Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/323830343a6165303a3a2f33322d3438203d3e203238333532.roa
File:                     323830343a6165303a3a2f33322d3438203d3e203238333532.roa (raw, json)
Hash identifier:          tYZ5PBsOcKo1/NzOO8i4p5KtQnaDpJndaaJW7K6xkuU=
Subject key identifier:   10:9A:D9:C3:70:3D:4B:12:4D:F8:25:14:32:D3:D4:29:8D:37:6A:A3
Certificate issuer:       /CN=61B839A1A584B33DE2E26067718D221D6539188C
Certificate serial:       03B9AEA06ADF9E3BD316C25F83E7742E21F29E11
Authority key identifier: 61:B8:39:A1:A5:84:B3:3D:E2:E2:60:67:71:8D:22:1D:65:39:18:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61B839A1A584B33DE2E26067718D221D6539188C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/323830343a6165303a3a2f33322d3438203d3e203238333532.roa
Signing time:             Tue 20 Sep 2022 18:45:57 +0000
ROA not before:           Tue 20 Sep 2022 18:40:57 +0000
ROA not after:            Tue 19 Sep 2023 18:45:57 +0000
asID:                     28352
IP address blocks:        2804:ae0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:b9:ae:a0:6a:df:9e:3b:d3:16:c2:5f:83:e7:74:2e:21:f2:9e:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61B839A1A584B33DE2E26067718D221D6539188C
        Validity
            Not Before: Sep 20 18:40:57 2022 GMT
            Not After : Sep 19 18:45:57 2023 GMT
        Subject: CN=109AD9C3703D4B124DF8251432D3D4298D376AA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:76:9d:8c:f4:b6:5f:c5:9a:c9:b9:0c:11:4f:
                    84:69:ed:e1:34:d5:0d:b8:b4:b9:5c:ed:1a:f6:f5:
                    70:ae:1c:32:29:5e:8d:ec:52:cf:03:9f:56:f7:db:
                    da:94:2a:da:02:f2:dd:4c:eb:03:f5:c5:95:79:6b:
                    3d:95:0e:0f:1b:05:8f:a6:7f:00:6b:88:94:d0:03:
                    1e:82:0d:3a:9a:ea:18:a4:aa:f7:81:9f:3d:03:98:
                    62:5a:ab:2a:c6:5e:95:9c:2b:b7:09:5f:11:23:cc:
                    2c:2a:2f:28:f9:a1:48:64:dc:ec:d8:84:17:cb:06:
                    23:7d:b7:44:02:04:80:eb:2b:9c:91:2b:62:ef:06:
                    36:13:92:87:eb:9d:12:40:b5:b6:cb:60:68:a6:6b:
                    07:0a:03:34:cd:20:7d:f9:76:84:cd:91:64:6c:6f:
                    c0:01:ab:7f:0b:c8:53:fe:e3:7f:e4:05:f1:e2:dd:
                    ed:01:c1:a7:e3:ca:6e:79:4a:93:05:7e:02:2c:ed:
                    3b:f3:74:33:06:b6:1b:c2:73:40:12:8a:2e:b4:90:
                    5a:8c:e2:93:94:fc:9f:c9:4c:cf:21:08:2d:14:99:
                    f0:f5:66:78:6b:f8:20:02:8e:6b:11:48:62:fa:ba:
                    9c:5b:20:c0:b1:70:0a:bf:d0:e3:2d:c6:f5:20:33:
                    ae:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:9A:D9:C3:70:3D:4B:12:4D:F8:25:14:32:D3:D4:29:8D:37:6A:A3
            X509v3 Authority Key Identifier:
                keyid:61:B8:39:A1:A5:84:B3:3D:E2:E2:60:67:71:8D:22:1D:65:39:18:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/61B839A1A584B33DE2E26067718D221D6539188C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61B839A1A584B33DE2E26067718D221D6539188C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/323830343a6165303a3a2f33322d3438203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:f9:8b:4c:61:5e:cd:94:ca:0a:71:30:fe:f2:0e:62:79:03:
         ab:a5:b5:ea:af:a4:44:30:fe:b5:ef:c0:c1:e6:03:30:d9:cb:
         cd:d0:18:43:d2:19:9a:9a:13:1b:e9:76:16:d2:38:de:df:bb:
         bc:ba:ef:a6:fd:3e:f1:f5:1b:a2:33:46:87:3b:a3:dc:30:bd:
         a6:1a:78:97:04:16:26:f1:23:dd:70:23:90:ee:62:90:00:ed:
         5a:df:c3:03:bc:a2:9b:9f:53:22:b3:d5:fa:fb:5a:3d:71:2b:
         30:6c:33:49:14:00:1c:9b:7b:8e:6f:48:fc:ee:c1:00:1d:c4:
         bf:8b:22:7b:9d:1f:ab:2f:10:98:bd:e7:fa:18:f1:18:a7:e1:
         2b:5d:05:5e:66:b3:00:d9:66:e0:35:93:a2:e4:c2:2e:d3:03:
         05:41:5b:43:ec:f0:dd:2f:8c:88:8f:cd:fd:39:19:3c:c4:64:
         f4:bf:91:19:68:41:48:cd:3b:5b:bc:8e:62:17:97:81:29:7f:
         42:3e:3a:e2:af:6a:fe:34:16:53:17:b0:21:e2:a7:33:da:36:
         73:53:be:a2:4b:70:c9:04:61:de:0a:98:82:a7:30:cf:05:50:
         42:60:3e:9f:f0:ec:97:28:23:fd:a8:c1:75:17:61:97:d4:c7:
         eb:2c:3f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org