Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/323830343a386163303a3a2f33322d313238203d3e203532383230.roa
File:                     323830343a386163303a3a2f33322d313238203d3e203532383230.roa (raw, json)
Hash identifier:          WvEpfkwTfyQH+Z/17VyKhmBT7kerb1oKVobGPjCxfO8=
Subject key identifier:   9A:84:28:E1:B6:CA:1A:80:DA:30:75:C8:91:8F:1F:90:26:34:25:4C
Certificate issuer:       /CN=9AD89A5EB2A07E57A9B706C1E6AE2AD9327EF3EF
Certificate serial:       2FAF4DC725AE8CBFECAD8356D983862AA7FB7A29
Authority key identifier: 9A:D8:9A:5E:B2:A0:7E:57:A9:B7:06:C1:E6:AE:2A:D9:32:7E:F3:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AD89A5EB2A07E57A9B706C1E6AE2AD9327EF3EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/323830343a386163303a3a2f33322d313238203d3e203532383230.roa
Signing time:             Wed 14 Feb 2024 12:54:51 +0000
ROA not before:           Wed 14 Feb 2024 12:49:51 +0000
ROA not after:            Wed 12 Feb 2025 12:54:51 +0000
asID:                     52820
IP address blocks:        2804:8ac0::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:af:4d:c7:25:ae:8c:bf:ec:ad:83:56:d9:83:86:2a:a7:fb:7a:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AD89A5EB2A07E57A9B706C1E6AE2AD9327EF3EF
        Validity
            Not Before: Feb 14 12:49:51 2024 GMT
            Not After : Feb 12 12:54:51 2025 GMT
        Subject: CN=9A8428E1B6CA1A80DA3075C8918F1F902634254C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2a:52:05:a0:94:7a:81:17:2e:9e:cd:97:e7:
                    ce:79:fd:f7:85:d0:b3:ec:39:f4:32:f4:8e:55:20:
                    fe:91:69:58:59:57:5c:49:c0:7f:ee:c9:5b:e6:1d:
                    35:41:71:33:2e:26:5a:8e:3f:7a:0c:be:48:23:7c:
                    fa:c3:1f:c3:0f:6a:83:c6:c7:9a:a6:35:76:a6:bb:
                    c2:4d:ca:47:81:fa:ac:76:71:2d:12:ef:69:23:04:
                    2a:3e:fe:86:10:39:83:74:02:78:95:97:e6:9f:32:
                    48:18:02:08:43:76:f5:8b:74:64:4f:3c:77:d5:f9:
                    a0:24:03:fd:76:d2:e2:af:cc:a4:3c:fc:5f:8c:ae:
                    9c:69:57:7f:a2:d5:47:e3:0a:1b:08:15:45:37:b8:
                    32:4e:45:fc:33:b0:b5:bf:60:79:74:38:ab:4a:c9:
                    4c:85:97:85:b0:90:77:07:b7:4a:f5:1e:9d:7e:80:
                    99:17:df:f4:a2:c0:32:33:7a:f3:06:93:63:19:7b:
                    44:c2:60:b2:57:38:1a:57:9e:d0:46:3b:87:08:fd:
                    56:17:37:e1:07:e5:ad:6f:71:df:f4:14:70:df:65:
                    fd:e8:22:e7:dd:7c:d7:50:3e:06:9d:37:16:26:c4:
                    d7:39:b2:4f:a1:4b:5c:1a:e2:3e:48:d6:9e:ab:91:
                    cd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:84:28:E1:B6:CA:1A:80:DA:30:75:C8:91:8F:1F:90:26:34:25:4C
            X509v3 Authority Key Identifier:
                keyid:9A:D8:9A:5E:B2:A0:7E:57:A9:B7:06:C1:E6:AE:2A:D9:32:7E:F3:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/9AD89A5EB2A07E57A9B706C1E6AE2AD9327EF3EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AD89A5EB2A07E57A9B706C1E6AE2AD9327EF3EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/323830343a386163303a3a2f33322d313238203d3e203532383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:db:3e:43:5b:0d:c9:4e:b7:ec:84:45:b7:93:5d:dc:41:b5:
         67:06:fc:1d:18:da:ca:b1:a1:e4:f3:d6:4e:5f:d2:28:11:ea:
         f3:78:2f:22:09:21:5a:82:0e:2b:06:11:d9:6e:6e:34:70:96:
         e2:cf:65:00:55:5e:ab:29:d8:39:1a:b9:de:cd:78:66:f2:90:
         f3:49:4f:f7:ac:5a:ad:d1:86:ad:5f:d7:27:86:c9:ff:e0:ae:
         de:42:e7:62:31:c4:b9:fb:0b:fd:92:06:3f:da:d8:8a:65:07:
         96:1e:56:86:79:c9:35:f6:38:1a:ea:f7:f5:68:a0:f3:16:6f:
         80:9b:2f:bb:3f:0f:e1:bf:03:eb:9e:c5:3d:f1:c6:1b:0c:0e:
         15:94:92:9f:1e:6d:b2:39:8e:1a:05:75:f6:ea:12:f8:fd:eb:
         cb:38:10:bd:74:19:55:3d:3c:3f:a7:ab:44:54:17:6d:81:be:
         27:2a:e5:69:ae:1a:cc:60:c7:fd:52:cb:76:12:6a:6a:8d:fb:
         bf:be:7e:8e:b6:fa:78:cf:a6:76:dd:84:bd:53:d5:37:f7:71:
         c8:67:c7:88:18:39:6a:98:97:83:14:79:f5:8a:58:66:d9:61:
         cd:d4:f5:8b:e0:e9:ac:7c:f1:aa:b6:db:fb:46:9f:57:c5:eb:
         af:28:46:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org