Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/323830343a346462633a3a2f33322d3438203d3e20323638323136.roa
File:                     323830343a346462633a3a2f33322d3438203d3e20323638323136.roa (raw, json)
Hash identifier:          F+Zy/Qe7NtnQ7Qwv9SKop0TuW+hDRr14Ba4+GFd5MKg=
Subject key identifier:   2E:6F:69:0F:E6:A5:C1:F0:40:0E:3A:EA:6B:0D:42:AC:79:0F:F7:B5
Certificate issuer:       /CN=4112E3731E0AE560372831E75ED6420E95EFCFE1
Certificate serial:       7B083676895658EE37E4A912DEFF8F4F6D16BC7F
Authority key identifier: 41:12:E3:73:1E:0A:E5:60:37:28:31:E7:5E:D6:42:0E:95:EF:CF:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4112E3731E0AE560372831E75ED6420E95EFCFE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/323830343a346462633a3a2f33322d3438203d3e20323638323136.roa
Signing time:             Thu 21 Mar 2024 00:06:54 +0000
ROA not before:           Thu 21 Mar 2024 00:01:54 +0000
ROA not after:            Thu 20 Mar 2025 00:06:54 +0000
asID:                     268216
IP address blocks:        2804:4dbc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:08:36:76:89:56:58:ee:37:e4:a9:12:de:ff:8f:4f:6d:16:bc:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4112E3731E0AE560372831E75ED6420E95EFCFE1
        Validity
            Not Before: Mar 21 00:01:54 2024 GMT
            Not After : Mar 20 00:06:54 2025 GMT
        Subject: CN=2E6F690FE6A5C1F0400E3AEA6B0D42AC790FF7B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3a:2e:a4:ed:19:94:71:7e:58:10:46:d6:3e:
                    5c:76:a6:96:0e:06:0a:0d:01:2a:95:4e:7e:20:42:
                    78:21:66:e6:aa:5d:21:e6:14:94:02:11:7f:95:2b:
                    49:1b:c9:de:77:64:92:2d:87:db:e0:da:75:ec:b7:
                    09:1e:91:67:21:53:2c:a2:bb:a2:ef:6c:ca:87:6d:
                    13:4f:86:0a:dd:e8:d6:25:91:4b:3d:f7:5a:4b:fb:
                    c1:c9:bc:f7:13:37:f6:f3:a6:df:8d:7d:2c:55:3b:
                    44:96:ac:a7:a7:9c:57:ac:22:6d:a2:c2:0a:39:e0:
                    2f:63:43:44:72:68:e6:14:60:d2:b0:2e:0d:93:00:
                    80:c1:a9:26:b3:d4:d2:e9:f3:d4:aa:e3:1f:85:96:
                    8e:fa:69:ed:df:79:6e:40:cc:53:f8:c4:0a:fd:71:
                    65:86:e2:38:9a:2e:05:4b:ed:fe:b4:a6:a8:d0:81:
                    d7:25:3c:9e:36:dd:b1:b7:48:f7:0c:58:8e:e7:f6:
                    00:03:da:e2:4f:96:9a:72:b0:27:14:09:60:e8:0d:
                    a4:48:a4:c8:e1:ef:72:11:3e:d1:60:fd:2b:80:f8:
                    3a:86:d0:d7:23:4a:f6:c1:a3:80:f1:0b:96:94:11:
                    38:11:3e:e0:d0:70:8f:0d:64:6a:f2:b1:a0:af:19:
                    62:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:6F:69:0F:E6:A5:C1:F0:40:0E:3A:EA:6B:0D:42:AC:79:0F:F7:B5
            X509v3 Authority Key Identifier:
                keyid:41:12:E3:73:1E:0A:E5:60:37:28:31:E7:5E:D6:42:0E:95:EF:CF:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/4112E3731E0AE560372831E75ED6420E95EFCFE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4112E3731E0AE560372831E75ED6420E95EFCFE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/323830343a346462633a3a2f33322d3438203d3e20323638323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4dbc::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:51:bb:b2:5e:db:4b:c1:94:46:5b:c1:48:e9:68:94:68:5c:
         83:38:d3:b4:02:76:45:86:e1:a2:7a:bf:9c:02:71:e8:50:81:
         22:5b:e5:f6:fc:a6:fd:d6:5a:ac:79:57:40:87:5b:4b:04:d7:
         b7:9b:19:f6:5a:d4:6a:d7:31:51:80:3e:77:9d:ab:31:3b:6b:
         dc:79:53:bb:ca:28:32:8e:0b:ed:29:05:e0:2d:9d:26:b2:6c:
         67:1d:c9:6d:07:c5:ef:d0:43:4d:b2:2d:93:7d:f1:24:7d:79:
         8e:c4:bc:6a:d0:e2:db:a4:a8:6a:87:2f:25:eb:0b:18:0d:09:
         a5:a1:3c:4e:e5:c9:a7:d5:ea:42:89:0b:5b:d6:e9:f4:84:51:
         f3:d9:c3:fe:19:4a:62:d8:21:0b:01:35:5a:25:0c:d9:44:10:
         05:49:bd:2f:c2:4b:a6:a5:b2:fd:b2:b3:b0:62:bc:dd:2d:40:
         11:18:7c:28:33:22:8a:f6:0d:cb:0a:bb:23:94:6a:ff:14:ce:
         63:2a:b8:20:9a:4d:3a:d9:f5:2b:f3:9f:b6:c1:12:c1:78:41:
         0c:5b:f8:9a:82:11:23:b4:f2:15:e2:2d:42:66:c8:f7:c3:a0:
         32:47:c3:1e:6c:17:26:fc:50:f4:2d:cd:cd:34:cc:b1:4c:18:
         8d:66:fb:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org