Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/323830343a353335303a343a3a2f34382d3438203d3e20323638353736.roa
File:                     323830343a353335303a343a3a2f34382d3438203d3e20323638353736.roa (raw, json)
Hash identifier:          pnUnANYK5ZoOqUjUi3uimWxWe39QVCBmGe79JK8pWIA=
Subject key identifier:   8E:BD:38:72:86:C2:64:1D:DB:A9:6F:B1:7E:D2:F2:01:BF:47:8D:AD
Certificate issuer:       /CN=6BD5256E06373CFE03D89EB7865FFCD7086F6EB6
Certificate serial:       1132DFAC948879F32B813CE6BED376A6E8270846
Authority key identifier: 6B:D5:25:6E:06:37:3C:FE:03:D8:9E:B7:86:5F:FC:D7:08:6F:6E:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BD5256E06373CFE03D89EB7865FFCD7086F6EB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/323830343a353335303a343a3a2f34382d3438203d3e20323638353736.roa
Signing time:             Fri 28 Apr 2023 15:00:01 +0000
ROA not before:           Fri 28 Apr 2023 14:55:01 +0000
ROA not after:            Fri 26 Apr 2024 15:00:01 +0000
asID:                     268576
IP address blocks:        2804:5350:4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:32:df:ac:94:88:79:f3:2b:81:3c:e6:be:d3:76:a6:e8:27:08:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BD5256E06373CFE03D89EB7865FFCD7086F6EB6
        Validity
            Not Before: Apr 28 14:55:01 2023 GMT
            Not After : Apr 26 15:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fa:24:f0:63:99:23:7c:50:6d:99:ee:70:26:
                    15:eb:33:3f:b1:d2:f7:97:a7:9c:ce:e8:0c:a0:11:
                    0c:75:0a:f4:45:a4:6b:54:0d:72:f7:71:cb:05:af:
                    94:d3:d1:2e:cf:00:2e:fe:2d:f2:7f:5f:e1:eb:e2:
                    0e:eb:e9:0d:be:b2:36:e6:db:fe:15:5f:db:9d:20:
                    cc:33:44:86:e2:ce:67:a2:dc:de:4b:b8:91:a5:bd:
                    41:ca:1a:f9:0e:03:b1:25:4e:5c:f9:1f:e0:78:ba:
                    54:6d:63:13:0e:36:75:95:49:ec:28:e1:fd:8b:77:
                    46:3d:1f:97:8c:eb:78:3a:e4:01:34:e0:4f:c0:e8:
                    d3:57:eb:06:0b:0d:cd:21:71:a3:20:ab:17:67:e1:
                    8b:b2:6c:b3:2d:d3:c3:c8:a8:7a:e3:e8:41:74:20:
                    ac:02:38:a1:9b:26:a9:bc:9e:92:04:54:5d:8a:4a:
                    fb:a6:21:da:a0:fc:58:47:46:7d:cb:6f:cf:fc:44:
                    5e:aa:7f:9f:d3:59:b3:83:c2:df:94:3a:1e:6f:e2:
                    0e:19:23:1d:04:b4:ca:fd:c0:33:31:27:e3:fd:05:
                    8a:68:e8:f8:b1:7c:63:50:f9:9c:64:f2:f2:66:8c:
                    e4:a6:ca:f6:81:9e:95:01:24:f7:d4:a8:07:80:5a:
                    b9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:BD:38:72:86:C2:64:1D:DB:A9:6F:B1:7E:D2:F2:01:BF:47:8D:AD
            X509v3 Authority Key Identifier:
                keyid:6B:D5:25:6E:06:37:3C:FE:03:D8:9E:B7:86:5F:FC:D7:08:6F:6E:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/6BD5256E06373CFE03D89EB7865FFCD7086F6EB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BD5256E06373CFE03D89EB7865FFCD7086F6EB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/323830343a353335303a343a3a2f34382d3438203d3e20323638353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5350:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         e2:a7:f9:96:2c:04:1c:84:a4:ea:76:9c:7b:dd:b7:8e:34:9f:
         c1:2a:7c:db:07:0c:55:a0:8d:77:9b:70:00:62:2e:7f:47:43:
         f8:4d:20:e3:e5:05:69:c6:fa:24:71:97:d0:10:82:21:70:2f:
         70:6f:82:2f:ee:af:f9:ed:e2:fb:5c:94:46:22:0d:24:b5:86:
         ba:7a:fd:cf:e2:80:66:46:67:a2:ea:a8:52:1d:b8:5f:ba:6f:
         9f:85:f4:06:d7:9e:08:08:8d:03:e9:87:22:c2:8b:af:3d:bb:
         81:28:d4:ad:cb:68:8a:8e:cf:f9:9d:9c:97:ce:41:9a:a9:62:
         17:c5:d7:01:63:c5:df:81:d8:b9:30:50:3c:19:40:d4:c4:4d:
         ae:66:e1:55:03:82:44:78:55:15:50:76:04:aa:7a:e9:5a:e5:
         e4:a7:af:79:82:ab:1e:63:58:c5:d2:ce:d1:c6:be:63:7b:3c:
         40:75:b0:f4:7d:0a:7d:9b:ac:cc:36:68:0e:42:dc:29:8e:96:
         25:41:01:5a:ed:35:23:c2:2f:b6:43:47:00:8c:19:97:76:fb:
         fc:c4:22:54:d6:af:9c:7e:63:01:b6:97:f7:9e:c0:9a:07:69:
         5b:34:d3:00:b5:c3:b3:0d:6e:ab:02:4a:32:d4:18:9f:7e:b1:
         be:a4:c4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org