Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/323830343a356161343a343030303a3a2f33342d3334203d3e20323638373836.roa
File:                     323830343a356161343a343030303a3a2f33342d3334203d3e20323638373836.roa (raw, json)
Hash identifier:          0M+Fh9V0XGpjIFKw1r5uZBW7MMez2e2MAQDJBX+61Q8=
Subject key identifier:   5A:AE:BE:56:77:B7:5D:D6:58:B1:8F:87:B3:75:E7:CB:9A:D6:31:1E
Certificate issuer:       /CN=A68038F934F5E622FA09D5ED3CCBF64D92391162
Certificate serial:       6A1F69D0010C8B85D617B8A067F37D9794273DEB
Authority key identifier: A6:80:38:F9:34:F5:E6:22:FA:09:D5:ED:3C:CB:F6:4D:92:39:11:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A68038F934F5E622FA09D5ED3CCBF64D92391162.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/323830343a356161343a343030303a3a2f33342d3334203d3e20323638373836.roa
Signing time:             Thu 04 Apr 2024 10:25:58 +0000
ROA not before:           Thu 04 Apr 2024 10:20:58 +0000
ROA not after:            Thu 03 Apr 2025 10:25:58 +0000
asID:                     268786
IP address blocks:        2804:5aa4:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:1f:69:d0:01:0c:8b:85:d6:17:b8:a0:67:f3:7d:97:94:27:3d:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A68038F934F5E622FA09D5ED3CCBF64D92391162
        Validity
            Not Before: Apr  4 10:20:58 2024 GMT
            Not After : Apr  3 10:25:58 2025 GMT
        Subject: CN=5AAEBE5677B75DD658B18F87B375E7CB9AD6311E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6c:94:cb:80:03:63:66:e0:1f:30:3c:1a:19:
                    93:6e:b1:87:48:cb:01:07:af:87:24:fe:41:c5:5e:
                    85:80:4e:01:ca:8b:3b:7b:3f:e4:c2:dc:08:4c:9a:
                    2c:f4:5d:40:91:74:34:d5:5f:4f:51:53:70:6d:31:
                    e9:dc:fb:a8:d8:6e:f0:c8:34:26:13:10:12:0c:ab:
                    a1:8b:ad:35:f4:38:00:c5:f2:15:19:5d:36:af:fe:
                    32:2e:9b:86:08:66:ad:1b:6d:0b:87:7e:5b:8c:a0:
                    17:fb:3e:82:05:ba:6c:34:04:61:76:9d:98:82:86:
                    a0:ce:e5:f8:c8:1e:d1:9e:ce:ea:e7:da:df:02:f5:
                    90:95:33:2a:7d:ed:b7:85:be:c6:2e:cc:ab:74:b4:
                    b2:72:3a:fb:42:27:e3:b3:36:64:d0:5a:3f:81:93:
                    72:e0:49:14:cb:07:10:2c:09:45:c2:bf:51:9e:80:
                    6f:39:b7:c1:e9:7f:ed:ea:64:2d:9e:6e:17:83:88:
                    24:4f:56:92:62:29:8a:d4:12:2c:0a:ee:0a:bc:31:
                    cb:1c:cb:38:b7:7e:22:25:ed:48:ad:7a:34:e3:87:
                    3a:d4:6c:28:bd:41:4c:b9:56:1c:0b:bb:52:9d:79:
                    d0:b1:78:4b:bd:1a:6e:a4:87:82:c7:94:c2:d4:25:
                    38:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:AE:BE:56:77:B7:5D:D6:58:B1:8F:87:B3:75:E7:CB:9A:D6:31:1E
            X509v3 Authority Key Identifier:
                keyid:A6:80:38:F9:34:F5:E6:22:FA:09:D5:ED:3C:CB:F6:4D:92:39:11:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/A68038F934F5E622FA09D5ED3CCBF64D92391162.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A68038F934F5E622FA09D5ED3CCBF64D92391162.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/323830343a356161343a343030303a3a2f33342d3334203d3e20323638373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5aa4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1e:eb:14:f4:95:a9:36:96:d2:3f:cd:75:26:39:c6:4b:99:d0:
         b8:63:d8:19:7d:bf:eb:4d:cf:65:78:cd:89:cc:76:2b:d7:ff:
         59:9a:4c:09:23:86:d6:c4:1f:84:ad:60:4a:83:7b:e4:4a:1d:
         6b:43:b7:94:6f:0a:c7:17:d1:ea:10:6c:64:92:a4:ff:2f:00:
         a1:31:cf:da:63:e0:42:cc:26:3e:3a:52:c2:65:31:78:0f:51:
         e6:9a:de:da:a5:3e:40:ae:53:bb:93:aa:7d:10:cd:46:f7:03:
         e4:a2:d6:e0:bd:40:b1:f9:00:df:53:26:1a:a6:9a:70:07:a1:
         5d:3d:c7:8d:9d:67:20:aa:94:00:fd:8d:b4:da:e3:66:de:dd:
         e9:71:59:3c:58:fa:8f:1c:82:a3:0d:73:20:01:17:eb:cd:15:
         e4:2a:23:d4:07:6c:9c:53:d4:ed:90:18:a6:9f:48:5e:d4:2b:
         7c:0a:7b:8b:bf:3a:a7:82:43:23:f7:e1:a5:e2:2b:03:a1:b7:
         e6:69:15:e6:e8:55:49:2e:19:14:45:a2:39:90:9e:56:69:15:
         12:7e:a6:55:8b:a3:cc:86:31:83:1c:19:e1:f9:c2:10:8a:ca:
         63:47:9b:7e:fa:8e:db:19:76:c7:3a:11:34:83:e3:00:de:a6:
         47:32:c0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org