Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/1/323830343a383333633a3a2f33352d3335203d3e20323732313835.roa
File:                     323830343a383333633a3a2f33352d3335203d3e20323732313835.roa (raw, json)
Hash identifier:          c48Q3HUp9C6zzau3dcRTSrmtQ0u9GUOlGf5kngxamD0=
Subject key identifier:   5D:38:38:CD:B8:E7:97:72:8F:A0:31:CE:DD:B1:71:7D:77:6A:3E:BC
Certificate issuer:       /CN=06F41C467498C83DCD58365909CB1B1CDF4E4E34
Certificate serial:       420F1F0623ACFB7EB9A108F5D19AF18B99FAD9A9
Authority key identifier: 06:F4:1C:46:74:98:C8:3D:CD:58:36:59:09:CB:1B:1C:DF:4E:4E:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/06F41C467498C83DCD58365909CB1B1CDF4E4E34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/1/323830343a383333633a3a2f33352d3335203d3e20323732313835.roa
Signing time:             Mon 19 Jun 2023 18:41:35 +0000
ROA not before:           Mon 19 Jun 2023 18:36:35 +0000
ROA not after:            Mon 17 Jun 2024 18:41:35 +0000
asID:                     272185
IP address blocks:        2804:833c::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:0f:1f:06:23:ac:fb:7e:b9:a1:08:f5:d1:9a:f1:8b:99:fa:d9:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06F41C467498C83DCD58365909CB1B1CDF4E4E34
        Validity
            Not Before: Jun 19 18:36:35 2023 GMT
            Not After : Jun 17 18:41:35 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:98:86:85:92:d0:3c:88:32:38:f1:cf:6d:17:
                    11:b7:28:fa:63:06:0c:95:75:ff:6e:8e:0a:d5:ef:
                    43:d2:4e:8b:86:aa:a0:d4:2c:a6:71:c4:44:c8:85:
                    a2:62:84:43:16:9b:8e:9c:ef:54:e7:50:b5:b7:c0:
                    8c:3a:a5:e9:19:14:97:d8:b9:11:52:75:f2:db:90:
                    8f:66:8f:2d:1e:14:69:34:2f:26:64:ee:b0:76:62:
                    cf:da:5f:58:0f:b6:db:7f:72:03:ba:4a:f4:29:08:
                    10:c3:dd:ba:32:3c:5d:be:18:68:90:8c:47:32:de:
                    a6:ea:de:7a:5a:24:35:4d:38:ee:6e:fb:b2:04:01:
                    b1:eb:5a:22:66:67:d8:bf:91:39:37:08:ad:bc:c9:
                    7e:ec:70:f6:93:ef:d2:9c:ec:09:e6:f5:80:d5:8c:
                    ea:f9:95:26:54:d3:fd:e5:16:dc:7b:3d:65:94:b8:
                    eb:30:9b:7b:7e:42:09:fa:ac:c4:01:fc:4c:a2:f1:
                    41:76:8a:a6:de:0d:d3:57:c3:3a:89:c3:08:00:e0:
                    c8:71:48:eb:4f:e3:92:d6:71:15:8f:96:35:91:7d:
                    06:1a:35:78:58:75:ef:e3:f4:36:d9:b6:9b:6c:f7:
                    af:55:3b:f4:62:34:61:1c:b2:6e:46:dd:b5:f2:dd:
                    81:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:38:38:CD:B8:E7:97:72:8F:A0:31:CE:DD:B1:71:7D:77:6A:3E:BC
            X509v3 Authority Key Identifier:
                keyid:06:F4:1C:46:74:98:C8:3D:CD:58:36:59:09:CB:1B:1C:DF:4E:4E:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/1/06F41C467498C83DCD58365909CB1B1CDF4E4E34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/06F41C467498C83DCD58365909CB1B1CDF4E4E34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/1/323830343a383333633a3a2f33352d3335203d3e20323732313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:833c::/35

    Signature Algorithm: sha256WithRSAEncryption
         65:63:b5:ac:99:59:77:2e:2c:26:b2:78:9f:e1:16:90:6e:46:
         c8:67:8e:15:10:22:69:ac:6b:61:52:c5:b9:d1:bc:8b:93:92:
         0a:7a:9f:f6:cd:98:c8:bd:83:35:2e:6e:f4:09:67:5e:4e:1f:
         d5:77:00:49:7e:e8:4b:14:9d:e7:59:0d:12:a3:29:9a:e8:c1:
         f3:28:f3:68:4f:87:d7:06:c2:45:be:1a:6f:c0:45:ef:58:66:
         4e:ca:26:a3:fd:82:df:9c:d9:bd:20:9c:9c:df:a7:f1:35:39:
         07:a2:f7:b1:34:70:f0:a8:b8:6d:15:2f:4d:51:c8:2d:bb:12:
         19:82:15:f4:61:4b:98:60:43:09:7b:3b:ca:9e:ec:d2:fb:28:
         5a:43:13:f7:99:0c:2e:1e:cd:37:2d:ea:05:75:f2:35:0a:27:
         3f:49:28:eb:3b:da:1f:1e:4b:b7:e2:69:b3:9a:ca:44:b5:60:
         01:f6:f5:08:3f:98:c6:51:4a:14:df:0a:51:9f:83:f7:ed:f2:
         51:16:34:ce:4a:bb:d2:9c:81:5b:17:9d:93:1b:27:65:4e:8d:
         aa:14:07:19:7c:d8:59:9c:ec:fd:ee:0f:4a:70:a1:d2:c0:ba:
         bb:bd:75:06:39:4e:f6:d8:f0:b4:71:6b:43:21:41:f7:9b:75:
         db:47:12:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org