Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/323830343a356365383a393030303a3a2f34302d3430203d3e20323638393338.roa
File:                     323830343a356365383a393030303a3a2f34302d3430203d3e20323638393338.roa (raw, json)
Hash identifier:          rs0ayo3oLUvh4QXjt7282IzcWWsXiDfQ95vS9lxnK2E=
Subject key identifier:   D6:B8:DC:34:07:B8:6E:2D:AD:F3:31:4C:32:E5:96:77:E0:2A:12:5B
Certificate issuer:       /CN=128E6FAF19CE8C823CD70DA58CEF1F1B54332142
Certificate serial:       37B2E9CF328502C1FC99F1B7B5C0ADBF411C393B
Authority key identifier: 12:8E:6F:AF:19:CE:8C:82:3C:D7:0D:A5:8C:EF:1F:1B:54:33:21:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/128E6FAF19CE8C823CD70DA58CEF1F1B54332142.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/323830343a356365383a393030303a3a2f34302d3430203d3e20323638393338.roa
Signing time:             Thu 01 Feb 2024 20:29:45 +0000
ROA not before:           Thu 01 Feb 2024 20:24:45 +0000
ROA not after:            Thu 30 Jan 2025 20:29:45 +0000
asID:                     268938
IP address blocks:        2804:5ce8:9000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b2:e9:cf:32:85:02:c1:fc:99:f1:b7:b5:c0:ad:bf:41:1c:39:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128E6FAF19CE8C823CD70DA58CEF1F1B54332142
        Validity
            Not Before: Feb  1 20:24:45 2024 GMT
            Not After : Jan 30 20:29:45 2025 GMT
        Subject: CN=D6B8DC3407B86E2DADF3314C32E59677E02A125B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e6:e1:bd:1e:89:f4:5f:60:71:aa:5d:ff:62:
                    29:b1:63:f3:cc:2a:bb:0c:cb:64:1e:7b:b8:7d:8f:
                    74:21:7c:c0:ad:1b:d2:4c:0b:c5:93:31:27:30:ed:
                    62:5f:29:1c:87:0b:09:6e:82:4a:ea:cb:ce:48:06:
                    3d:3f:6a:cb:0d:56:5c:a3:21:75:af:d9:e9:7d:ab:
                    30:a6:7b:b2:bc:4f:e3:a3:f0:3b:22:b8:f4:9f:14:
                    35:60:3d:17:ce:be:76:ce:1d:6c:bf:5f:c3:7b:a3:
                    ca:ae:17:ed:d6:83:6f:3c:51:d1:76:1c:f2:71:14:
                    02:63:09:c0:22:67:43:be:d7:27:28:05:d5:20:d6:
                    e1:33:e2:02:a9:76:ca:3b:43:1f:db:f4:78:ab:02:
                    e0:90:86:24:ed:53:a6:94:f9:a9:35:e6:ac:d7:f7:
                    3f:18:ed:d7:40:74:70:e3:dc:a4:d0:2c:36:8d:08:
                    fd:53:78:bc:d7:f6:9c:39:ad:bc:fc:57:42:6c:de:
                    5a:6f:60:08:e6:17:ca:fb:a6:ee:b9:f3:5f:63:ff:
                    1a:f9:94:4c:85:2a:ab:a2:ea:44:9d:c6:13:f6:89:
                    db:d3:1c:f7:50:b6:11:dd:7a:b5:ab:96:83:3a:cd:
                    17:97:2a:b5:65:4f:4b:ff:78:fd:ca:c6:90:a8:11:
                    78:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B8:DC:34:07:B8:6E:2D:AD:F3:31:4C:32:E5:96:77:E0:2A:12:5B
            X509v3 Authority Key Identifier:
                keyid:12:8E:6F:AF:19:CE:8C:82:3C:D7:0D:A5:8C:EF:1F:1B:54:33:21:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/128E6FAF19CE8C823CD70DA58CEF1F1B54332142.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/128E6FAF19CE8C823CD70DA58CEF1F1B54332142.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/323830343a356365383a393030303a3a2f34302d3430203d3e20323638393338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ce8:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         21:2e:14:ed:e1:a4:53:76:72:04:d4:0f:94:32:12:28:db:a9:
         d5:fe:5d:1a:9e:da:9c:7a:cc:a2:e9:d3:0c:b5:60:5f:80:75:
         46:0a:01:91:ef:b7:e8:5a:5d:b6:2f:c4:4c:06:94:9f:d4:da:
         85:9d:bc:36:ce:f8:9f:1c:04:8d:49:3b:b9:95:f9:cd:15:1c:
         18:da:46:38:c5:9b:2f:68:df:9b:e0:c8:6e:5c:59:d5:28:9b:
         79:ea:f1:54:b9:c4:08:56:fc:85:9e:c5:ee:cd:38:37:61:f8:
         ac:1b:f5:2f:14:a2:6c:ad:e4:80:74:ff:83:98:9f:cd:fc:37:
         fb:70:a2:3f:f2:a9:3c:1f:1b:9e:d3:be:ea:d9:d4:45:4a:60:
         66:73:00:bb:78:2d:f3:87:a3:f2:0d:12:58:27:69:df:04:94:
         f3:12:7f:a1:22:d1:26:d9:5d:bd:fb:0a:a1:dd:1c:31:4a:da:
         a7:02:c2:58:96:fb:b1:59:a9:d6:9d:fc:cc:f1:f6:03:a7:56:
         98:c9:36:5c:5d:4e:62:8d:85:8e:fe:b2:e3:11:74:5e:e8:6f:
         90:01:d1:c5:0d:53:84:23:2c:d3:57:9c:35:56:72:4d:99:a1:
         c0:9b:d1:e6:2c:ae:33:8e:d0:1c:55:36:e1:66:7f:bc:23:b0:
         6e:bf:8a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:10 2024 by rpki-client on console-ams.rpki-client.org