Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/323830343a333432343a3a2f33322d313238203d3e20323635343338.roa
File:                     323830343a333432343a3a2f33322d313238203d3e20323635343338.roa (raw, json)
Hash identifier:          OhwDHQjF4U/ixyFmNdLlxHUjls/9+Go/WKmpKtU0H8Y=
Subject key identifier:   62:D5:98:00:B3:B2:B5:E5:7B:7E:3D:41:0B:9F:F3:94:5B:48:38:BF
Certificate issuer:       /CN=62F93EBCC460548EC7142E1C75D4F2D86E0E0469
Certificate serial:       066226AD49BB1296330AD8D897A8EC6370072FA8
Authority key identifier: 62:F9:3E:BC:C4:60:54:8E:C7:14:2E:1C:75:D4:F2:D8:6E:0E:04:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62F93EBCC460548EC7142E1C75D4F2D86E0E0469.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/323830343a333432343a3a2f33322d313238203d3e20323635343338.roa
Signing time:             Tue 02 Apr 2024 13:22:05 +0000
ROA not before:           Tue 02 Apr 2024 13:17:05 +0000
ROA not after:            Tue 01 Apr 2025 13:22:05 +0000
asID:                     265438
IP address blocks:        2804:3424::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:62:26:ad:49:bb:12:96:33:0a:d8:d8:97:a8:ec:63:70:07:2f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62F93EBCC460548EC7142E1C75D4F2D86E0E0469
        Validity
            Not Before: Apr  2 13:17:05 2024 GMT
            Not After : Apr  1 13:22:05 2025 GMT
        Subject: CN=62D59800B3B2B5E57B7E3D410B9FF3945B4838BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:28:85:ff:8b:35:b3:08:e7:23:e4:fc:18:d4:
                    17:31:52:13:a5:c9:9a:b1:a7:fb:e0:08:08:c2:29:
                    05:93:48:63:4e:80:f4:a6:79:f1:e7:ee:50:16:29:
                    b3:ce:bd:b9:74:3d:4d:39:30:44:73:f1:6a:6a:e7:
                    93:e4:c1:93:38:79:3b:04:52:26:9f:9b:b8:4d:35:
                    0a:1a:22:16:d9:38:20:f7:f9:6e:4f:2e:3e:7d:08:
                    e4:5c:94:89:48:87:2e:c5:88:55:2f:75:dd:9f:4d:
                    36:1e:e4:39:9c:99:a0:b3:80:b4:01:93:81:8b:47:
                    35:29:34:31:7e:de:53:e0:1d:ea:35:7f:ab:76:6d:
                    90:5b:6e:dd:e3:77:8d:f5:23:4e:2c:13:8a:c0:7e:
                    89:48:d3:4d:2e:0d:78:3c:22:98:c6:b9:0c:c4:0e:
                    a1:47:8d:0c:d1:1c:68:41:b0:50:3d:5b:53:02:f8:
                    96:46:bd:07:a3:d8:00:e8:43:49:71:42:15:7b:64:
                    15:6b:b7:85:b6:45:85:f4:73:14:0d:aa:8c:2c:ad:
                    24:82:97:bb:74:ae:4f:b7:02:67:99:e7:bc:ff:a1:
                    4f:15:44:97:86:a8:17:9c:b7:e5:2c:d8:69:c6:a8:
                    c4:fd:d6:1a:52:70:d1:a0:c1:e7:02:2f:31:74:f9:
                    9b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D5:98:00:B3:B2:B5:E5:7B:7E:3D:41:0B:9F:F3:94:5B:48:38:BF
            X509v3 Authority Key Identifier:
                keyid:62:F9:3E:BC:C4:60:54:8E:C7:14:2E:1C:75:D4:F2:D8:6E:0E:04:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/62F93EBCC460548EC7142E1C75D4F2D86E0E0469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62F93EBCC460548EC7142E1C75D4F2D86E0E0469.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/323830343a333432343a3a2f33322d313238203d3e20323635343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3424::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:01:f6:b4:03:57:a4:ed:36:d2:5c:9f:da:f6:35:8d:cc:8a:
         e8:b4:e3:dc:54:0d:79:d1:68:f7:c8:73:f2:7a:2a:e0:9f:cd:
         6e:de:c9:20:fe:20:a5:9c:71:fd:55:8e:2b:8b:e1:bf:41:1c:
         1f:a2:8f:98:0b:c6:1c:ec:5b:50:3f:d9:58:4f:86:5a:52:d7:
         f4:50:ec:75:a1:c2:21:9e:3f:47:23:8d:4c:9b:01:1d:64:15:
         89:a7:54:4e:8e:ce:38:71:75:fa:e5:d8:03:0f:00:ff:c5:00:
         d1:a2:c0:3d:54:ac:4d:8c:cb:57:cb:8b:55:23:a3:77:43:9b:
         65:2c:0d:2c:21:89:91:63:b5:43:49:da:10:cb:44:c4:7c:51:
         1d:e1:bc:cb:eb:bc:73:bf:e2:86:4b:44:09:64:1b:1e:8a:c2:
         16:94:13:bc:3d:1a:a6:43:73:fe:a2:7e:29:be:b2:e3:c7:44:
         e8:35:73:d1:ee:e3:ed:5f:3a:2a:ec:48:62:0a:71:0c:f5:ef:
         17:5f:de:62:71:84:07:52:e2:fa:d2:10:06:e4:07:e2:95:51:
         11:38:0b:f0:7d:fe:b1:37:cd:a8:36:6b:cd:92:4d:f5:0b:7c:
         33:eb:3b:68:c4:82:5a:fb:0d:b3:3e:fd:ae:8c:a1:72:c9:dd:
         82:79:c9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:16 2024 by rpki-client on console-ams.rpki-client.org