Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/0/323830343a313636343a3a2f33322d3438203d3e20323633323835.roa
File:                     323830343a313636343a3a2f33322d3438203d3e20323633323835.roa (raw, json)
Hash identifier:          YALhhliMOz9f86xEnc6TxYe5IquCFHSQOYI5VN2fNbY=
Subject key identifier:   59:8F:0A:EB:FF:EA:78:8C:A4:BD:03:59:C7:3D:3E:5A:E2:15:5F:F4
Certificate issuer:       /CN=04124B6068EE1E77306A1BA87F1F25EA7A596E2D
Certificate serial:       6C8214CC019333E649A2FF4FAAB2E0EA3E08D52E
Authority key identifier: 04:12:4B:60:68:EE:1E:77:30:6A:1B:A8:7F:1F:25:EA:7A:59:6E:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04124B6068EE1E77306A1BA87F1F25EA7A596E2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/0/323830343a313636343a3a2f33322d3438203d3e20323633323835.roa
Signing time:             Fri 02 Jun 2023 17:09:36 +0000
ROA not before:           Fri 02 Jun 2023 17:04:36 +0000
ROA not after:            Fri 31 May 2024 17:09:36 +0000
asID:                     263285
IP address blocks:        2804:1664::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:82:14:cc:01:93:33:e6:49:a2:ff:4f:aa:b2:e0:ea:3e:08:d5:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04124B6068EE1E77306A1BA87F1F25EA7A596E2D
        Validity
            Not Before: Jun  2 17:04:36 2023 GMT
            Not After : May 31 17:09:36 2024 GMT
        Subject: CN=598F0AEBFFEA788CA4BD0359C73D3E5AE2155FF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:61:24:ae:3c:39:94:63:ae:05:06:95:e4:83:
                    f4:db:ea:b5:34:c0:fa:24:c2:0b:88:6e:da:7d:02:
                    80:a1:fa:10:83:e1:f1:fe:e3:30:f6:79:68:9a:c8:
                    13:ae:17:b2:df:6f:a5:98:e6:d6:52:ce:4c:66:88:
                    51:3a:8a:2c:01:69:24:5c:5e:25:0f:9c:ab:ef:d7:
                    51:0a:35:5c:50:f6:2d:97:69:df:f6:fb:68:62:ec:
                    8c:2a:32:fa:b3:6d:85:59:59:44:d5:2f:fe:e2:70:
                    3b:06:b1:a6:55:7f:1b:0f:0f:6f:36:7e:22:bc:f5:
                    2a:80:03:43:fa:db:7b:96:ad:ca:6c:cc:47:8f:f0:
                    5e:d4:08:13:33:7f:c9:0c:c1:8c:4b:28:59:af:ae:
                    f4:08:7d:23:a2:b6:ba:c4:7e:0a:00:be:1c:fc:a6:
                    97:78:70:84:a7:e6:f4:95:50:ea:89:0c:78:27:fd:
                    8a:5e:9d:5a:b6:3a:7f:ec:8c:ae:8e:75:3a:15:58:
                    ee:94:c0:92:5d:04:06:bc:42:48:ff:ff:75:c8:23:
                    7f:42:c0:d8:3e:1f:84:0b:2b:19:35:96:db:09:94:
                    c0:3c:3e:fa:e1:86:9c:c4:28:a8:db:46:2c:f7:7d:
                    f1:52:49:9e:64:34:e1:59:63:ee:f7:a8:fd:98:16:
                    e9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8F:0A:EB:FF:EA:78:8C:A4:BD:03:59:C7:3D:3E:5A:E2:15:5F:F4
            X509v3 Authority Key Identifier:
                keyid:04:12:4B:60:68:EE:1E:77:30:6A:1B:A8:7F:1F:25:EA:7A:59:6E:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/0/04124B6068EE1E77306A1BA87F1F25EA7A596E2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04124B6068EE1E77306A1BA87F1F25EA7A596E2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/0/323830343a313636343a3a2f33322d3438203d3e20323633323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1664::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:78:7a:ee:06:c0:81:59:50:29:13:2d:eb:aa:25:56:d2:0e:
         d9:9f:8f:ff:7c:09:19:a9:6c:21:67:20:c3:71:eb:ac:77:b9:
         b1:e6:9b:81:c4:99:b0:48:8b:1d:d0:29:59:41:01:2e:74:0c:
         f7:62:7c:8f:59:8f:02:a4:5d:e5:b6:5a:18:dd:30:33:17:93:
         bb:c9:d7:21:6a:36:59:67:ac:d8:c2:27:f4:81:6c:7b:8f:30:
         04:75:f1:fa:d5:3f:16:09:cf:c9:8d:38:49:f1:44:8d:85:d6:
         76:0e:5a:8f:ff:fa:a4:1c:29:60:68:51:00:d2:93:33:5a:9f:
         b7:4b:04:37:ad:19:c8:b8:77:44:67:21:a7:1e:59:49:1c:f8:
         c5:db:63:3e:bd:e3:3d:63:67:58:a7:66:17:37:61:a5:b7:85:
         4d:48:3b:68:eb:af:29:8a:d8:20:a6:3e:89:d6:50:6b:0d:d5:
         d5:e0:de:da:0d:fb:6c:84:88:29:87:a8:00:91:92:ac:40:96:
         bf:0a:36:99:ab:f8:97:d6:57:ab:96:f2:0c:9e:87:c1:dd:30:
         87:f9:eb:13:08:28:1b:59:39:46:f5:97:95:2f:b1:8a:0d:7d:
         29:47:00:6e:a5:36:3f:f8:8d:30:7b:71:c0:23:fd:03:c5:3c:
         ae:69:2b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org