Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/1/323830343a353235383a3a2f33322d3334203d3e20323638353132.roa
File:                     323830343a353235383a3a2f33322d3334203d3e20323638353132.roa (raw, json)
Hash identifier:          MBhwR1AtBXG2NmFB84K9wrywh/cUq1sFnlgR1gWqPqA=
Subject key identifier:   63:99:AE:28:86:F3:1F:77:27:74:90:0C:4A:00:8D:3C:67:13:68:FF
Certificate issuer:       /CN=6CA3D9BB49D6D66C5297C1DB897BFBBB35615BD3
Certificate serial:       2EF185CC8F17475C08671F01FBB74F5DA36AE8F0
Authority key identifier: 6C:A3:D9:BB:49:D6:D6:6C:52:97:C1:DB:89:7B:FB:BB:35:61:5B:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6CA3D9BB49D6D66C5297C1DB897BFBBB35615BD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/1/323830343a353235383a3a2f33322d3334203d3e20323638353132.roa
Signing time:             Wed 24 Jan 2024 14:10:02 +0000
ROA not before:           Wed 24 Jan 2024 14:05:02 +0000
ROA not after:            Wed 22 Jan 2025 14:10:02 +0000
asID:                     268512
IP address blocks:        2804:5258::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:f1:85:cc:8f:17:47:5c:08:67:1f:01:fb:b7:4f:5d:a3:6a:e8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CA3D9BB49D6D66C5297C1DB897BFBBB35615BD3
        Validity
            Not Before: Jan 24 14:05:02 2024 GMT
            Not After : Jan 22 14:10:02 2025 GMT
        Subject: CN=6399AE2886F31F772774900C4A008D3C671368FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:19:8f:2c:c3:10:d7:d8:6d:d0:79:82:46:3f:
                    1e:1c:8e:fc:be:05:37:ee:6b:b4:c8:be:69:ff:e8:
                    83:07:20:6f:a6:6e:7c:18:6d:db:fb:dc:62:08:11:
                    20:5d:b8:0a:1c:92:43:d1:36:fc:b6:3a:57:03:1d:
                    0d:7a:b2:1b:60:7a:23:f8:af:74:31:0e:45:3d:b7:
                    f9:94:4e:a7:0d:3a:7e:aa:5a:86:85:8c:50:5e:64:
                    5b:2f:8f:06:66:3a:51:32:72:65:d3:6b:c4:a6:08:
                    b5:17:29:95:21:0a:f3:fc:ec:d5:d1:6a:70:62:4c:
                    47:b7:8a:68:b1:e7:02:b3:02:61:c6:64:e5:29:8f:
                    cc:b4:b2:cc:f4:f8:e7:33:05:1b:6f:73:cf:75:6c:
                    37:76:9b:5b:4f:0c:0e:6c:3a:8e:98:81:13:fa:4c:
                    55:0a:f4:7b:1e:81:30:39:b1:b9:7b:d2:d0:3f:4e:
                    08:73:c2:e1:c9:19:d2:7e:dc:b5:a5:bf:80:33:28:
                    8d:21:75:6a:77:3a:52:4d:2d:27:62:60:25:1b:a6:
                    fb:04:2a:3e:f0:b4:13:01:b2:bc:44:64:e4:2e:c7:
                    ec:27:c2:de:49:79:e3:e2:1b:fd:c3:97:cd:ea:9e:
                    27:a8:0d:6d:44:c5:c8:b9:02:77:a7:fb:a2:fb:50:
                    2d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:99:AE:28:86:F3:1F:77:27:74:90:0C:4A:00:8D:3C:67:13:68:FF
            X509v3 Authority Key Identifier:
                keyid:6C:A3:D9:BB:49:D6:D6:6C:52:97:C1:DB:89:7B:FB:BB:35:61:5B:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/1/6CA3D9BB49D6D66C5297C1DB897BFBBB35615BD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6CA3D9BB49D6D66C5297C1DB897BFBBB35615BD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/1/323830343a353235383a3a2f33322d3334203d3e20323638353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5258::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:c8:a3:84:29:b2:25:06:be:20:65:f6:a1:b3:fe:57:d9:83:
         f1:ba:88:94:e8:ff:74:ed:f0:d4:51:b5:4e:88:7a:08:2e:f7:
         05:1f:02:ef:75:10:2a:a2:21:46:96:00:7a:bf:18:2f:b1:3f:
         a3:28:41:59:c6:31:8b:75:d3:f1:04:ac:29:91:22:57:fd:98:
         f7:c0:be:53:4a:11:43:bf:72:eb:f9:2e:ec:c5:79:b6:b8:87:
         41:72:47:f0:ee:d7:8e:bb:73:44:73:cf:52:bb:43:59:48:4e:
         3c:c0:c2:57:4e:a4:eb:bb:17:96:d8:7e:bf:83:82:d1:cc:e3:
         8e:fa:2f:8e:6f:47:5b:1e:d9:92:d5:fe:71:18:34:b4:c1:d3:
         e1:c7:7a:ef:88:a7:20:a4:eb:47:ce:2a:d3:61:ea:09:9d:eb:
         55:95:3a:8f:98:4f:6b:71:46:b5:c5:f9:5c:87:26:79:f3:18:
         c7:b1:c8:eb:5b:14:cd:60:28:25:dc:7c:a5:43:26:d2:9f:45:
         e6:7d:b9:de:6e:f0:03:9c:5c:c6:cd:84:eb:be:4d:40:51:7d:
         56:70:d1:aa:62:32:02:1e:6f:bb:19:71:f9:95:f3:12:0a:8a:
         2e:3c:9c:c6:c3:39:96:25:31:73:b2:0f:6c:b3:fe:f3:db:dd:
         60:40:5f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org