Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9mKYFUHPsUTWGkxPhYRWHSyPE3z5LbYboGc9SZab7eeV/0/323830343a336366383a3a2f33322d3333203d3e20323636323435.roa
File:                     323830343a336366383a3a2f33322d3333203d3e20323636323435.roa (raw, json)
Hash identifier:          uDxnQKX6c5puOO1sUH95/lgfnlKWITtfGaxuYFAJJgc=
Subject key identifier:   36:1E:5F:26:AD:70:93:21:16:EA:32:01:FD:9D:50:63:26:7A:9F:63
Certificate issuer:       /CN=6024F3B3D5A07EF3933818E373628ED7AD099271
Certificate serial:       5A20B1CAA2D79295248D8D46ABCABF4971CD8A04
Authority key identifier: 60:24:F3:B3:D5:A0:7E:F3:93:38:18:E3:73:62:8E:D7:AD:09:92:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6024F3B3D5A07EF3933818E373628ED7AD099271.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9mKYFUHPsUTWGkxPhYRWHSyPE3z5LbYboGc9SZab7eeV/0/323830343a336366383a3a2f33322d3333203d3e20323636323435.roa
Signing time:             Wed 19 Oct 2022 20:00:00 +0000
ROA not before:           Wed 19 Oct 2022 19:55:00 +0000
ROA not after:            Wed 18 Oct 2023 20:00:00 +0000
asID:                     266245
IP address blocks:        2804:3cf8::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:20:b1:ca:a2:d7:92:95:24:8d:8d:46:ab:ca:bf:49:71:cd:8a:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6024F3B3D5A07EF3933818E373628ED7AD099271
        Validity
            Not Before: Oct 19 19:55:00 2022 GMT
            Not After : Oct 18 20:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:43:e9:a8:7b:26:cb:30:6f:1a:39:e5:8b:d8:
                    c1:72:85:fa:a3:3f:2e:11:02:e5:af:dc:53:9c:ab:
                    b2:f5:d2:83:c9:44:a0:c8:5e:a4:24:e8:b9:7d:e3:
                    d9:40:e9:9d:e7:62:e2:68:70:9d:6d:1d:5b:21:fc:
                    ad:50:10:62:e6:6c:04:9c:be:eb:0a:35:02:a8:92:
                    cc:75:e6:3e:22:f5:33:3a:cd:7f:06:07:f1:9e:a1:
                    5c:e2:66:81:ed:7a:25:24:7d:40:ba:57:18:85:ef:
                    1b:7c:e7:12:ec:20:63:da:e3:59:66:5f:f1:b9:46:
                    c7:ec:4a:43:8c:ec:25:6c:60:19:3b:e1:ed:b6:6e:
                    66:5e:44:a7:bc:fa:c5:13:91:3e:37:5e:39:a2:e1:
                    b7:e6:ce:3a:27:78:4b:96:e9:ca:cb:16:d9:26:af:
                    81:7c:f3:a0:6d:98:17:79:14:b0:81:be:c5:cd:8f:
                    9e:35:1e:60:10:18:2f:11:f8:b6:f2:ab:e4:2c:e3:
                    90:c2:c2:f5:53:ca:a1:d7:b1:c1:31:f2:84:f3:58:
                    39:78:71:8f:62:e4:4c:55:da:45:80:f4:75:a5:e2:
                    21:12:e4:cd:65:d2:3f:87:c3:a4:04:9a:29:29:7d:
                    62:57:f0:61:75:d7:52:a5:25:d4:d1:f3:8b:ee:ae:
                    b0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:1E:5F:26:AD:70:93:21:16:EA:32:01:FD:9D:50:63:26:7A:9F:63
            X509v3 Authority Key Identifier:
                keyid:60:24:F3:B3:D5:A0:7E:F3:93:38:18:E3:73:62:8E:D7:AD:09:92:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9mKYFUHPsUTWGkxPhYRWHSyPE3z5LbYboGc9SZab7eeV/0/6024F3B3D5A07EF3933818E373628ED7AD099271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6024F3B3D5A07EF3933818E373628ED7AD099271.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9mKYFUHPsUTWGkxPhYRWHSyPE3z5LbYboGc9SZab7eeV/0/323830343a336366383a3a2f33322d3333203d3e20323636323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3cf8::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:24:cd:96:b9:cc:5e:07:3c:cb:a0:29:8c:44:e5:17:91:2d:
         5e:0f:d8:ff:2b:50:fc:b0:29:66:c6:97:e1:43:f2:ea:dc:cf:
         38:0a:2e:ca:2e:b5:90:8e:d0:5d:dd:f3:0b:11:c7:b6:0e:f5:
         73:73:45:ce:1e:52:ed:32:59:63:56:ab:df:49:21:13:6b:24:
         99:31:51:a7:79:33:a0:44:ce:58:92:8f:76:11:59:6f:cb:90:
         c2:e5:e8:92:4b:8c:00:97:48:4f:72:7b:f1:67:2a:ca:35:44:
         cc:4b:ec:a0:8c:a8:de:6c:12:4a:33:48:ee:98:f9:c1:9e:91:
         4e:51:c6:9d:13:23:f5:8a:04:8e:b8:98:bb:bc:63:82:56:a0:
         f4:f5:f8:01:10:96:e0:7c:ab:bc:6f:3d:55:bd:89:80:84:0a:
         89:e2:14:cb:da:ea:f2:47:5a:2c:84:85:50:83:cb:ab:81:fe:
         c6:40:8f:0f:86:b5:93:25:60:d4:41:9b:fe:08:b4:00:93:91:
         f4:39:69:a6:17:c2:47:08:fd:8f:bf:7b:89:69:b3:d1:9c:88:
         88:c6:f8:ae:13:9f:36:11:f5:9a:6b:cf:30:0a:82:2e:b7:4e:
         31:37:4a:91:bf:0c:06:55:5c:94:f2:64:76:07:c7:6c:35:7e:
         b5:84:bd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org