Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/323830343a336266303a3a2f33332d3333203d3e20323636313831.roa
File:                     323830343a336266303a3a2f33332d3333203d3e20323636313831.roa (raw, json)
Hash identifier:          XPsFwLa4fHPTmK51bz8xhpbDy9Gl9L92f+jcxiSiff0=
Subject key identifier:   28:5D:73:99:20:6C:4A:EA:A7:74:DB:BE:D3:A0:8C:D5:1F:5D:27:66
Certificate issuer:       /CN=60E94AF72ACDFFC18F9151261A92F78E5CE8FF6F
Certificate serial:       27A7056435280CD4DCC3C3CAFA351614569F4989
Authority key identifier: 60:E9:4A:F7:2A:CD:FF:C1:8F:91:51:26:1A:92:F7:8E:5C:E8:FF:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60E94AF72ACDFFC18F9151261A92F78E5CE8FF6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/323830343a336266303a3a2f33332d3333203d3e20323636313831.roa
Signing time:             Thu 29 Jun 2023 14:57:39 +0000
ROA not before:           Thu 29 Jun 2023 14:52:39 +0000
ROA not after:            Thu 27 Jun 2024 14:57:39 +0000
asID:                     266181
IP address blocks:        2804:3bf0::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:a7:05:64:35:28:0c:d4:dc:c3:c3:ca:fa:35:16:14:56:9f:49:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60E94AF72ACDFFC18F9151261A92F78E5CE8FF6F
        Validity
            Not Before: Jun 29 14:52:39 2023 GMT
            Not After : Jun 27 14:57:39 2024 GMT
        Subject: CN=285D7399206C4AEAA774DBBED3A08CD51F5D2766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:71:3b:c6:53:b3:64:95:d6:aa:ba:3c:74:41:
                    ce:50:40:f6:81:9a:04:f5:d3:c8:ec:9e:60:9b:04:
                    ab:e3:ec:02:a3:05:de:11:8d:0b:a1:55:50:08:fe:
                    1f:8a:22:17:5e:05:dd:54:d2:47:eb:6f:65:1c:23:
                    df:69:74:6c:e2:b6:b1:df:b7:f6:d6:e8:8b:79:03:
                    1e:ff:26:88:60:0e:e5:cf:6a:b3:ae:10:dd:89:1a:
                    2e:ce:a7:5c:44:64:09:53:a1:f6:34:9a:b8:08:26:
                    17:e5:b1:09:e1:53:9f:03:93:f1:21:53:80:e4:ae:
                    bd:a8:a4:0c:24:dc:fa:1e:14:8a:d2:40:2e:78:64:
                    b0:35:ff:18:80:0a:7f:5c:69:c2:7d:9e:60:ee:74:
                    4c:99:9d:2b:48:73:03:5c:bb:34:ec:eb:34:fd:76:
                    92:7a:75:e8:6d:df:39:76:d2:58:e1:fb:ba:4d:33:
                    bc:3e:13:77:73:c6:ce:03:3d:ee:25:eb:f9:2b:d9:
                    2b:e6:e6:68:75:2d:8c:d8:5e:a8:7f:89:4c:70:66:
                    85:bc:20:90:8a:ee:56:26:70:c7:b1:e8:8c:7e:fd:
                    f3:1b:61:5c:90:72:f7:26:2c:15:74:3c:c5:19:92:
                    fa:23:7c:2d:d5:b0:b8:01:1e:42:3f:db:ab:3f:2b:
                    09:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:5D:73:99:20:6C:4A:EA:A7:74:DB:BE:D3:A0:8C:D5:1F:5D:27:66
            X509v3 Authority Key Identifier:
                keyid:60:E9:4A:F7:2A:CD:FF:C1:8F:91:51:26:1A:92:F7:8E:5C:E8:FF:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/60E94AF72ACDFFC18F9151261A92F78E5CE8FF6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60E94AF72ACDFFC18F9151261A92F78E5CE8FF6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/323830343a336266303a3a2f33332d3333203d3e20323636313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bf0::/33

    Signature Algorithm: sha256WithRSAEncryption
         63:fa:a5:7c:9b:b9:3d:8b:fc:7a:cc:74:02:08:ec:62:46:db:
         58:59:ff:b7:27:a6:47:e4:f1:eb:39:60:3d:70:ac:36:ef:2c:
         1b:32:f9:aa:bf:3b:6b:ea:53:dd:01:df:58:68:fa:cb:51:49:
         d8:50:67:4d:6a:51:a5:e0:4f:60:69:72:9f:dc:2e:9a:57:06:
         0b:18:d8:6a:46:89:24:cf:36:40:bf:87:7e:e5:97:57:a5:a7:
         e4:cc:b9:74:02:a1:c1:f6:aa:f6:bb:a3:51:fb:38:25:cf:b7:
         e3:73:78:eb:39:32:d2:03:f7:43:87:b5:82:59:29:95:c7:37:
         9c:ad:e5:aa:21:48:07:cd:e5:47:f6:d0:a5:57:9e:4c:22:41:
         16:d6:71:a5:c0:e6:00:17:bf:29:48:45:a8:3c:f1:34:83:9a:
         2d:4d:d3:72:42:04:6a:c2:fb:6d:9f:0e:88:6a:f7:6e:7a:8d:
         d9:61:9e:74:7c:32:00:04:d3:f8:48:7f:d0:d0:e4:5a:75:7a:
         54:0f:8f:59:d8:2d:76:59:05:36:c5:d9:48:ac:a2:80:9c:4b:
         81:76:69:09:8c:4e:06:6b:aa:da:15:1d:12:b1:d5:96:15:13:
         fe:c6:fd:3c:da:a2:e4:88:a9:03:13:12:b1:51:a1:f9:56:41:
         f3:f0:3e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:41 2024 by rpki-client on console-ams.rpki-client.org