Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/323830343a316434303a3a2f33322d3438203d3e203532363734.roa
File:                     323830343a316434303a3a2f33322d3438203d3e203532363734.roa (raw, json)
Hash identifier:          gykI1Jsn6at25aYzEpXMLOlsxHKGOYgRvGdv3k90YV4=
Subject key identifier:   9A:7D:6D:14:AA:26:3B:54:EA:03:F8:60:9D:C2:4C:30:D8:D2:0C:D7
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       6C0C4C8F5626B6DBDEA28CCDA3615B92332C11BF
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/323830343a316434303a3a2f33322d3438203d3e203532363734.roa
Signing time:             Wed 21 Feb 2024 22:53:25 +0000
ROA not before:           Wed 21 Feb 2024 22:48:25 +0000
ROA not after:            Wed 19 Feb 2025 22:53:25 +0000
asID:                     52674
IP address blocks:        2804:1d40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:0c:4c:8f:56:26:b6:db:de:a2:8c:cd:a3:61:5b:92:33:2c:11:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Feb 21 22:48:25 2024 GMT
            Not After : Feb 19 22:53:25 2025 GMT
        Subject: CN=9A7D6D14AA263B54EA03F8609DC24C30D8D20CD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4d:fb:6c:7e:a1:6d:2e:e4:a8:32:7e:7c:cf:
                    b1:47:7f:ea:4b:42:d7:51:e5:81:6d:46:55:72:64:
                    da:49:cd:95:01:54:22:b6:b3:f6:b7:45:c7:a1:6a:
                    18:d6:e4:44:f7:61:ae:12:21:7b:b1:31:99:42:40:
                    a5:dd:fb:cb:24:2a:58:7b:83:49:be:2e:66:f1:3a:
                    21:72:1d:a1:f4:25:a9:af:6b:56:46:a5:f2:70:9f:
                    ea:24:cd:27:07:85:20:17:89:0e:e0:71:dc:27:8e:
                    ef:18:3f:bd:d4:4b:c4:ca:f3:c5:1b:e3:c9:96:20:
                    50:9a:e7:7a:99:be:d8:60:50:5f:5a:f0:cc:6f:95:
                    b6:65:ce:75:5b:43:15:f7:c4:bb:d5:51:68:4f:dc:
                    6e:af:c3:e9:d9:f3:3a:35:aa:ef:44:dc:79:a3:75:
                    51:6d:85:ef:8e:7a:5b:38:64:4c:f6:2e:76:9d:3f:
                    77:9b:0c:84:19:ac:d1:fc:00:c8:4b:da:f6:9a:72:
                    de:24:b9:be:8e:c6:eb:db:87:e9:b6:3c:82:68:6f:
                    a2:2c:cb:cd:37:db:7a:ad:6d:ca:f9:9c:2c:60:0f:
                    3b:d0:66:4b:0d:c5:dc:b0:48:06:d2:35:11:c1:18:
                    ec:c5:bc:cf:df:d0:22:26:3d:d1:64:78:89:64:ef:
                    9d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:7D:6D:14:AA:26:3B:54:EA:03:F8:60:9D:C2:4C:30:D8:D2:0C:D7
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/323830343a316434303a3a2f33322d3438203d3e203532363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:4e:d8:13:b0:a7:ac:fc:f3:1c:fd:6a:ae:bb:41:c5:9e:64:
         0b:cd:84:30:e8:90:15:34:c5:a1:cb:67:b1:01:6c:18:9a:73:
         ae:e7:c9:50:d4:ca:82:8c:55:07:5a:55:f9:af:0d:d0:af:25:
         cb:f0:6a:69:25:d0:7d:68:58:8c:ce:2a:20:b7:25:e6:25:eb:
         ae:54:93:4c:20:ea:f9:29:46:f5:cc:c2:00:ab:fb:51:c7:b2:
         dd:97:d0:72:8c:4a:ed:1c:76:bb:18:4f:e6:fb:da:9a:8b:43:
         b1:e5:bc:62:69:1d:3f:85:2e:74:c2:ec:da:cd:63:57:e5:0a:
         a1:f3:6f:23:b2:13:c7:65:9a:a8:6f:c9:58:0c:e3:a3:cd:6b:
         65:c3:fb:28:f9:5f:93:c8:3a:32:3f:37:6a:de:a5:ef:38:b1:
         21:10:28:3c:37:d9:77:2b:cc:61:12:a6:26:8a:5b:61:d4:8d:
         7c:e5:36:b5:04:38:e3:be:10:74:0e:5b:89:b4:e9:2c:1a:27:
         3f:e1:b4:d7:7d:04:a9:f1:de:c9:97:79:38:dd:49:ac:af:e3:
         20:eb:1d:89:7f:26:d6:9b:d3:4b:23:15:b5:b7:be:45:51:52:
         59:46:1b:f8:93:d8:3d:77:ce:63:86:ee:64:d1:2f:7a:cd:15:
         b3:4c:aa:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:13 2024 by rpki-client on console-ams.rpki-client.org