Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/323830343a353335303a633a3a2f34382d3438203d3e20323638353736.roa
File:                     323830343a353335303a633a3a2f34382d3438203d3e20323638353736.roa (raw, json)
Hash identifier:          L4HQ9Qvb0otzKrXp/UfpQ6i7mZj2KKL4RrwxSwP1r60=
Subject key identifier:   5B:4E:B3:53:E6:0B:DA:36:D6:A9:26:BC:95:32:36:5F:EF:56:89:7A
Certificate issuer:       /CN=6BD5256E06373CFE03D89EB7865FFCD7086F6EB6
Certificate serial:       2D9033E19F29DEE3486EA5F16B0146823A26151F
Authority key identifier: 6B:D5:25:6E:06:37:3C:FE:03:D8:9E:B7:86:5F:FC:D7:08:6F:6E:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BD5256E06373CFE03D89EB7865FFCD7086F6EB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/323830343a353335303a633a3a2f34382d3438203d3e20323638353736.roa
Signing time:             Fri 28 Apr 2023 15:00:00 +0000
ROA not before:           Fri 28 Apr 2023 14:55:00 +0000
ROA not after:            Fri 26 Apr 2024 15:00:00 +0000
asID:                     268576
IP address blocks:        2804:5350:c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:90:33:e1:9f:29:de:e3:48:6e:a5:f1:6b:01:46:82:3a:26:15:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BD5256E06373CFE03D89EB7865FFCD7086F6EB6
        Validity
            Not Before: Apr 28 14:55:00 2023 GMT
            Not After : Apr 26 15:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:44:34:d8:75:29:7e:b4:f6:74:55:42:ad:83:
                    3f:6c:c0:be:6b:79:02:40:f3:cf:70:e9:97:e4:8a:
                    cc:18:dc:e7:a2:0b:28:a8:5f:ce:97:d4:8e:2c:e6:
                    6c:fc:54:9c:49:4c:94:bc:15:8e:53:2b:3f:0e:88:
                    5f:5d:6f:5a:52:8b:11:3d:25:7a:27:9e:dd:03:b8:
                    30:c2:7f:73:7b:dc:e8:57:a5:54:3e:c7:f3:21:ac:
                    00:f7:e4:8e:36:e1:df:9b:9d:2e:7e:b5:40:3a:31:
                    7f:7d:0b:53:62:cc:0b:6b:f6:b8:f5:15:77:52:d0:
                    9d:21:69:40:0c:b5:86:82:5f:3a:c6:a1:63:7a:f8:
                    31:6a:37:45:0c:db:22:cc:6e:f5:cc:01:ac:5e:ee:
                    86:54:4f:48:88:b9:c7:60:21:4b:35:26:5e:7b:42:
                    4f:85:ae:84:ec:32:e7:8c:2c:53:d6:73:1f:71:a6:
                    6c:35:a8:cb:2a:36:ea:00:5c:27:c3:5f:00:54:d7:
                    00:17:6e:c8:f9:00:b7:6d:99:68:ea:a3:a7:25:6c:
                    45:05:50:1c:aa:a1:f8:1c:cc:77:d5:c6:23:8b:1d:
                    d3:98:1b:8d:cf:c1:19:85:48:54:98:b1:15:f4:a1:
                    83:14:38:7c:13:ac:05:5d:d0:6d:6b:b0:18:9f:e7:
                    0d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:4E:B3:53:E6:0B:DA:36:D6:A9:26:BC:95:32:36:5F:EF:56:89:7A
            X509v3 Authority Key Identifier:
                keyid:6B:D5:25:6E:06:37:3C:FE:03:D8:9E:B7:86:5F:FC:D7:08:6F:6E:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/6BD5256E06373CFE03D89EB7865FFCD7086F6EB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BD5256E06373CFE03D89EB7865FFCD7086F6EB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/323830343a353335303a633a3a2f34382d3438203d3e20323638353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5350:c::/48

    Signature Algorithm: sha256WithRSAEncryption
         d0:2a:35:f7:b1:68:72:38:aa:b2:f3:2a:22:74:c7:1e:de:ef:
         6f:f5:18:e3:2c:b7:fa:36:f9:38:28:bd:1f:7c:f9:6b:be:d7:
         3b:ee:d4:22:64:62:85:f4:5d:de:30:98:28:c9:8a:37:8d:d7:
         78:6c:3a:fe:2f:a4:c8:21:30:7f:c4:67:a9:c5:6a:a3:49:d7:
         b4:13:6a:3c:56:bc:9d:0a:5b:db:82:65:d9:c5:27:bf:28:e7:
         49:91:d7:df:be:27:c6:c4:ce:8a:3b:de:34:8b:16:af:07:57:
         01:e9:18:2d:83:78:01:af:63:c8:fb:2e:73:a4:37:2b:68:68:
         95:99:84:32:9c:22:18:48:98:41:f7:aa:e0:c5:01:79:7d:2e:
         37:a9:6b:da:d7:d9:e0:5a:fc:04:68:b4:a8:2a:88:65:37:63:
         1b:cb:94:fe:3a:5d:da:10:3f:0f:d6:42:2e:7a:fb:25:d6:52:
         93:11:9a:6f:42:53:ef:c0:2b:fd:03:48:8d:8b:36:9d:85:33:
         fb:64:90:e3:44:0d:c5:50:43:3b:a2:15:d1:2e:a1:0b:33:72:
         12:65:b3:5f:af:d6:5b:1f:39:06:5f:94:3b:43:59:bd:43:53:
         c4:fc:42:13:24:d9:d5:d8:cb:c5:e8:70:23:24:34:90:aa:60:
         ca:28:6f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org