Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/1/323830313a38303a3333303a3a2f34382d3438203d3e203533303436.roa
File:                     323830313a38303a3333303a3a2f34382d3438203d3e203533303436.roa (raw, json)
Hash identifier:          WBgDdwJinqGSc6KOfDovTcCO7f4QhE7/wedZc314Upo=
Subject key identifier:   D4:F2:D0:14:CB:EC:71:B7:C7:25:CB:54:86:B5:5D:DD:19:95:2D:88
Certificate issuer:       /CN=D518634D88143C0017F61EB6C5447D28D1D13616
Certificate serial:       2BAF1ACC636724717178C902B92D0DD2A6F9CFE1
Authority key identifier: D5:18:63:4D:88:14:3C:00:17:F6:1E:B6:C5:44:7D:28:D1:D1:36:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D518634D88143C0017F61EB6C5447D28D1D13616.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/1/323830313a38303a3333303a3a2f34382d3438203d3e203533303436.roa
Signing time:             Thu 04 Apr 2024 04:00:18 +0000
ROA not before:           Thu 04 Apr 2024 03:55:18 +0000
ROA not after:            Thu 03 Apr 2025 04:00:18 +0000
asID:                     53046
IP address blocks:        2801:80:330::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:af:1a:cc:63:67:24:71:71:78:c9:02:b9:2d:0d:d2:a6:f9:cf:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D518634D88143C0017F61EB6C5447D28D1D13616
        Validity
            Not Before: Apr  4 03:55:18 2024 GMT
            Not After : Apr  3 04:00:18 2025 GMT
        Subject: CN=D4F2D014CBEC71B7C725CB5486B55DDD19952D88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:29:f8:df:e6:b5:4c:2e:0d:93:0c:5b:84:7e:
                    d5:5b:f1:58:f6:27:92:be:7c:6f:67:2c:97:c0:fc:
                    fa:91:d0:8c:18:49:e4:4c:a2:af:4e:70:34:2d:75:
                    4d:b9:5f:51:46:1d:e4:b9:76:1a:98:b1:b4:5a:72:
                    9b:22:11:5d:0e:bc:01:7a:ac:b2:3f:00:1c:c1:b2:
                    92:21:52:99:60:fc:3e:51:c3:80:af:eb:44:de:04:
                    9a:6e:79:57:98:5c:e0:82:85:41:f0:0b:42:9a:7e:
                    7a:8e:07:b9:aa:36:38:c6:23:62:c9:48:d8:ed:77:
                    be:85:6b:d4:c6:fd:f5:9f:46:5f:f0:37:85:c1:0a:
                    11:4b:d6:59:ec:cb:a6:af:0e:d0:64:b0:c1:d3:ae:
                    4d:c1:6b:77:6f:2c:9f:b6:1f:7f:e0:2c:93:a3:83:
                    1d:ef:c0:56:c3:4d:4f:59:92:d1:4a:b4:43:f0:a8:
                    5e:cb:c9:ab:cb:3e:85:33:95:4b:ff:3f:be:d8:18:
                    f6:00:72:30:2f:d3:a4:17:84:c4:10:b8:21:9f:6c:
                    9b:96:3a:00:41:0c:08:5a:21:ab:89:a4:93:19:99:
                    39:a4:1a:a6:96:d1:8f:7c:08:7d:26:6b:cf:76:74:
                    a7:c0:f1:d8:bf:20:ff:5c:4e:14:31:80:8b:0a:dd:
                    91:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F2:D0:14:CB:EC:71:B7:C7:25:CB:54:86:B5:5D:DD:19:95:2D:88
            X509v3 Authority Key Identifier:
                keyid:D5:18:63:4D:88:14:3C:00:17:F6:1E:B6:C5:44:7D:28:D1:D1:36:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/1/D518634D88143C0017F61EB6C5447D28D1D13616.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D518634D88143C0017F61EB6C5447D28D1D13616.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/1/323830313a38303a3333303a3a2f34382d3438203d3e203533303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:330::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:48:80:22:89:63:5c:99:0e:e3:0a:be:b3:3d:50:f2:b4:ed:
         b8:cc:47:24:e5:2c:5c:3f:a8:f1:cc:7d:bb:0a:50:87:d1:4c:
         6f:1e:be:e2:8d:6e:08:7b:6e:8f:32:0a:c0:15:70:77:d2:80:
         4b:a3:f7:5d:6d:d1:80:1c:ce:c2:00:b6:a3:88:e1:1b:37:64:
         01:3f:80:59:d4:8f:af:61:c3:8e:fe:88:bf:79:6a:d7:50:8b:
         60:4e:10:7f:17:ef:6c:d6:dd:f7:82:f4:03:5a:66:2a:5f:f5:
         0f:a9:73:b6:ef:7d:24:1f:f7:ec:01:15:68:77:7b:e9:a8:09:
         bf:69:71:8d:00:e7:6e:11:95:9a:b6:85:7a:b4:f7:d7:02:82:
         1d:67:2d:4a:d3:ac:a7:e4:9b:ac:71:06:fa:4a:90:6c:99:19:
         10:dc:34:54:d2:d1:be:2e:c7:ac:2f:50:2c:86:df:ce:17:a6:
         17:fe:59:b6:61:59:a7:bf:7f:35:b8:27:86:45:24:47:e2:05:
         7b:a3:8f:dd:8e:84:c3:ef:bb:4c:f4:59:fa:7e:56:ea:73:8c:
         83:04:b7:4e:61:58:07:d0:8a:d8:cb:59:c6:a0:df:c3:31:73:
         ed:08:fb:8a:ea:9b:37:cc:17:e0:24:92:dd:3d:cb:0d:70:86:
         02:a3:92:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org