Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/0/323830343a326161343a313030303a3a2f34312d3431203d3e20323634303836.roa
File:                     323830343a326161343a313030303a3a2f34312d3431203d3e20323634303836.roa (raw, json)
Hash identifier:          fjbyup9mMOeMpaIWrcNcXe/vQaIA0CfRyE+RBHXV1SU=
Subject key identifier:   28:6D:89:F3:D3:96:70:0E:03:C6:F0:89:47:E1:7B:5A:1B:D3:59:87
Certificate issuer:       /CN=6288A572C089CF7DE0C87770C42EAC2ADABF153F
Certificate serial:       190DE937C0536E929054D0D45FD7BE0264B1FBD0
Authority key identifier: 62:88:A5:72:C0:89:CF:7D:E0:C8:77:70:C4:2E:AC:2A:DA:BF:15:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6288A572C089CF7DE0C87770C42EAC2ADABF153F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/0/323830343a326161343a313030303a3a2f34312d3431203d3e20323634303836.roa
Signing time:             Thu 09 Nov 2023 14:14:07 +0000
ROA not before:           Thu 09 Nov 2023 14:09:07 +0000
ROA not after:            Thu 07 Nov 2024 14:14:07 +0000
asID:                     264086
IP address blocks:        2804:2aa4:1000::/41 maxlen: 41

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:0d:e9:37:c0:53:6e:92:90:54:d0:d4:5f:d7:be:02:64:b1:fb:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6288A572C089CF7DE0C87770C42EAC2ADABF153F
        Validity
            Not Before: Nov  9 14:09:07 2023 GMT
            Not After : Nov  7 14:14:07 2024 GMT
        Subject: CN=286D89F3D396700E03C6F08947E17B5A1BD35987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:77:62:8f:ed:f3:2b:a7:1f:b6:eb:8d:ca:c1:
                    d5:a3:bf:d1:07:55:73:40:0f:73:d5:e4:71:ce:6c:
                    cb:93:41:d0:7b:43:6b:85:32:71:29:c4:cf:37:08:
                    20:6a:06:65:1d:f7:7b:12:42:4d:8c:cc:fa:89:cb:
                    11:3f:7f:3e:c3:36:3b:0e:ec:81:b9:ac:b2:be:ab:
                    ba:3e:50:13:40:73:aa:bd:99:bd:3f:90:fb:47:d7:
                    38:dc:27:ac:e6:3a:32:7d:fd:b0:0e:10:b0:e9:04:
                    36:fa:9f:e0:4a:0f:52:e6:13:f0:96:95:51:b7:26:
                    fb:60:1a:63:24:ed:10:fe:a9:b6:73:9a:96:1c:cc:
                    c4:f8:28:08:79:db:29:c6:10:9b:89:a6:a7:d8:41:
                    f1:42:9b:69:35:85:29:37:bb:53:cd:2f:50:3a:29:
                    24:a6:05:48:8f:51:d9:83:cd:ce:95:9c:3d:e3:c7:
                    4a:05:22:47:22:b6:a7:fc:11:b2:a4:be:ab:94:95:
                    dc:3a:6d:09:22:d0:a7:8d:b5:51:19:42:c7:f0:e8:
                    20:ec:ba:ff:d4:ed:94:57:5e:81:61:98:2c:3b:74:
                    99:ab:2b:4b:9f:9f:1f:a2:e8:bd:ca:73:dd:44:df:
                    89:e9:05:1e:b1:3a:a0:de:57:04:8b:cf:4b:1c:bb:
                    09:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:6D:89:F3:D3:96:70:0E:03:C6:F0:89:47:E1:7B:5A:1B:D3:59:87
            X509v3 Authority Key Identifier:
                keyid:62:88:A5:72:C0:89:CF:7D:E0:C8:77:70:C4:2E:AC:2A:DA:BF:15:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/0/6288A572C089CF7DE0C87770C42EAC2ADABF153F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6288A572C089CF7DE0C87770C42EAC2ADABF153F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/0/323830343a326161343a313030303a3a2f34312d3431203d3e20323634303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2aa4:1000::/41

    Signature Algorithm: sha256WithRSAEncryption
         8f:f2:86:ce:df:5f:69:62:2a:04:25:51:d9:31:d7:5c:18:5c:
         93:44:c7:86:22:1a:8b:b1:87:24:39:f5:f7:57:7b:07:59:4c:
         f3:ae:35:6c:97:c7:cd:b4:84:1e:30:39:91:bf:03:ca:e0:7e:
         fe:f8:30:42:08:87:45:a9:4a:72:b7:f3:00:4a:d2:c9:b2:8d:
         3f:c4:7c:fa:f3:a2:bf:e4:1f:f1:31:b6:f9:eb:4a:ef:95:8b:
         87:6a:98:91:86:1a:1d:0d:14:dd:1a:c0:c3:50:2b:a1:9c:f0:
         b9:a4:e1:fd:52:f5:92:37:b8:8d:47:29:d8:73:6d:7c:1a:d4:
         1e:a8:37:78:2b:97:c4:96:64:2e:af:e6:98:53:ec:07:2e:36:
         e5:b4:94:4b:60:f6:e2:a5:57:ef:8d:19:e4:ce:c9:3f:b5:cc:
         a2:78:cb:16:7e:df:dd:d5:c5:f8:43:62:37:0e:3f:b1:3c:8e:
         af:9f:24:b7:d1:f5:45:f5:5d:cb:2c:18:af:90:34:c9:5f:97:
         61:c9:51:a9:f5:5c:b4:20:83:f4:b7:ea:85:ef:83:c9:1e:29:
         e4:34:02:86:b2:53:c3:11:c1:c5:cb:b0:68:69:df:f4:4e:fc:
         55:40:d8:08:9f:61:d8:c1:9e:ff:73:05:66:2b:64:d6:0e:ca:
         f5:60:96:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org