c4:f7:bc:86:ef:7c:ff:07:19:47:
                    7b:a4:ed:31:47:13:02:65:fd:41:9c:59:9d:0f:47:
                    72:7e:fd:71:58:00:29:82:69:8d:08:bb:aa:65:65:
                    f7:44:02:bb:c8:3e:48:c4:af:43:ed:d6:47:d0:dd:
                    a2:87:1d:16:7d:1f:2b:0e:f2:cd:76:2e:b3:9b:1d:
                    06:32:06:68:bc:d6:6c:f7:f6:6f:ef:70:f1:f3:9b:
                    3d:b1:0f:0f:31:19:24:ca:be:65:59:49:f8:f6:52:
                    f4:6a:83:ec:85:d7:7e:66:5c:54:54:a9:01:58:da:
                    58:2e:be:d1:7a:3f:8d:79:c4:ea:39:5a:66:99:0d:
                    33:a0:85:24:9f:20:a9:cb:e3:c0:25:d6:96:f8:cd:
                    f7:ce:03:71:ba:10:35:c9:24:49:87:e3:12:15:4d:
                    42:84:e7:67:21:ba:2e:e2:07:d8:af:29:d6:dd:2c:
                    6a:2e:94:be:ad:c6:34:12:1f:f3:ad:e2:1e:0b:18:
                    65:f3:ec:27:45:75:6d:60:18:22:be:8c:cb:5e:95:
                    e1:82:65:2e:e9:17:3a:4e:d2:85:1f:bd:17:b1:35:
                    a7:0b:9f:40:50:72:e0:37:c8:c4:4b:dc:ba:54:4e:
                    2b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:0A:1C:C7:B5:29:66:32:C2:FD:06:2D:23:85:3E:26:A6:F1:D1:68
            X509v3 Authority Key Identifier:
                keyid:16:E3:94:B7:AD:89:04:2F:1F:54:B8:13:EC:0D:A6:DE:11:2E:C0:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/16E394B7AD89042F1F54B813EC0DA6DE112EC0D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16E394B7AD89042F1F54B813EC0DA6DE112EC0D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a343030303a3a2f33342d3334203d3e20323638363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54ec:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         98:c6:42:47:98:62:8c:34:43:d7:94:97:b7:2a:7c:82:95:9d:
         8c:ae:40:aa:47:51:b9:81:f8:1d:59:70:24:54:ea:07:01:5f:
         be:65:da:4b:80:26:a2:6f:da:43:f3:ee:82:d6:51:21:47:27:
         bc:c8:d7:f9:1b:d9:14:fb:9a:68:1a:31:0c:8f:30:2a:ee:0f:
         38:cb:35:5a:9d:4a:92:78:7c:1f:3c:30:ef:d9:bf:d2:b8:98:
         6d:d4:bd:60:81:f6:f7:91:2c:b5:b1:5c:8e:7c:6a:3e:25:3d:
         28:f9:9d:c0:15:6f:b3:ee:04:bd:48:ae:39:bb:a4:ec:8f:f1:
         de:37:9b:6f:3c:0a:1b:fc:8b:32:de:38:1d:44:33:14:ad:37:
         70:39:b1:ea:79:c2:fa:45:a6:cc:58:45:1c:69:2d:48:c3:64:
         01:cf:84:b1:d7:10:6e:27:0c:ee:03:95:b5:2a:5d:a7:1a:45:
         59:08:06:a9:1d:6a:0a:c4:b5:5e:4a:45:81:fe:32:18:78:da:
         fa:2a:97:bf:c2:b5:e1:16:1f:3e:b7:e6:38:52:3d:f9:1e:2e:
         fb:89:be:de:73:b5:9b:66:80:81:32:d8:b7:99:b8:b5:7b:32:
         06:5b:02:e2:33:94:04:f9:c9:75:c6:d7:b2:e1:0c:6a:28:e7:
         a0:ba:64:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org