Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/323830343a386635383a3a2f33322d313238203d3e20323733343835.roa
File:                     323830343a386635383a3a2f33322d313238203d3e20323733343835.roa (raw, json)
Hash identifier:          tsVImoOg+jHNTWR0zYOI2hJzYzw1YwqPrCw2LNeAjWo=
Subject key identifier:   40:07:58:19:17:42:9D:4F:37:FB:AD:AB:14:05:F7:D5:02:93:CC:20
Certificate issuer:       /CN=6C1E9A9DB020B10AEEF67012284C4AB2C38C661B
Certificate serial:       5F9B9933385377AF24FD3BA68C854F1BE13E4B61
Authority key identifier: 6C:1E:9A:9D:B0:20:B1:0A:EE:F6:70:12:28:4C:4A:B2:C3:8C:66:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C1E9A9DB020B10AEEF67012284C4AB2C38C661B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/323830343a386635383a3a2f33322d313238203d3e20323733343835.roa
Signing time:             Mon 01 Apr 2024 19:13:53 +0000
ROA not before:           Mon 01 Apr 2024 19:08:53 +0000
ROA not after:            Mon 31 Mar 2025 19:13:53 +0000
asID:                     273485
IP address blocks:        2804:8f58::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:9b:99:33:38:53:77:af:24:fd:3b:a6:8c:85:4f:1b:e1:3e:4b:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C1E9A9DB020B10AEEF67012284C4AB2C38C661B
        Validity
            Not Before: Apr  1 19:08:53 2024 GMT
            Not After : Mar 31 19:13:53 2025 GMT
        Subject: CN=4007581917429D4F37FBADAB1405F7D50293CC20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:7a:e4:bf:30:78:e8:00:04:76:2c:53:59:db:
                    0d:97:29:f4:d7:d7:b6:65:d3:ab:cf:1f:46:94:1e:
                    45:5d:85:24:f1:cd:89:28:50:29:56:03:ba:b1:df:
                    f1:dd:2a:6a:a9:8a:64:02:4d:ae:ca:99:86:09:75:
                    3b:b5:06:77:d2:cc:d3:ec:10:64:65:d8:e2:68:b1:
                    84:91:7c:e1:c2:84:ee:6c:75:71:c9:47:93:75:ee:
                    95:ee:21:cf:92:4c:8d:38:06:ee:3d:94:5a:67:1a:
                    59:84:94:79:cf:10:1c:59:0f:06:b7:c4:91:ad:a0:
                    47:30:99:61:2f:6b:5a:34:4c:90:f9:72:a1:bd:e6:
                    95:98:e2:2d:d9:26:3c:9d:ce:0f:f6:ef:b7:b8:c8:
                    ec:79:59:5d:6c:8e:c3:8f:af:bc:3f:3d:d4:b9:b5:
                    3f:aa:76:a3:80:6d:51:2a:2f:a1:2b:75:84:e6:94:
                    97:af:32:f0:49:f0:ce:8a:48:e3:9e:95:f9:a3:98:
                    c2:01:e1:d2:85:0c:d0:fe:dc:f9:8b:7b:17:5b:5e:
                    a1:3e:2f:de:d6:97:6e:ac:82:e5:32:c3:d0:a2:53:
                    79:f1:a7:0f:c1:36:7b:7d:63:42:77:9e:6d:b1:d7:
                    07:2b:e4:2a:09:ab:3d:19:3e:ea:bd:78:36:d3:1c:
                    ba:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:07:58:19:17:42:9D:4F:37:FB:AD:AB:14:05:F7:D5:02:93:CC:20
            X509v3 Authority Key Identifier:
                keyid:6C:1E:9A:9D:B0:20:B1:0A:EE:F6:70:12:28:4C:4A:B2:C3:8C:66:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/6C1E9A9DB020B10AEEF67012284C4AB2C38C661B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C1E9A9DB020B10AEEF67012284C4AB2C38C661B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/323830343a386635383a3a2f33322d313238203d3e20323733343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f58::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:fc:3b:b4:5f:64:89:e9:7c:22:53:9f:19:44:0b:eb:bd:5f:
         71:de:78:8d:20:3e:7f:de:f2:ee:b4:3a:6d:1c:d7:0f:f7:90:
         03:48:33:0f:77:ab:eb:9e:c8:58:e6:6f:d2:d3:9f:64:5c:94:
         ce:c7:33:bc:20:96:e1:c8:24:d0:1b:11:bc:13:ea:52:5c:00:
         18:2a:6b:ba:18:19:8f:ce:02:fb:81:b7:b9:10:a1:b5:32:c5:
         20:f2:59:a1:8c:d9:c8:dc:3e:18:ea:8b:2a:28:59:7c:57:4b:
         70:a3:2d:91:a3:cf:48:a5:c6:b0:3c:1d:9a:5a:9e:91:77:f4:
         b9:dd:80:70:da:f1:35:de:9f:c5:6b:4a:f6:f2:86:44:67:c5:
         61:af:47:84:99:8f:9b:c6:da:3a:f5:58:ed:0c:c3:4f:e5:df:
         66:67:13:f8:53:95:32:11:c4:dd:8a:e8:b0:b8:64:5d:36:33:
         03:36:73:b6:31:72:42:b9:75:2d:32:34:64:6c:c2:c8:21:a7:
         d8:29:f9:f7:86:ee:2b:13:fe:4b:71:5b:e5:9f:78:12:98:7d:
         3a:45:b0:57:95:3f:c6:70:34:f1:32:f5:93:d2:bb:3c:06:3b:
         90:5c:aa:40:fe:6b:a1:75:41:32:6b:23:b4:6b:a0:03:33:d4:
         ab:08:13:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org