Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QxpGJjP9Q6bgLnrg5FwMFJLfZ9L5SuH65vcmyrxSdhm/0/323830343a383265383a343030303a3a2f33342d3334203d3e20323732313634.roa
File:                     323830343a383265383a343030303a3a2f33342d3334203d3e20323732313634.roa (raw, json)
Hash identifier:          KBPXNjmlZzW1m+g84O8rf4huBY7IcpJeqpJ1mWQ9rhk=
Subject key identifier:   24:33:85:A1:84:0E:CF:07:48:99:F1:FB:CC:E4:6F:79:CB:E1:61:E5
Certificate issuer:       /CN=6D0C2E6FED7E38F97A258171425DB7D75B7F8247
Certificate serial:       59C7CC6D02DF31AD5C0726DB53037DAFB6B4EDFB
Authority key identifier: 6D:0C:2E:6F:ED:7E:38:F9:7A:25:81:71:42:5D:B7:D7:5B:7F:82:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D0C2E6FED7E38F97A258171425DB7D75B7F8247.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QxpGJjP9Q6bgLnrg5FwMFJLfZ9L5SuH65vcmyrxSdhm/0/323830343a383265383a343030303a3a2f33342d3334203d3e20323732313634.roa
Signing time:             Wed 28 Jun 2023 23:00:00 +0000
ROA not before:           Wed 28 Jun 2023 22:55:00 +0000
ROA not after:            Wed 26 Jun 2024 23:00:00 +0000
asID:                     272164
IP address blocks:        2804:82e8:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:c7:cc:6d:02:df:31:ad:5c:07:26:db:53:03:7d:af:b6:b4:ed:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D0C2E6FED7E38F97A258171425DB7D75B7F8247
        Validity
            Not Before: Jun 28 22:55:00 2023 GMT
            Not After : Jun 26 23:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1d:70:5a:e6:b4:7f:89:cb:1c:ec:20:48:eb:
                    98:19:96:24:5b:50:e2:92:da:d6:7d:b1:29:5e:7a:
                    fa:a6:95:3b:16:30:2d:e8:0f:47:4c:5f:c5:ec:2d:
                    4d:b6:06:17:66:2f:e6:84:93:61:83:17:64:b4:c6:
                    0f:01:a5:10:fc:3a:2d:fb:eb:7e:8d:d6:22:81:47:
                    f6:08:c5:d2:26:18:ad:e3:06:ed:9e:47:ea:c8:05:
                    e3:c7:ec:87:33:2c:5d:56:00:34:e3:93:69:31:2c:
                    70:d2:8e:8e:03:a2:85:4d:5e:1d:3c:48:6b:37:e1:
                    9d:8f:3e:ab:ce:e2:a7:a2:69:6f:de:f5:db:f4:f7:
                    2d:98:cc:33:41:eb:b2:90:a0:5e:6b:64:e4:c1:e4:
                    d2:8d:c0:df:c7:11:1a:36:4f:49:ec:8c:38:b3:6b:
                    e0:03:66:f8:46:ce:fa:01:aa:7f:7a:b8:f0:82:27:
                    74:0d:56:2c:16:93:1e:01:13:0f:76:9b:2c:16:e4:
                    9d:24:02:39:d5:be:6a:f2:72:66:53:53:ee:d1:ce:
                    77:9b:36:10:01:30:59:ec:19:f0:48:fb:1c:1b:79:
                    20:73:f5:ed:83:ab:e0:66:b4:37:a8:83:7d:83:75:
                    ac:bc:42:8d:ff:50:94:f8:53:49:2f:94:81:16:8c:
                    b6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:33:85:A1:84:0E:CF:07:48:99:F1:FB:CC:E4:6F:79:CB:E1:61:E5
            X509v3 Authority Key Identifier:
                keyid:6D:0C:2E:6F:ED:7E:38:F9:7A:25:81:71:42:5D:B7:D7:5B:7F:82:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QxpGJjP9Q6bgLnrg5FwMFJLfZ9L5SuH65vcmyrxSdhm/0/6D0C2E6FED7E38F97A258171425DB7D75B7F8247.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D0C2E6FED7E38F97A258171425DB7D75B7F8247.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QxpGJjP9Q6bgLnrg5FwMFJLfZ9L5SuH65vcmyrxSdhm/0/323830343a383265383a343030303a3a2f33342d3334203d3e20323732313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:82e8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         77:96:cf:c4:20:c2:ec:f7:cd:03:03:5b:78:34:09:bf:2c:3e:
         1f:1d:95:91:05:6f:81:b9:34:f4:40:b0:e0:eb:07:91:5c:13:
         e9:13:38:53:6e:a9:3c:c2:e4:f7:b7:10:93:2b:46:cc:0e:09:
         22:8c:19:67:1d:99:63:e3:c2:e3:ce:c4:07:22:57:e0:20:fd:
         62:f5:2d:ce:b1:2a:60:53:1b:4b:8e:f0:d0:ea:53:13:90:f2:
         6e:7e:77:bf:98:65:ae:a1:0b:7c:98:59:1e:ff:b1:4f:97:39:
         ea:80:7f:63:16:53:68:72:5c:96:3f:2e:63:e6:77:8a:f4:a2:
         cb:20:51:0b:de:86:06:91:0a:ca:d1:fb:fb:30:b4:cd:73:71:
         cb:36:20:34:4f:37:ba:28:80:59:13:5f:dc:29:1e:61:90:40:
         34:a0:35:e8:e8:d1:11:6d:de:f5:72:09:e4:4a:13:2a:64:79:
         99:dc:2f:30:42:2d:95:93:0b:5d:5a:20:2c:7c:e4:88:cc:78:
         f4:6e:75:6c:04:9c:72:f2:7e:f0:de:d1:21:f3:fe:57:bc:7d:
         27:38:b1:c0:a7:e7:6b:e0:29:c1:9a:02:a2:fe:0f:db:06:76:
         c1:6c:58:f8:25:01:04:0e:25:68:66:55:13:20:5e:06:85:b0:
         8d:b2:fc:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:09 2024 by rpki-client on console-ams.rpki-client.org