Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/1/323830343a316630343a3a2f33322d3438203d3e203533303436.roa
File:                     323830343a316630343a3a2f33322d3438203d3e203533303436.roa (raw, json)
Hash identifier:          iD4zQ4FDoi+qkpXlqaUTtegJgZVxR1dC8BE1sCAhkPE=
Subject key identifier:   9A:49:EF:51:0D:FA:56:EE:63:55:F7:27:05:1F:A3:04:10:6D:6C:DB
Certificate issuer:       /CN=D518634D88143C0017F61EB6C5447D28D1D13616
Certificate serial:       5336719DDB9D993B5A96DAB30F572319A7ECEBB8
Authority key identifier: D5:18:63:4D:88:14:3C:00:17:F6:1E:B6:C5:44:7D:28:D1:D1:36:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D518634D88143C0017F61EB6C5447D28D1D13616.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/1/323830343a316630343a3a2f33322d3438203d3e203533303436.roa
Signing time:             Thu 04 Apr 2024 04:00:19 +0000
ROA not before:           Thu 04 Apr 2024 03:55:19 +0000
ROA not after:            Thu 03 Apr 2025 04:00:19 +0000
asID:                     53046
IP address blocks:        2804:1f04::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:36:71:9d:db:9d:99:3b:5a:96:da:b3:0f:57:23:19:a7:ec:eb:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D518634D88143C0017F61EB6C5447D28D1D13616
        Validity
            Not Before: Apr  4 03:55:19 2024 GMT
            Not After : Apr  3 04:00:19 2025 GMT
        Subject: CN=9A49EF510DFA56EE6355F727051FA304106D6CDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fb:ff:ef:7e:13:a9:fe:ee:36:a9:78:7d:57:
                    c7:4b:6e:65:d2:f2:27:e0:a2:5e:32:22:38:fa:50:
                    a5:c8:e1:e5:81:a3:5a:55:4d:0b:85:20:75:c4:9b:
                    d0:73:fa:7c:a1:06:eb:c7:1f:ac:5d:dc:be:cb:0b:
                    b3:07:ae:ab:10:ca:22:7e:b7:5b:ac:ef:39:32:83:
                    fc:4c:c7:23:26:1a:9b:e8:55:dd:08:c6:e7:7d:91:
                    99:f1:db:cc:c5:bd:3b:b7:a8:53:51:96:fa:4c:c1:
                    aa:0b:02:91:f4:5a:9d:9a:9b:a6:f3:c5:65:cd:37:
                    dc:53:32:15:17:19:47:7c:7a:54:35:a1:1d:2d:4f:
                    31:11:43:0e:fb:0e:6d:e7:1d:5f:5f:8d:82:be:c8:
                    ce:fd:fc:07:b1:f8:f3:6b:25:95:84:ab:12:13:93:
                    50:30:74:20:c7:7d:d5:5c:46:fa:39:e9:ac:46:91:
                    26:4e:8c:d7:5a:30:67:2d:b1:7a:e1:5a:52:67:f0:
                    fb:8b:08:0d:97:c6:9f:e0:b7:70:cd:cf:f7:72:7b:
                    ed:16:df:fc:15:30:21:48:e2:4c:d2:a5:7b:d6:73:
                    f0:52:39:1c:a9:46:1a:a2:73:25:b8:79:b4:85:62:
                    ca:e1:28:db:e6:e2:e9:39:d1:75:17:35:a5:cb:a2:
                    2d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:49:EF:51:0D:FA:56:EE:63:55:F7:27:05:1F:A3:04:10:6D:6C:DB
            X509v3 Authority Key Identifier:
                keyid:D5:18:63:4D:88:14:3C:00:17:F6:1E:B6:C5:44:7D:28:D1:D1:36:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/1/D518634D88143C0017F61EB6C5447D28D1D13616.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D518634D88143C0017F61EB6C5447D28D1D13616.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/1/323830343a316630343a3a2f33322d3438203d3e203533303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1f04::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:b2:e2:99:98:34:ee:ed:f5:42:53:37:c0:c4:1c:a6:5d:23:
         a4:7f:8f:f5:89:e4:87:f0:2a:eb:10:8a:b2:9a:49:03:35:72:
         68:54:f0:b2:0c:fc:a3:93:60:51:3e:82:0e:d4:50:68:2d:99:
         b0:a1:7a:51:61:6d:8d:92:e0:d1:88:ee:33:0c:9a:79:01:44:
         10:00:55:a5:56:b6:5a:13:60:62:10:40:b0:cc:1f:36:03:6e:
         be:2b:21:2c:60:0a:59:58:a1:00:2a:07:dd:ff:2b:b2:ba:b4:
         a7:cd:33:62:9a:75:81:05:09:2e:e5:ca:1e:65:2e:c9:68:0d:
         63:c8:e9:77:2d:44:ec:eb:7c:73:dc:8b:b7:40:07:cc:ae:13:
         a9:ff:80:1e:95:17:86:03:f7:0c:5d:6f:2e:60:d3:fc:1c:cd:
         ab:0b:fb:2c:7e:87:63:53:40:94:1e:d0:f7:e7:9d:2c:40:60:
         0c:9c:7b:32:d8:96:d0:eb:71:7b:14:a0:a3:3c:79:71:bb:4e:
         cb:fd:35:79:19:a3:d3:16:ae:15:48:cb:9e:09:5a:6b:d1:3e:
         23:78:da:2c:3b:0c:e1:f6:70:6f:28:f3:40:ce:66:ab:b0:f6:
         d8:36:b2:50:14:fb:fa:dc:2e:02:f4:ef:86:d6:5f:60:22:6f:
         40:10:91:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org