Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/1/323830343a343030343a3a2f33322d3438203d3e20323635393238.roa
File:                     323830343a343030343a3a2f33322d3438203d3e20323635393238.roa (raw, json)
Hash identifier:          wF1vPYZhILsHHHiaXm9XX7wRkVhI2HbPGwTubmiQ0GI=
Subject key identifier:   6F:BB:C9:DD:9B:F1:3A:09:B3:76:35:E2:7F:D6:48:53:9E:6C:D0:D9
Certificate issuer:       /CN=7D87803AADE4FAB354332024BD3E83AC91500147
Certificate serial:       2D73A358937CD32692A217EFA035C8E47D88C34A
Authority key identifier: 7D:87:80:3A:AD:E4:FA:B3:54:33:20:24:BD:3E:83:AC:91:50:01:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D87803AADE4FAB354332024BD3E83AC91500147.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/1/323830343a343030343a3a2f33322d3438203d3e20323635393238.roa
Signing time:             Thu 04 Apr 2024 01:59:19 +0000
ROA not before:           Thu 04 Apr 2024 01:54:19 +0000
ROA not after:            Thu 03 Apr 2025 01:59:19 +0000
asID:                     265928
IP address blocks:        2804:4004::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:73:a3:58:93:7c:d3:26:92:a2:17:ef:a0:35:c8:e4:7d:88:c3:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D87803AADE4FAB354332024BD3E83AC91500147
        Validity
            Not Before: Apr  4 01:54:19 2024 GMT
            Not After : Apr  3 01:59:19 2025 GMT
        Subject: CN=6FBBC9DD9BF13A09B37635E27FD648539E6CD0D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0a:9b:c1:de:f1:bb:1b:d9:03:c7:a0:3f:d2:
                    cf:f3:b5:26:a9:12:0e:4f:bb:48:bd:fe:69:eb:31:
                    f5:5d:f8:7e:26:bb:c4:ee:2c:fe:12:13:15:c0:eb:
                    ff:29:e5:44:de:4c:87:0e:89:75:15:a4:1d:04:3a:
                    fd:0f:9e:57:6f:9f:95:f7:4c:f9:33:82:48:bf:ad:
                    6a:f4:6c:c5:50:51:15:fc:c9:66:a6:8a:a9:67:d5:
                    ad:50:4e:18:b3:e1:70:d4:e5:de:24:45:b5:37:a1:
                    22:11:ad:be:be:22:95:35:27:53:c4:ce:6e:b6:37:
                    f4:58:6a:6c:38:26:90:cf:c1:90:fc:20:90:fa:32:
                    54:f1:64:56:5a:64:8c:5c:3b:bc:4d:ba:12:f2:57:
                    fa:d2:fa:24:c6:fe:e5:be:52:cf:85:07:16:5e:b6:
                    e9:b0:5d:de:23:c2:9f:6f:c5:12:d2:1a:62:9f:86:
                    de:cb:44:ce:13:fc:11:90:37:1e:0e:94:04:a0:40:
                    f8:7e:5a:fb:b1:43:3d:2a:ac:dd:6b:42:45:3b:26:
                    e8:9e:cb:6b:51:04:e2:72:25:05:e3:e7:ca:d0:5c:
                    24:26:dc:ba:20:79:ea:12:23:f0:3b:77:ca:8a:e6:
                    c6:d9:08:f2:f7:d0:e6:92:0b:97:86:ab:d0:56:6f:
                    fa:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BB:C9:DD:9B:F1:3A:09:B3:76:35:E2:7F:D6:48:53:9E:6C:D0:D9
            X509v3 Authority Key Identifier:
                keyid:7D:87:80:3A:AD:E4:FA:B3:54:33:20:24:BD:3E:83:AC:91:50:01:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/1/7D87803AADE4FAB354332024BD3E83AC91500147.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D87803AADE4FAB354332024BD3E83AC91500147.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/1/323830343a343030343a3a2f33322d3438203d3e20323635393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4004::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:ac:2c:98:3e:5e:68:cd:7f:3f:e7:1a:b7:ba:f7:43:98:ee:
         bc:55:81:08:9a:a4:9d:f9:06:49:0f:9c:81:90:16:63:91:64:
         d5:6b:bf:59:cd:2e:5a:99:e0:64:51:b6:42:20:80:b1:ae:e9:
         45:c1:6b:f7:e7:a2:70:2b:31:ee:1c:e6:a8:10:5e:a8:a7:9d:
         04:17:41:5b:b0:6b:21:35:2a:00:8b:1b:93:78:7e:47:40:67:
         53:e8:49:a9:0e:28:35:68:13:a2:41:fb:5b:93:00:87:89:65:
         28:f8:c6:c0:11:e1:55:55:b8:1a:ac:3d:30:de:aa:7e:08:ec:
         1f:ab:7e:91:93:56:d5:cd:5e:94:af:e4:5a:e8:10:d5:2e:29:
         ce:ce:93:f0:9b:5d:79:89:2a:5b:12:83:06:ca:23:9f:7e:44:
         0b:48:4c:f6:d0:2b:4a:e4:55:b4:2f:27:94:16:e7:a2:fe:81:
         0d:7d:ec:3a:31:0d:ed:bf:ff:a6:14:9e:e9:45:e9:c0:69:63:
         dc:cf:5a:3a:2c:69:db:33:af:0a:b1:a7:8a:a9:2e:a9:17:d3:
         9a:d4:0e:8d:45:a8:fb:44:fa:05:99:27:89:58:02:32:3f:c6:
         ca:f6:6c:28:ff:03:cd:96:e7:24:77:45:a2:3f:4d:39:4d:d4:
         21:47:9c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 10 16:43:57 2024 by rpki-client on console-ams.rpki-client.org