Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/323830343a3562303a3a2f33332d3333203d3e20323636313831.roa
File:                     323830343a3562303a3a2f33332d3333203d3e20323636313831.roa (raw, json)
Hash identifier:          amMW3bYPzLYSjEJeDuyUQawpX+iI0RgoWPr4S2WlSXU=
Subject key identifier:   B8:44:07:60:80:AF:41:D9:C9:EB:C3:2B:33:8A:A5:AC:4A:1C:3E:18
Certificate issuer:       /CN=60E94AF72ACDFFC18F9151261A92F78E5CE8FF6F
Certificate serial:       05580679FD99D2799A537DEF859DBEC7534112C1
Authority key identifier: 60:E9:4A:F7:2A:CD:FF:C1:8F:91:51:26:1A:92:F7:8E:5C:E8:FF:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60E94AF72ACDFFC18F9151261A92F78E5CE8FF6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/323830343a3562303a3a2f33332d3333203d3e20323636313831.roa
Signing time:             Thu 29 Jun 2023 14:57:42 +0000
ROA not before:           Thu 29 Jun 2023 14:52:42 +0000
ROA not after:            Thu 27 Jun 2024 14:57:42 +0000
asID:                     266181
IP address blocks:        2804:5b0::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:58:06:79:fd:99:d2:79:9a:53:7d:ef:85:9d:be:c7:53:41:12:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60E94AF72ACDFFC18F9151261A92F78E5CE8FF6F
        Validity
            Not Before: Jun 29 14:52:42 2023 GMT
            Not After : Jun 27 14:57:42 2024 GMT
        Subject: CN=B844076080AF41D9C9EBC32B338AA5AC4A1C3E18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:59:c7:a4:40:6c:d5:40:f3:37:d7:72:fb:eb:
                    a6:4f:43:72:33:c2:f6:58:e6:b6:1e:33:a4:94:38:
                    e3:ff:93:a1:b8:04:1d:0a:05:44:f8:93:5d:7d:47:
                    d0:1c:c7:bd:96:67:18:76:5d:72:ba:00:fc:e4:72:
                    29:25:9d:c5:4b:5d:71:94:2b:fe:0f:f6:0a:f5:a7:
                    d4:ad:fb:cd:ed:b5:5a:e2:2c:a3:b9:ba:31:f2:4c:
                    f5:28:dc:8c:f8:85:82:bc:2d:59:1e:f8:90:d7:d3:
                    54:bb:35:59:dd:4f:54:ad:3a:73:5d:47:25:4b:f7:
                    49:24:e1:76:64:00:35:e5:b8:d4:33:96:29:ed:5a:
                    b4:44:2c:66:fc:2c:5c:b5:79:96:4b:cf:3e:7a:8d:
                    b8:bd:de:cd:02:ad:cf:73:4d:01:2c:78:d1:b4:68:
                    bc:8e:31:b4:e3:07:36:ba:fa:52:be:55:9f:c6:e6:
                    0d:68:c7:3f:80:fc:98:00:9e:be:8d:76:02:9d:87:
                    c9:4b:72:67:89:7b:78:c4:4b:dc:19:55:55:98:fa:
                    60:4e:8a:c8:41:0f:15:98:3a:c7:a9:25:12:8b:43:
                    53:f9:58:b9:c6:94:11:b5:c6:50:5e:53:b0:ff:a0:
                    95:a5:f7:88:e1:29:38:51:1d:21:23:52:27:36:80:
                    f7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:44:07:60:80:AF:41:D9:C9:EB:C3:2B:33:8A:A5:AC:4A:1C:3E:18
            X509v3 Authority Key Identifier:
                keyid:60:E9:4A:F7:2A:CD:FF:C1:8F:91:51:26:1A:92:F7:8E:5C:E8:FF:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/60E94AF72ACDFFC18F9151261A92F78E5CE8FF6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60E94AF72ACDFFC18F9151261A92F78E5CE8FF6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/323830343a3562303a3a2f33332d3333203d3e20323636313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b0::/33

    Signature Algorithm: sha256WithRSAEncryption
         aa:62:9f:34:c6:0a:4c:b8:91:a5:06:a8:da:78:7e:fc:bb:47:
         71:c1:6f:e8:39:7b:ee:41:ad:bb:22:76:de:58:e9:8a:46:32:
         43:93:85:90:b9:4b:58:55:44:20:01:08:eb:7b:d3:ed:09:78:
         c2:9f:b7:bc:e4:52:fa:5c:54:ed:2c:8c:fc:7f:f7:c0:44:10:
         a3:9c:8c:82:4a:99:61:41:e8:4e:80:59:f9:56:6f:4d:f4:77:
         1b:80:ea:3c:ea:dd:31:7c:b4:69:53:d6:39:88:64:be:80:c8:
         8a:bb:31:31:81:7f:67:d5:ec:68:19:af:16:6c:8a:da:f4:93:
         3d:ed:fb:65:84:5a:c2:3b:77:8d:30:73:e4:d7:1d:70:5f:02:
         3f:a3:3a:34:f1:74:35:4d:13:63:3f:df:e2:d2:54:ff:46:aa:
         ec:5a:be:ca:ba:27:54:6e:75:5a:3d:0a:be:a2:3a:c2:a2:d0:
         a8:cd:c4:bf:09:25:8d:41:53:f9:d1:c1:76:e9:d4:37:8f:f3:
         15:c5:24:49:f4:40:53:b1:68:7d:9f:45:2e:51:51:31:73:6c:
         70:43:c2:75:5a:f7:2a:07:47:57:0a:81:b2:fb:60:a1:1a:1d:
         5a:0a:b5:7a:c1:88:d1:40:fb:68:30:b6:32:5e:f6:2e:98:31:
         1c:16:d3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org