Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/1/323830343a346631383a3a2f33322d3332203d3e20323638333033.roa
File:                     323830343a346631383a3a2f33322d3332203d3e20323638333033.roa (raw, json)
Hash identifier:          w0qH62YKWblCZ2M9vOC7JV6recGzjIMP5WIIIzC1MJ8=
Subject key identifier:   4A:0D:D2:31:36:1B:9C:DF:CD:E6:B8:2B:B6:05:32:C9:2E:7C:F1:9B
Certificate issuer:       /CN=130888861C156DEDFFE5F171F7DBBCF43993D81C
Certificate serial:       6ECCECCF36881E13D2C64085C55778FB78DBCBD0
Authority key identifier: 13:08:88:86:1C:15:6D:ED:FF:E5:F1:71:F7:DB:BC:F4:39:93:D8:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/130888861C156DEDFFE5F171F7DBBCF43993D81C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/1/323830343a346631383a3a2f33322d3332203d3e20323638333033.roa
Signing time:             Wed 03 Apr 2024 18:30:51 +0000
ROA not before:           Wed 03 Apr 2024 18:25:51 +0000
ROA not after:            Wed 02 Apr 2025 18:30:51 +0000
asID:                     268303
IP address blocks:        2804:4f18::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:cc:ec:cf:36:88:1e:13:d2:c6:40:85:c5:57:78:fb:78:db:cb:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=130888861C156DEDFFE5F171F7DBBCF43993D81C
        Validity
            Not Before: Apr  3 18:25:51 2024 GMT
            Not After : Apr  2 18:30:51 2025 GMT
        Subject: CN=4A0DD231361B9CDFCDE6B82BB60532C92E7CF19B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b3:db:7a:21:df:2f:36:6e:98:b6:03:c8:b6:
                    53:63:d1:02:15:5f:81:e8:fe:85:6c:ad:52:e9:11:
                    d7:fb:ad:3c:a7:b8:36:3e:c9:ec:05:59:28:ec:fa:
                    29:f2:2c:b3:17:ef:a5:0f:e8:4e:39:30:9a:a5:4b:
                    a8:d3:ab:a6:2a:c4:d7:59:87:51:83:c3:e1:f7:1b:
                    03:20:2a:2d:ef:e6:c8:50:f6:23:25:19:b1:81:e0:
                    85:0f:3e:42:e3:64:34:04:e1:86:45:2c:f4:ea:ed:
                    e5:0f:2a:47:f6:64:04:5a:1a:c4:9a:e6:7f:bc:e9:
                    b9:ac:1a:1b:8f:3d:a2:88:af:42:bf:39:a3:bf:56:
                    d9:af:64:bc:df:3c:29:a9:dd:99:a4:46:73:cf:f4:
                    58:04:bd:bc:3d:db:39:de:09:be:f1:3f:4a:95:9c:
                    68:74:18:9c:d4:64:d1:91:bd:c8:5b:fa:14:fe:a0:
                    06:1f:b7:9c:f8:7b:47:1a:ed:dc:5d:4a:10:8c:0d:
                    2c:cf:71:1a:da:c2:85:57:88:41:ac:6c:59:1e:e1:
                    37:3b:0a:4f:ae:18:3a:66:08:c3:ef:7d:07:68:b9:
                    a9:72:2c:fc:b8:bb:11:16:3d:4b:6a:fa:26:ab:97:
                    32:28:73:76:b1:e7:59:18:01:62:74:c1:d9:b7:5e:
                    eb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:0D:D2:31:36:1B:9C:DF:CD:E6:B8:2B:B6:05:32:C9:2E:7C:F1:9B
            X509v3 Authority Key Identifier:
                keyid:13:08:88:86:1C:15:6D:ED:FF:E5:F1:71:F7:DB:BC:F4:39:93:D8:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/1/130888861C156DEDFFE5F171F7DBBCF43993D81C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/130888861C156DEDFFE5F171F7DBBCF43993D81C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/1/323830343a346631383a3a2f33322d3332203d3e20323638333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f18::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:11:ba:bc:07:b6:87:fe:69:24:b3:df:87:fb:bc:1d:e9:03:
         ac:fb:cf:97:07:da:64:39:61:5c:92:c8:88:6e:9a:d2:cf:de:
         83:9e:97:19:dd:62:ed:16:b3:7d:09:a2:8e:94:51:40:4a:9b:
         9c:63:ff:0f:17:f9:66:44:2f:cd:83:ff:44:8d:af:80:27:09:
         1f:f4:73:31:01:62:b7:5a:e4:52:76:b8:e9:54:c1:eb:6b:5a:
         41:6e:65:dc:a9:82:ae:57:3c:84:a7:75:1c:56:31:49:54:a9:
         9b:f0:c8:d8:c8:5d:6b:c8:0d:d9:2e:20:6e:0f:fd:2d:70:82:
         74:2e:05:56:ce:6a:7b:32:6b:db:cf:43:ed:c3:f0:b4:63:8a:
         e9:c4:32:bd:8c:52:13:4f:bb:7f:e3:bb:2d:6a:a9:de:e4:50:
         27:67:55:8f:bc:ed:ab:2d:fe:89:66:5b:1c:43:8b:90:6e:96:
         da:d1:3d:e7:42:13:a6:e0:1d:4d:f5:ae:38:7a:8c:f1:9e:b8:
         6a:3e:d8:32:6f:05:9b:41:6d:c5:31:a0:00:c2:51:13:a6:fb:
         e1:c5:bd:77:ad:eb:72:c5:52:6d:55:e6:49:92:6c:c7:00:c3:
         7b:f4:f4:e5:ba:0c:1a:f5:54:a7:56:58:26:42:64:9d:26:49:
         b1:db:54:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org