Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6CkyE4m3WEX8of93tECC3QN875XnJtEHd4BUEtATXUnw/1/323830343a363839383a3a2f33322d3336203d3e20323639373033.roa
File:                     323830343a363839383a3a2f33322d3336203d3e20323639373033.roa (raw, json)
Hash identifier:          d7RHj4phz0wbJ7S2nFM2GXhmtnahhOZORKDKhnfJpFk=
Subject key identifier:   60:1E:FD:3C:A9:A3:3B:7E:33:02:B7:BC:DA:B0:2E:F0:D6:09:E1:A4
Certificate issuer:       /CN=3F624DC73663F6020124EB9373C3E190C2003FD8
Certificate serial:       28AE17C7724612A0BD119CC235547E9DEFD59F06
Authority key identifier: 3F:62:4D:C7:36:63:F6:02:01:24:EB:93:73:C3:E1:90:C2:00:3F:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F624DC73663F6020124EB9373C3E190C2003FD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CkyE4m3WEX8of93tECC3QN875XnJtEHd4BUEtATXUnw/1/323830343a363839383a3a2f33322d3336203d3e20323639373033.roa
Signing time:             Thu 04 Apr 2024 16:22:22 +0000
ROA not before:           Thu 04 Apr 2024 16:17:22 +0000
ROA not after:            Thu 03 Apr 2025 16:22:22 +0000
asID:                     269703
IP address blocks:        2804:6898::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ae:17:c7:72:46:12:a0:bd:11:9c:c2:35:54:7e:9d:ef:d5:9f:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F624DC73663F6020124EB9373C3E190C2003FD8
        Validity
            Not Before: Apr  4 16:17:22 2024 GMT
            Not After : Apr  3 16:22:22 2025 GMT
        Subject: CN=601EFD3CA9A33B7E3302B7BCDAB02EF0D609E1A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:08:f4:3a:02:e4:23:ab:d7:9b:ed:e9:c0:91:
                    de:3f:49:f2:1c:db:5c:24:c4:f6:b2:a0:8e:91:25:
                    e1:ef:9c:10:7e:61:c8:5a:ea:64:15:7d:18:1f:7c:
                    22:fc:2d:b9:c3:83:4e:c3:d1:12:0f:36:0c:e0:20:
                    5e:cb:9f:10:f1:05:b3:18:db:19:ff:1a:0a:33:ad:
                    b1:68:b4:7c:ae:2c:17:3d:1d:2a:1b:af:5b:22:44:
                    8f:c0:28:7f:8d:40:2a:48:18:42:e4:6f:b1:b7:32:
                    0f:e6:9a:59:0a:15:2b:e2:5e:34:56:b5:ca:64:0b:
                    4c:0c:bb:77:16:16:47:77:00:4d:42:20:aa:5c:95:
                    05:94:a0:49:74:50:be:75:de:eb:65:fc:23:d2:ee:
                    36:f6:fd:25:5e:7b:80:9b:c2:58:ac:48:4c:0a:6d:
                    31:2c:b9:8f:4e:22:a5:e5:0f:21:20:eb:82:b5:21:
                    d0:da:52:6d:75:6f:56:71:0d:46:f5:0c:5f:71:1f:
                    c1:10:27:c9:ea:67:14:86:f0:60:c2:56:a2:eb:99:
                    67:5f:9d:af:8b:24:0f:90:37:ff:25:4b:93:29:be:
                    a3:c0:48:73:68:5b:11:92:3a:2d:28:2f:bb:ff:3c:
                    d8:00:7c:65:1a:1f:8c:25:29:57:d5:1f:41:a7:da:
                    77:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:1E:FD:3C:A9:A3:3B:7E:33:02:B7:BC:DA:B0:2E:F0:D6:09:E1:A4
            X509v3 Authority Key Identifier:
                keyid:3F:62:4D:C7:36:63:F6:02:01:24:EB:93:73:C3:E1:90:C2:00:3F:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CkyE4m3WEX8of93tECC3QN875XnJtEHd4BUEtATXUnw/1/3F624DC73663F6020124EB9373C3E190C2003FD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F624DC73663F6020124EB9373C3E190C2003FD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CkyE4m3WEX8of93tECC3QN875XnJtEHd4BUEtATXUnw/1/323830343a363839383a3a2f33322d3336203d3e20323639373033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6898::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:37:da:8c:fe:56:fb:48:df:46:33:d0:76:7d:f4:35:2c:86:
         7a:52:f3:b6:9c:79:76:71:47:ed:5c:56:6b:e2:d4:09:6b:81:
         8b:a8:5d:3c:f7:8b:53:de:53:c0:a1:46:09:bb:54:b3:10:17:
         4b:64:ff:d6:3f:45:fd:78:7e:f7:15:26:a6:bc:84:b7:6d:0d:
         70:ab:5b:b8:bc:6d:45:4c:bd:cc:d3:01:ac:a8:4f:ad:13:9d:
         e7:ce:1d:06:28:e0:86:b8:9c:da:4e:51:16:6c:01:d8:dd:78:
         c6:93:4f:94:87:e6:16:e7:d0:6d:9b:47:34:de:a1:cf:03:f9:
         5c:54:67:bd:82:a1:4c:3f:60:9e:1f:85:36:07:4a:f1:08:73:
         f1:f2:69:1a:9d:56:85:2c:dd:b0:47:26:59:d1:7d:75:d8:72:
         5d:a7:62:39:a6:80:ed:74:9d:4d:42:11:ef:65:ae:dd:ac:be:
         6a:75:64:82:5a:da:e9:0e:96:dd:80:9d:ce:1c:41:bd:44:35:
         41:de:3a:5d:31:97:4f:a0:d3:29:f9:be:fe:65:46:e6:37:38:
         66:53:61:05:72:34:1b:dd:b8:31:b6:69:73:10:df:74:5c:10:
         3b:7b:5f:85:04:a8:05:e7:32:ac:10:a8:e1:5c:7a:7f:0b:89:
         c7:e4:d6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org