Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/323830343a6463383a3a2f33322d3332203d3e203238363336.roa
File:                     323830343a6463383a3a2f33322d3332203d3e203238363336.roa (raw, json)
Hash identifier:          xW+Q2tiLGOtYLuqJHTMT1oI9jOZJWOYpOYrYXDZDG2o=
Subject key identifier:   AB:7B:0E:E0:6D:0D:C4:60:38:AD:E5:3F:DD:73:EE:50:59:06:06:19
Certificate issuer:       /CN=6CD173FF9D505DB98451806A0F566316FA5AF573
Certificate serial:       3DD01F78E1852288DC975876B3C71A3DAF13EBCD
Authority key identifier: 6C:D1:73:FF:9D:50:5D:B9:84:51:80:6A:0F:56:63:16:FA:5A:F5:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6CD173FF9D505DB98451806A0F566316FA5AF573.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/323830343a6463383a3a2f33322d3332203d3e203238363336.roa
Signing time:             Mon 01 Jan 2024 21:33:09 +0000
ROA not before:           Mon 01 Jan 2024 21:28:09 +0000
ROA not after:            Mon 30 Dec 2024 21:33:09 +0000
asID:                     28636
IP address blocks:        2804:dc8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:d0:1f:78:e1:85:22:88:dc:97:58:76:b3:c7:1a:3d:af:13:eb:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD173FF9D505DB98451806A0F566316FA5AF573
        Validity
            Not Before: Jan  1 21:28:09 2024 GMT
            Not After : Dec 30 21:33:09 2024 GMT
        Subject: CN=AB7B0EE06D0DC46038ADE53FDD73EE5059060619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:83:fd:dc:e0:83:35:b9:56:6c:e3:88:71:2f:
                    81:b0:0e:68:5a:82:c5:b3:e6:36:ae:40:f3:ce:0d:
                    60:4d:87:5a:3e:5f:77:61:c1:72:28:36:bc:87:7c:
                    3e:dd:a6:f4:64:42:40:9c:39:e4:3b:2a:67:73:25:
                    da:52:eb:52:fb:80:fd:b9:17:a1:eb:6d:94:c9:94:
                    5c:a4:b3:5d:5d:23:2d:cc:6c:7f:17:78:33:f6:9f:
                    96:be:ca:40:a2:c1:5a:68:d5:05:c6:66:1d:2c:38:
                    b8:a3:2f:38:9b:2f:e1:70:ed:eb:49:53:3a:f9:9a:
                    32:c7:b7:b9:79:1a:d7:f3:83:8a:a2:ed:35:92:c9:
                    04:14:db:a4:66:46:01:a9:0b:87:3c:54:10:2a:c3:
                    88:75:40:e3:25:11:c7:f4:01:fc:72:b6:e5:f0:c0:
                    50:f0:40:fb:c3:a9:e9:54:e2:5e:ec:b4:8a:73:66:
                    68:bf:94:4d:be:0c:83:d2:69:5e:24:8b:10:f6:d9:
                    e8:94:33:8d:63:2d:dd:f7:78:23:99:c8:f0:01:f8:
                    df:7f:80:d1:24:ab:45:08:ce:da:f8:25:8f:5d:ed:
                    8e:a8:26:15:c2:e8:ca:a1:22:41:67:a1:d9:f0:47:
                    0b:ea:2d:ff:e1:66:be:14:49:a1:3a:a0:f6:f9:68:
                    87:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:7B:0E:E0:6D:0D:C4:60:38:AD:E5:3F:DD:73:EE:50:59:06:06:19
            X509v3 Authority Key Identifier:
                keyid:6C:D1:73:FF:9D:50:5D:B9:84:51:80:6A:0F:56:63:16:FA:5A:F5:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/6CD173FF9D505DB98451806A0F566316FA5AF573.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6CD173FF9D505DB98451806A0F566316FA5AF573.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/323830343a6463383a3a2f33322d3332203d3e203238363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:dc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:c6:96:6b:9f:7d:4a:f4:dd:14:72:ae:5b:15:e8:21:fc:a7:
         09:56:32:7e:5c:59:c3:0f:c4:38:92:1b:45:42:7c:fd:80:4f:
         ec:a1:35:9b:70:d0:f5:84:99:50:58:d1:37:08:e5:94:00:b5:
         38:fd:c6:91:01:c3:88:26:e3:75:27:63:06:87:32:15:ec:cf:
         bd:df:14:50:a7:69:e4:f9:46:c9:67:39:6f:ed:d5:7c:a2:8a:
         80:ca:f1:29:ae:bd:c7:9a:76:96:ea:29:08:46:15:da:52:76:
         fa:e5:82:a7:70:8d:28:56:39:04:3e:0d:95:7c:a6:9d:db:19:
         ab:68:3b:14:0e:72:38:f1:45:fb:6c:46:84:17:2b:01:63:ed:
         6d:3d:3f:96:b0:65:3d:7e:09:9f:2b:3b:5d:83:24:9f:d0:86:
         fb:59:9d:58:2b:fd:c3:9a:fe:b0:81:4c:f7:48:ca:d5:6c:17:
         15:e7:c3:ac:cc:0b:56:8a:50:36:0d:89:f6:5e:6c:78:fc:7e:
         73:45:e7:bb:64:77:a7:02:fa:9e:4a:f1:e6:9f:41:3e:a9:fd:
         2a:bc:16:98:bd:87:1b:fe:86:ec:33:6c:7d:7e:c0:12:40:98:
         90:9a:3e:43:43:74:ba:91:66:4d:e8:eb:33:06:dc:94:95:d9:
         d1:9d:b7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org