Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M2FgrwfVJyUowTU886R4jthn7GHWh9RWdck9bLXkUTH/0/323830343a6137343a3a2f33322d3334203d3e20323632323835.roa
File:                     323830343a6137343a3a2f33322d3334203d3e20323632323835.roa (raw, json)
Hash identifier:          I3A3u/VxXLPTSiyi9TMbS/7kcnBq7E4ALA1ePxvJlyI=
Subject key identifier:   8A:35:C5:21:80:3C:C8:53:F6:40:B1:AA:C7:EC:5D:2C:E6:2E:6F:6B
Certificate issuer:       /CN=A561916EB1A61E110D909C0CA2D8F6759A3F0EA4
Certificate serial:       6B81813F2A5B0FC868C2D546D7E07337622E1783
Authority key identifier: A5:61:91:6E:B1:A6:1E:11:0D:90:9C:0C:A2:D8:F6:75:9A:3F:0E:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A561916EB1A61E110D909C0CA2D8F6759A3F0EA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M2FgrwfVJyUowTU886R4jthn7GHWh9RWdck9bLXkUTH/0/323830343a6137343a3a2f33322d3334203d3e20323632323835.roa
Signing time:             Mon 13 Mar 2023 18:55:16 +0000
ROA not before:           Mon 13 Mar 2023 18:50:16 +0000
ROA not after:            Mon 11 Mar 2024 18:55:16 +0000
asID:                     262285
IP address blocks:        2804:a74::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:81:81:3f:2a:5b:0f:c8:68:c2:d5:46:d7:e0:73:37:62:2e:17:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A561916EB1A61E110D909C0CA2D8F6759A3F0EA4
        Validity
            Not Before: Mar 13 18:50:16 2023 GMT
            Not After : Mar 11 18:55:16 2024 GMT
        Subject: CN=8A35C521803CC853F640B1AAC7EC5D2CE62E6F6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:06:7a:41:9d:b4:0f:d7:02:91:b7:9a:2f:4f:
                    d1:f3:f5:61:f6:1f:55:20:a1:c8:87:6a:b6:03:20:
                    be:31:09:2f:c5:c2:0c:30:4f:cc:c9:5f:ec:05:41:
                    82:d3:c2:c6:75:dd:0b:c8:44:af:c1:ff:fa:eb:c2:
                    f8:81:b3:bb:51:33:8c:db:05:99:e0:52:e0:42:80:
                    e8:09:31:3d:59:24:eb:b2:a8:bd:44:5b:1c:b0:3a:
                    1a:36:55:f2:7c:c9:c5:57:88:7a:1d:a9:f5:3b:5c:
                    d1:8a:6c:39:8e:74:5a:5c:0d:b6:e7:cc:44:2f:41:
                    77:0b:03:44:33:1d:c0:31:e8:f5:f3:be:e4:33:b9:
                    aa:d1:15:de:29:f7:f6:e4:8d:d5:c8:53:0b:c1:0e:
                    4f:f7:85:b7:08:f3:ed:85:27:5e:f6:b7:ec:79:7a:
                    ea:7a:1b:b1:f2:2b:be:47:46:b0:66:82:45:74:5e:
                    5f:01:c3:6b:44:44:45:4f:64:56:77:8e:cb:3f:99:
                    c7:53:23:fb:14:cf:67:50:36:0f:07:b8:1b:6b:f0:
                    35:c7:c0:a5:e7:2c:cc:85:77:98:1a:7a:05:4d:e5:
                    f0:da:68:6c:41:0f:26:79:c8:d0:7b:49:d4:82:ac:
                    46:24:5c:71:3a:ff:1e:02:24:17:eb:e0:5f:d7:06:
                    03:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:35:C5:21:80:3C:C8:53:F6:40:B1:AA:C7:EC:5D:2C:E6:2E:6F:6B
            X509v3 Authority Key Identifier:
                keyid:A5:61:91:6E:B1:A6:1E:11:0D:90:9C:0C:A2:D8:F6:75:9A:3F:0E:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M2FgrwfVJyUowTU886R4jthn7GHWh9RWdck9bLXkUTH/0/A561916EB1A61E110D909C0CA2D8F6759A3F0EA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A561916EB1A61E110D909C0CA2D8F6759A3F0EA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M2FgrwfVJyUowTU886R4jthn7GHWh9RWdck9bLXkUTH/0/323830343a6137343a3a2f33322d3334203d3e20323632323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a74::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:8c:dd:95:06:6c:05:d1:c5:e9:2f:88:a8:08:50:21:af:3a:
         8f:c2:0f:86:c8:72:8b:8c:80:9d:9e:85:0c:da:09:d8:c3:9f:
         63:a7:5d:12:2c:ce:d4:45:a3:5f:03:67:09:f3:e8:07:00:75:
         3d:ee:fc:36:52:2a:8a:a9:e1:9a:e6:55:67:fa:b4:25:43:7b:
         a6:9b:3b:6b:e0:62:3a:b1:92:cf:33:d0:9b:3a:a0:7d:9a:fa:
         b4:41:03:30:e2:ff:9b:98:5a:45:1a:b2:12:7c:1c:39:3b:84:
         a5:89:f1:95:c1:ab:7a:44:2d:00:38:9b:f6:f2:bb:01:83:7d:
         e8:d6:c7:f1:46:2c:d3:7a:7e:9d:ca:30:e3:22:3f:02:cd:73:
         44:40:dd:1e:74:8b:51:90:8b:ca:71:30:42:e9:bb:f1:c3:61:
         0b:93:d0:cb:ee:96:ca:e3:5c:99:8e:43:b8:a0:28:41:70:8a:
         75:1f:f4:6a:e3:81:01:5b:06:a2:ab:1b:52:4c:a6:c0:ce:f8:
         28:e1:dc:4d:c3:45:53:8d:14:1b:ea:79:fe:61:2b:8c:09:d3:
         b7:b9:86:e4:00:ba:6f:19:58:cd:97:56:50:c3:1e:bb:1c:8d:
         ef:99:b1:e2:97:5b:23:3d:d3:a6:b5:02:76:9a:e5:ce:4b:34:
         c5:3b:67:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org