Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/0/323830343a326634343a3a2f33322d313238203d3e20323634383831.roa
File:                     323830343a326634343a3a2f33322d313238203d3e20323634383831.roa (raw, json)
Hash identifier:          tgSKg8NR1Bo0k9iAdQKUKcgyKRI3gGAhgv8mzVnNIG4=
Subject key identifier:   E1:CE:F0:A1:4E:B6:F8:45:8B:22:8B:38:B3:4C:8E:CF:AF:C1:7D:46
Certificate issuer:       /CN=68F7E0637F23C3E9F644A9B6531704BBCBE7AA0E
Certificate serial:       668BC79A499A5CEA39C20415A8ED7FB468C9912A
Authority key identifier: 68:F7:E0:63:7F:23:C3:E9:F6:44:A9:B6:53:17:04:BB:CB:E7:AA:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68F7E0637F23C3E9F644A9B6531704BBCBE7AA0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/0/323830343a326634343a3a2f33322d313238203d3e20323634383831.roa
Signing time:             Thu 21 Mar 2024 20:54:14 +0000
ROA not before:           Thu 21 Mar 2024 20:49:14 +0000
ROA not after:            Thu 20 Mar 2025 20:54:14 +0000
asID:                     264881
IP address blocks:        2804:2f44::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:8b:c7:9a:49:9a:5c:ea:39:c2:04:15:a8:ed:7f:b4:68:c9:91:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68F7E0637F23C3E9F644A9B6531704BBCBE7AA0E
        Validity
            Not Before: Mar 21 20:49:14 2024 GMT
            Not After : Mar 20 20:54:14 2025 GMT
        Subject: CN=E1CEF0A14EB6F8458B228B38B34C8ECFAFC17D46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:18:5e:57:ca:b4:70:d0:25:b2:37:a8:a6:60:
                    dc:91:d0:63:fb:46:57:73:95:14:c4:de:17:40:ab:
                    94:63:cc:72:14:5c:d1:41:94:cb:0f:60:36:22:62:
                    5e:40:d7:22:b9:77:21:75:3d:b2:ad:0e:32:fd:3a:
                    81:63:59:d8:ca:e7:07:10:ee:ef:3f:f6:34:ee:5d:
                    e6:0e:26:b7:3c:66:cc:fd:7c:9b:29:3e:ce:d1:9c:
                    9e:4a:ef:1e:d8:e2:e6:74:ab:0e:51:53:5f:32:37:
                    75:31:d8:6e:01:6d:06:2f:62:d5:aa:f9:2d:cd:d8:
                    0b:82:35:14:77:37:8c:ff:aa:fc:48:17:d3:38:4d:
                    5d:95:97:68:1a:48:14:3e:f8:19:fb:70:b4:75:9f:
                    d7:71:70:f7:55:bc:bc:cd:15:d8:ba:36:61:85:57:
                    69:82:fe:9b:65:c8:70:ec:fc:8b:91:bd:90:c0:87:
                    e4:a4:c0:de:93:e4:ef:c5:a2:b1:06:05:a3:04:f4:
                    2e:cc:28:0a:bf:c7:9f:2b:5a:33:81:b4:8d:f8:55:
                    9e:53:52:46:be:03:7f:f0:aa:b0:91:1a:47:50:1c:
                    f5:06:ea:da:64:60:9d:a6:af:7f:86:c5:46:9e:63:
                    ba:b2:b0:f2:16:48:06:0a:c5:a7:ea:a6:4d:cb:2c:
                    ac:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:CE:F0:A1:4E:B6:F8:45:8B:22:8B:38:B3:4C:8E:CF:AF:C1:7D:46
            X509v3 Authority Key Identifier:
                keyid:68:F7:E0:63:7F:23:C3:E9:F6:44:A9:B6:53:17:04:BB:CB:E7:AA:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/0/68F7E0637F23C3E9F644A9B6531704BBCBE7AA0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68F7E0637F23C3E9F644A9B6531704BBCBE7AA0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/0/323830343a326634343a3a2f33322d313238203d3e20323634383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f44::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:23:13:a5:19:1f:a0:68:02:5b:72:9c:10:3e:aa:5a:e8:c6:
         53:94:7d:10:55:a7:8d:ac:66:ec:ac:5d:75:ce:d5:9e:fd:6e:
         e2:45:d5:8e:db:61:79:dd:ed:ab:17:e2:22:e1:a6:dd:f3:2b:
         47:6b:2a:01:4c:8d:dd:84:63:9b:70:9b:04:c1:63:67:f0:0b:
         bd:d5:7c:92:10:6a:ca:9f:78:95:8a:ca:dd:c1:e9:fa:5a:4d:
         29:c1:49:61:5b:a4:98:c7:3c:6e:48:54:cf:ca:42:f2:4f:a7:
         26:89:db:a4:22:e1:cd:61:b8:01:64:b3:69:73:5f:39:90:4e:
         14:22:57:bb:7f:36:e1:38:2e:b4:d4:4b:87:34:4f:13:37:02:
         7f:b6:d7:ad:0b:6a:b2:4e:ed:0d:ef:a9:73:c4:b8:f2:6e:38:
         3f:3f:53:11:0b:26:89:9c:01:1f:aa:ff:91:1a:e6:75:97:5f:
         88:bb:d5:3a:4e:c7:8b:dc:2d:20:a6:09:a3:27:5b:a4:6c:5b:
         4b:24:a6:3c:76:39:7c:18:be:a2:f5:89:c4:0a:c1:dd:cf:70:
         77:4f:83:0c:46:82:d6:ca:2b:1b:a4:b3:90:ee:a7:1b:43:77:
         c6:2b:9d:30:11:e3:d6:ac:18:4e:c8:44:11:77:f1:ea:46:7f:
         b8:ee:48:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org