Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/323830343a353335303a323a3a2f34382d3438203d3e20323638353736.roa
File:                     323830343a353335303a323a3a2f34382d3438203d3e20323638353736.roa (raw, json)
Hash identifier:          w5SRbMwcyKuFsdWuqfOzPXnu0ynFpxr/Qhu3JOF1Nng=
Subject key identifier:   80:4F:84:D2:D3:3A:18:02:A1:2A:C3:B4:7A:C9:93:6B:9C:B9:01:D7
Certificate issuer:       /CN=6BD5256E06373CFE03D89EB7865FFCD7086F6EB6
Certificate serial:       6C4617A915836CB7D6EEA462880CB1A40F801749
Authority key identifier: 6B:D5:25:6E:06:37:3C:FE:03:D8:9E:B7:86:5F:FC:D7:08:6F:6E:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BD5256E06373CFE03D89EB7865FFCD7086F6EB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/323830343a353335303a323a3a2f34382d3438203d3e20323638353736.roa
Signing time:             Fri 28 Apr 2023 14:00:00 +0000
ROA not before:           Fri 28 Apr 2023 13:55:00 +0000
ROA not after:            Fri 26 Apr 2024 14:00:00 +0000
asID:                     268576
IP address blocks:        2804:5350:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:46:17:a9:15:83:6c:b7:d6:ee:a4:62:88:0c:b1:a4:0f:80:17:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BD5256E06373CFE03D89EB7865FFCD7086F6EB6
        Validity
            Not Before: Apr 28 13:55:00 2023 GMT
            Not After : Apr 26 14:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6e:e1:c5:be:d1:f8:75:ea:b2:f4:dd:57:86:
                    0e:09:42:d3:77:53:5a:ae:c5:54:4a:1f:70:f2:c2:
                    d9:9b:7d:a8:6b:06:84:98:5d:91:9e:89:14:35:4e:
                    38:43:1c:1d:28:ac:aa:2e:0e:6a:1b:f8:7e:12:c8:
                    6a:4f:99:f9:9d:3c:d7:bc:60:cb:0e:fd:ec:48:39:
                    cd:9b:75:99:23:99:1a:bf:6a:c2:19:d1:2c:d8:75:
                    b4:93:58:db:2a:4d:ae:0b:fa:98:38:41:5e:cf:68:
                    c5:4c:c6:a6:72:96:5a:ab:47:1b:2b:e3:00:2d:b0:
                    d4:d8:6d:7a:07:da:4a:1e:37:8e:f5:41:b6:1e:0e:
                    f8:d1:7d:10:a0:1c:45:ba:e6:c9:70:c6:7e:a8:d4:
                    47:e8:de:f2:a9:0b:e7:d1:fc:b7:70:3e:a4:d7:27:
                    e0:02:75:18:b3:94:bd:43:90:87:2a:2e:a4:1e:db:
                    13:0b:48:32:32:9d:fe:27:e6:62:e1:06:cc:a3:52:
                    ba:4a:8e:97:51:b6:eb:0d:4c:09:cf:2f:14:86:b6:
                    5d:10:0e:7c:10:f2:f9:82:7a:04:f8:b7:e9:7d:25:
                    1f:ef:44:1b:16:d0:77:a6:f0:c5:cc:c6:21:c2:a4:
                    5f:d4:ef:2d:9c:43:7f:75:df:ad:29:88:79:87:02:
                    cf:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:4F:84:D2:D3:3A:18:02:A1:2A:C3:B4:7A:C9:93:6B:9C:B9:01:D7
            X509v3 Authority Key Identifier:
                keyid:6B:D5:25:6E:06:37:3C:FE:03:D8:9E:B7:86:5F:FC:D7:08:6F:6E:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/6BD5256E06373CFE03D89EB7865FFCD7086F6EB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BD5256E06373CFE03D89EB7865FFCD7086F6EB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/323830343a353335303a323a3a2f34382d3438203d3e20323638353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5350:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         be:cf:fe:d1:3d:99:78:ff:8b:7d:84:4c:d2:0f:e5:a3:5a:4c:
         bf:7f:29:f0:0a:d4:c6:a9:18:f3:c4:88:b9:ad:2a:b8:f7:46:
         f9:1b:39:db:ad:ba:fc:db:cb:b1:96:41:ed:6f:1b:ee:f4:f0:
         7b:4a:96:c4:95:aa:e2:94:ad:4c:6c:06:82:3d:fd:79:66:c3:
         84:5d:59:18:74:17:15:6e:ba:a6:5c:f0:96:e3:db:17:da:b5:
         65:e3:ad:39:24:5e:11:03:73:37:01:8e:49:7a:7d:b0:5e:41:
         33:91:b6:61:b6:a6:3b:32:84:e1:d8:17:16:06:6f:e0:0a:be:
         c5:4a:3d:4b:d7:f4:90:63:28:bd:68:e1:44:d6:b4:34:46:99:
         70:24:6f:8d:1d:4f:de:2e:12:e2:62:ce:04:26:d6:a5:f5:64:
         78:2d:e9:09:11:2b:37:22:40:9f:70:78:01:c0:f5:9c:73:d8:
         b0:92:92:1d:55:97:36:ed:96:9a:47:e0:a2:09:53:e7:65:74:
         ef:64:5b:da:26:05:5f:2e:6e:0a:4b:45:8f:42:5e:ba:50:d5:
         d1:58:b9:dd:52:28:9f:ac:c8:e4:df:ff:5f:c8:42:ae:f2:b1:
         2c:84:a0:5a:39:9a:9d:28:a4:24:35:0d:b8:ab:43:8a:57:71:
         2b:ec:4b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org