Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6qbLMkv9NeoEhgbgECEYMZ85Ctnq7dBJaL3RyaNDmXy5/0/323830343a316462633a3a2f33322d3438203d3e20323634333930.roa
File:                     323830343a316462633a3a2f33322d3438203d3e20323634333930.roa (raw, json)
Hash identifier:          9WqOAtovv4QOS8Ag3fjfwZNnHZ5SZJGq5zqdIT9aMTU=
Subject key identifier:   3F:A4:92:A8:3B:8A:1B:66:B7:34:48:84:61:95:5C:0F:56:B6:C3:9A
Certificate issuer:       /CN=18F419A180314B79E88307605FA439DF04529F3D
Certificate serial:       59E23BB56CCD66D17C751AAF9D29DBF000BB941C
Authority key identifier: 18:F4:19:A1:80:31:4B:79:E8:83:07:60:5F:A4:39:DF:04:52:9F:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18F419A180314B79E88307605FA439DF04529F3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6qbLMkv9NeoEhgbgECEYMZ85Ctnq7dBJaL3RyaNDmXy5/0/323830343a316462633a3a2f33322d3438203d3e20323634333930.roa
Signing time:             Wed 28 Feb 2024 10:26:53 +0000
ROA not before:           Wed 28 Feb 2024 10:21:53 +0000
ROA not after:            Wed 26 Feb 2025 10:26:53 +0000
asID:                     264390
IP address blocks:        2804:1dbc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e2:3b:b5:6c:cd:66:d1:7c:75:1a:af:9d:29:db:f0:00:bb:94:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18F419A180314B79E88307605FA439DF04529F3D
        Validity
            Not Before: Feb 28 10:21:53 2024 GMT
            Not After : Feb 26 10:26:53 2025 GMT
        Subject: CN=3FA492A83B8A1B66B734488461955C0F56B6C39A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d8:56:7d:db:ba:2f:99:b2:9b:0a:8c:fd:45:
                    86:3b:48:8d:7a:2c:af:1e:77:be:88:be:19:0a:33:
                    4f:81:03:4f:ea:ab:0f:72:0d:16:e9:fe:b3:0d:c6:
                    dd:d1:8b:bb:a9:ed:c5:b0:8d:6b:8f:71:65:25:1d:
                    33:c1:fe:e5:85:83:b8:fd:79:58:45:77:dd:ec:cc:
                    81:88:c0:78:54:ce:3f:c4:10:ba:85:0b:5d:73:6e:
                    85:ab:5f:7e:84:d5:31:63:77:94:35:ca:df:9b:af:
                    b6:0f:04:fd:f4:d6:fb:0f:1b:de:69:57:83:4f:09:
                    eb:56:27:7b:ef:bb:47:e2:fe:f4:07:9d:cb:31:14:
                    14:1e:81:db:5e:4f:8a:a2:e6:82:70:9b:d2:e2:81:
                    87:9a:66:69:22:38:43:95:95:ff:e9:fe:20:6f:d7:
                    0c:bc:51:b3:04:01:7c:55:dc:f9:ba:9e:63:b6:bf:
                    0f:ea:40:ea:a6:94:75:c9:5c:26:e2:cc:fa:0e:74:
                    88:a6:9e:0b:6c:28:c9:b6:e7:43:9f:2f:61:bf:dd:
                    53:06:b0:f0:21:5d:5f:53:e4:9c:a2:5d:8e:89:8b:
                    f9:8f:d8:bd:d6:14:d0:e2:3f:7c:41:43:c5:d8:d3:
                    45:02:b7:95:34:9c:6b:25:56:ea:ba:50:9a:3c:b0:
                    4a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A4:92:A8:3B:8A:1B:66:B7:34:48:84:61:95:5C:0F:56:B6:C3:9A
            X509v3 Authority Key Identifier:
                keyid:18:F4:19:A1:80:31:4B:79:E8:83:07:60:5F:A4:39:DF:04:52:9F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6qbLMkv9NeoEhgbgECEYMZ85Ctnq7dBJaL3RyaNDmXy5/0/18F419A180314B79E88307605FA439DF04529F3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18F419A180314B79E88307605FA439DF04529F3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6qbLMkv9NeoEhgbgECEYMZ85Ctnq7dBJaL3RyaNDmXy5/0/323830343a316462633a3a2f33322d3438203d3e20323634333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dbc::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:0d:dd:47:64:1c:9b:0d:0c:b1:81:93:b3:d0:10:e1:13:77:
         a8:0e:ca:90:98:c5:69:d6:fd:8e:aa:82:02:ca:4c:a0:bd:59:
         7b:fa:8b:9d:1f:a9:65:c3:b7:12:fb:d5:17:7c:7e:ec:86:af:
         69:6d:50:de:42:0b:e4:a0:d3:3a:36:15:74:9f:a6:ef:11:3e:
         c7:03:ce:cd:4c:29:ef:f6:d3:de:3c:d1:7f:70:d2:01:45:96:
         e4:cd:ae:9c:f9:f8:c7:90:48:6f:12:98:dc:59:29:d1:7e:9e:
         bb:c6:4b:fb:70:d6:b2:bb:3d:a8:a5:88:aa:2b:7b:18:0a:1b:
         1d:4d:2b:d3:a9:b7:ea:1f:f3:85:5b:6a:d2:de:97:d2:b4:1d:
         41:6b:a7:c5:fc:01:11:63:50:d1:4c:3b:88:2c:73:d4:cd:17:
         3d:b4:e6:35:92:d6:e6:d8:30:7f:64:49:64:71:62:4e:a3:c0:
         5c:6a:0f:ae:dc:17:7e:0d:0e:6d:56:27:c3:8f:02:d3:1b:ed:
         5e:fa:be:c7:c2:2d:fa:6c:68:c9:63:d6:b3:56:21:ce:53:c0:
         fa:04:45:5d:7d:40:45:71:7d:92:62:f9:f2:ae:6d:4c:07:f8:
         75:c2:72:32:d3:ad:62:5b:a6:99:5c:8c:9d:c0:43:78:48:bc:
         b6:5b:5e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:22 2024 by rpki-client on console-ams.rpki-client.org