Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/323830343a353665303a383030303a3a2f33382d3338203d3e20323638303239.roa
File:                     323830343a353665303a383030303a3a2f33382d3338203d3e20323638303239.roa (raw, json)
Hash identifier:          UOd+rjZv1uQSS0A46FPDxRI5Kfk7Y2UYCB+GS1QojLk=
Subject key identifier:   B0:A6:2B:68:D7:E6:AE:13:6E:E4:0D:62:C6:70:DF:FB:F5:7A:1C:21
Certificate issuer:       /CN=5C3115C6BFBB8CC4C3F105A5CD5762C3C6B90621
Certificate serial:       63071352F08D87D3BC62A17E7455182449EE4C91
Authority key identifier: 5C:31:15:C6:BF:BB:8C:C4:C3:F1:05:A5:CD:57:62:C3:C6:B9:06:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C3115C6BFBB8CC4C3F105A5CD5762C3C6B90621.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/323830343a353665303a383030303a3a2f33382d3338203d3e20323638303239.roa
Signing time:             Thu 02 Feb 2023 14:00:13 +0000
ROA not before:           Thu 02 Feb 2023 13:55:13 +0000
ROA not after:            Thu 01 Feb 2024 14:00:13 +0000
asID:                     268029
IP address blocks:        2804:56e0:8000::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:07:13:52:f0:8d:87:d3:bc:62:a1:7e:74:55:18:24:49:ee:4c:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C3115C6BFBB8CC4C3F105A5CD5762C3C6B90621
        Validity
            Not Before: Feb  2 13:55:13 2023 GMT
            Not After : Feb  1 14:00:13 2024 GMT
        Subject: CN=B0A62B68D7E6AE136EE40D62C670DFFBF57A1C21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:eb:8b:c5:64:08:9b:b2:df:be:bc:16:10:d3:
                    c4:ac:aa:de:4c:ef:a2:4d:d0:90:3e:f0:da:ab:7c:
                    3f:01:57:ac:67:c5:01:10:2f:98:cb:68:09:1c:15:
                    38:a5:77:d9:b9:72:c7:47:85:c0:0c:70:2f:1b:de:
                    91:3c:e3:64:c9:8b:ac:51:b4:12:9a:12:7f:28:c0:
                    f7:88:14:f4:82:61:dd:60:a7:5b:e6:e2:04:23:64:
                    be:ea:41:8d:70:40:4e:db:66:38:78:9c:a9:41:46:
                    70:81:de:86:02:65:77:9f:80:63:1d:7e:79:16:95:
                    09:80:06:17:32:ab:81:76:fa:49:e9:98:04:f8:c0:
                    bf:03:b0:d0:e1:0f:de:87:f5:64:5b:28:9d:7a:58:
                    9c:52:39:d5:71:db:51:29:ab:05:05:8b:3e:85:a7:
                    b2:64:30:d3:ed:ac:13:69:45:df:a3:b6:a2:86:1c:
                    44:26:0e:53:ad:42:d6:b1:bd:2a:af:26:c5:ba:c5:
                    c7:27:5e:a5:cb:34:31:08:5f:65:f3:68:e5:f2:ab:
                    25:53:c7:51:9a:6c:87:44:e2:6f:f8:a2:bb:3e:d2:
                    ab:a2:59:3a:e3:7e:cc:17:f9:4e:92:bd:74:cd:66:
                    8d:a1:24:a4:dc:ad:d6:b5:12:0f:7e:46:9b:86:01:
                    36:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A6:2B:68:D7:E6:AE:13:6E:E4:0D:62:C6:70:DF:FB:F5:7A:1C:21
            X509v3 Authority Key Identifier:
                keyid:5C:31:15:C6:BF:BB:8C:C4:C3:F1:05:A5:CD:57:62:C3:C6:B9:06:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/5C3115C6BFBB8CC4C3F105A5CD5762C3C6B90621.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C3115C6BFBB8CC4C3F105A5CD5762C3C6B90621.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/323830343a353665303a383030303a3a2f33382d3338203d3e20323638303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56e0:8000::/38

    Signature Algorithm: sha256WithRSAEncryption
         26:3d:44:40:7e:9a:6f:b8:b8:55:5e:dc:69:71:e0:19:cf:fb:
         63:25:5b:fa:36:a8:b2:c9:e0:d9:aa:7f:88:57:26:5d:b4:ce:
         a2:18:40:5c:c6:f3:21:cd:dd:34:d9:44:28:6e:68:86:76:cb:
         30:78:b6:d6:42:a7:2c:de:2b:26:4c:fc:ac:e9:e9:6e:2b:8e:
         c5:cb:3e:8a:6a:4a:e1:d6:b4:6e:82:a4:b3:12:3a:8a:f9:82:
         ec:9c:0a:63:ad:08:92:c7:a1:7b:f9:3d:99:2e:b5:58:33:73:
         d4:85:39:6e:07:6e:7f:24:9a:be:d4:bb:d6:23:e7:4a:0e:38:
         17:bf:92:3e:80:01:e1:ba:48:27:10:8e:b7:0d:aa:cb:a1:f2:
         db:69:fc:6c:25:79:9a:bd:d5:11:08:7a:b2:9d:0e:cc:06:c4:
         21:ef:eb:73:42:0c:e9:1a:66:5a:be:f9:81:5a:a7:3b:f7:66:
         be:c3:47:b9:81:ef:2a:87:e3:1c:d6:d4:93:2f:fb:d8:1b:59:
         5b:8e:89:8a:39:fe:c7:0c:c5:c0:7e:1e:65:26:77:e7:33:8e:
         43:ba:0c:d2:5a:1f:81:a3:0d:8b:73:67:16:ea:eb:29:2f:af:
         0c:eb:47:62:f8:73:14:44:b3:46:17:4b:0b:d5:aa:51:af:82:
         91:b2:cc:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org