Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/323830343a356161343a383030303a3a2f33332d3333203d3e20323638373836.roa
File:                     323830343a356161343a383030303a3a2f33332d3333203d3e20323638373836.roa (raw, json)
Hash identifier:          m7XgSxyA8W7g7a2A0pihhEd6GkLrXWplb6GKpgnw8F0=
Subject key identifier:   6D:A0:0F:0A:6C:3A:B4:69:FA:AF:4E:07:68:0F:E7:C5:67:CB:76:EF
Certificate issuer:       /CN=A68038F934F5E622FA09D5ED3CCBF64D92391162
Certificate serial:       08B6C4A50AF35F37E62D64DAA90C3358B8EFB993
Authority key identifier: A6:80:38:F9:34:F5:E6:22:FA:09:D5:ED:3C:CB:F6:4D:92:39:11:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A68038F934F5E622FA09D5ED3CCBF64D92391162.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/323830343a356161343a383030303a3a2f33332d3333203d3e20323638373836.roa
Signing time:             Thu 04 Apr 2024 10:25:57 +0000
ROA not before:           Thu 04 Apr 2024 10:20:57 +0000
ROA not after:            Thu 03 Apr 2025 10:25:57 +0000
asID:                     268786
IP address blocks:        2804:5aa4:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b6:c4:a5:0a:f3:5f:37:e6:2d:64:da:a9:0c:33:58:b8:ef:b9:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A68038F934F5E622FA09D5ED3CCBF64D92391162
        Validity
            Not Before: Apr  4 10:20:57 2024 GMT
            Not After : Apr  3 10:25:57 2025 GMT
        Subject: CN=6DA00F0A6C3AB469FAAF4E07680FE7C567CB76EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:43:d0:79:fa:57:7e:0c:d7:2b:90:b2:bf:c0:
                    0d:1f:65:f4:f4:41:66:7d:1c:c7:ff:79:68:5f:50:
                    43:e0:96:27:88:57:b9:a4:77:f8:cb:ee:7c:e5:33:
                    ae:78:6e:fc:fe:29:1a:d6:80:dd:ce:c4:50:be:89:
                    0e:57:40:fa:23:7d:7c:ad:ec:30:12:58:05:43:5f:
                    9c:79:06:92:cb:d8:f3:6d:15:31:ef:59:9e:16:f4:
                    13:9a:1f:3e:cf:e4:c6:b1:df:e0:18:48:4b:e2:5c:
                    2a:9e:3d:a0:f7:ac:1e:7d:70:d4:3e:b1:37:2a:7b:
                    1f:eb:62:17:65:a9:bf:e4:38:8e:6a:39:55:65:dd:
                    24:3b:f5:04:10:bf:59:1d:dd:3d:66:5b:24:b6:18:
                    9f:70:6f:7f:f3:e6:14:ab:79:a9:89:97:77:f2:ec:
                    d6:0e:6e:c4:31:18:d5:3a:4c:87:ce:59:ea:14:82:
                    d6:29:6f:e2:62:e2:c2:9c:fa:9a:c2:c5:39:3a:4f:
                    3a:ae:1e:e6:0c:6a:b7:b3:2c:48:9e:26:d9:38:b1:
                    4c:51:e2:8d:65:69:f5:74:10:ed:d3:b6:5b:bd:4e:
                    94:81:f3:5c:aa:3f:f5:ad:4b:b9:85:ff:5a:ab:cb:
                    c9:f0:48:ad:d6:cb:42:20:ff:50:81:8c:83:4b:18:
                    24:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A0:0F:0A:6C:3A:B4:69:FA:AF:4E:07:68:0F:E7:C5:67:CB:76:EF
            X509v3 Authority Key Identifier:
                keyid:A6:80:38:F9:34:F5:E6:22:FA:09:D5:ED:3C:CB:F6:4D:92:39:11:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/A68038F934F5E622FA09D5ED3CCBF64D92391162.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A68038F934F5E622FA09D5ED3CCBF64D92391162.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/323830343a356161343a383030303a3a2f33332d3333203d3e20323638373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5aa4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         6a:ce:79:20:ed:54:60:f6:1d:d3:f6:ea:da:91:3c:40:7a:96:
         32:3e:9b:f3:20:2f:a0:fd:49:f3:5b:77:82:a3:51:73:f7:46:
         da:b2:62:fe:ed:c9:7a:11:74:06:ad:e3:a9:42:65:e8:62:65:
         d9:8b:3f:a2:c4:02:9a:87:88:9f:09:cf:45:08:80:c6:7f:1e:
         9f:77:a6:6f:64:fa:ee:1c:bd:3f:1f:96:4b:62:02:0a:cf:73:
         89:b3:8a:30:11:11:92:4d:48:d7:8b:d2:43:1e:29:43:04:7e:
         9d:b2:05:3e:cd:3d:19:c6:09:51:ae:fd:d9:dd:99:63:98:34:
         40:08:03:b9:6f:0d:51:48:ea:31:40:5d:ea:2a:b9:ee:0e:81:
         b4:e0:34:58:b9:e8:66:ea:e1:4a:26:9c:a9:57:7e:21:47:d1:
         72:2d:1e:7b:3b:c9:50:20:66:98:6a:0e:e3:52:da:05:30:2e:
         99:f8:05:a9:d5:85:ff:90:9c:d3:6c:66:5a:da:98:20:23:5c:
         0c:5a:0a:5b:12:d9:b0:04:b4:a1:51:ec:16:a5:ee:e8:e4:32:
         04:1c:7f:8f:14:d5:5c:0b:3a:09:d8:d4:07:0d:2b:eb:53:3b:
         19:9b:b0:ed:c0:7e:b3:23:c1:79:f0:71:ec:0a:f8:5c:eb:e4:
         98:30:0c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org