Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/1/323830343a313661343a3a2f33322d3634203d3e20323632393737.roa
File:                     323830343a313661343a3a2f33322d3634203d3e20323632393737.roa (raw, json)
Hash identifier:          4XLNuxi5+hsQSqBYJCT3Hc58LYwsL7SnVuB5zch1E2k=
Subject key identifier:   13:B9:8F:BB:44:51:36:67:E5:B1:AA:23:22:5F:A6:33:34:AA:98:B4
Certificate issuer:       /CN=6FB6B7EF794C174C831FD488C872C21F121032B1
Certificate serial:       0D21D73273468E74FC5B13C56305173465168E35
Authority key identifier: 6F:B6:B7:EF:79:4C:17:4C:83:1F:D4:88:C8:72:C2:1F:12:10:32:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FB6B7EF794C174C831FD488C872C21F121032B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/1/323830343a313661343a3a2f33322d3634203d3e20323632393737.roa
Signing time:             Thu 04 Apr 2024 00:35:50 +0000
ROA not before:           Thu 04 Apr 2024 00:30:50 +0000
ROA not after:            Thu 03 Apr 2025 00:35:50 +0000
asID:                     262977
IP address blocks:        2804:16a4::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:21:d7:32:73:46:8e:74:fc:5b:13:c5:63:05:17:34:65:16:8e:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FB6B7EF794C174C831FD488C872C21F121032B1
        Validity
            Not Before: Apr  4 00:30:50 2024 GMT
            Not After : Apr  3 00:35:50 2025 GMT
        Subject: CN=13B98FBB44513667E5B1AA23225FA63334AA98B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:58:b5:e9:d7:06:05:a9:4b:cb:ce:66:03:c0:
                    1d:ce:50:3a:b3:e3:34:bb:33:06:9d:03:9d:99:1c:
                    53:35:6d:f9:fb:af:be:7e:21:22:78:ba:ab:54:6e:
                    7e:5d:af:69:b4:4d:54:1d:f7:35:0c:6f:e6:49:a4:
                    d0:61:97:23:59:32:21:f0:2f:25:82:2c:7a:cd:27:
                    e6:fc:69:43:f5:53:96:ed:d9:1f:62:18:fa:43:45:
                    c1:9c:ca:6e:12:0d:11:b8:6d:f0:50:cc:12:e8:d2:
                    c7:d1:7d:5b:59:96:a3:a6:74:09:4a:35:ab:1d:3e:
                    b7:4f:3b:ad:b5:c9:a0:3e:8b:0a:a2:81:3f:8c:d7:
                    06:ae:86:9a:3d:a2:8a:07:f8:5b:09:27:53:f6:f5:
                    0d:44:4d:df:79:06:2c:30:a3:1a:08:50:17:bd:86:
                    a6:c2:d2:c3:c8:62:bc:9c:a1:48:1b:ff:b8:0c:41:
                    b5:3b:80:ce:d7:0b:45:81:92:ec:71:7e:4c:39:2d:
                    ca:a3:33:95:98:b6:d3:86:ef:8c:7f:bc:35:bb:f1:
                    3a:26:29:e6:60:d4:d9:e0:b7:cd:fe:56:5e:eb:4e:
                    33:7b:b2:d9:e3:cd:4e:a3:de:aa:cc:61:db:c2:48:
                    0d:17:b2:61:73:42:92:92:23:b3:6f:bb:dc:6d:71:
                    ec:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B9:8F:BB:44:51:36:67:E5:B1:AA:23:22:5F:A6:33:34:AA:98:B4
            X509v3 Authority Key Identifier:
                keyid:6F:B6:B7:EF:79:4C:17:4C:83:1F:D4:88:C8:72:C2:1F:12:10:32:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/1/6FB6B7EF794C174C831FD488C872C21F121032B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FB6B7EF794C174C831FD488C872C21F121032B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/1/323830343a313661343a3a2f33322d3634203d3e20323632393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:01:57:fc:4b:1c:4b:a7:ea:cb:40:6f:0f:21:fd:14:a6:c0:
         e1:0d:3e:87:9c:03:a9:6d:49:5e:b0:f2:07:72:23:4b:5f:43:
         26:1d:ce:b3:21:4e:81:22:5c:ba:65:d8:3b:f6:56:3c:f2:72:
         c5:10:d3:73:5b:9a:d9:6d:e1:fe:d9:7f:de:d5:43:6e:98:20:
         87:e0:1e:c0:21:66:79:e8:4e:3e:5a:77:b2:61:4e:5b:6e:68:
         a0:07:9e:56:df:46:41:7e:ce:b9:c7:81:98:a6:7e:8a:95:48:
         50:81:38:3c:b7:0c:56:6c:4a:28:c3:bf:56:8e:02:d1:31:17:
         73:04:cf:aa:a0:b0:7f:81:23:83:87:63:06:03:4d:6e:47:43:
         92:4d:3f:e8:99:a1:43:37:ad:7e:4b:13:1f:28:ca:48:82:79:
         7a:26:15:36:52:dd:69:b6:f0:0e:39:94:8c:7a:e0:53:52:37:
         cf:0a:3d:ee:c0:4f:d4:81:42:fe:ca:e3:0d:b7:d0:b8:1d:c3:
         04:59:54:63:f3:98:ac:1a:75:f2:77:2f:43:47:dd:52:34:d3:
         3b:e2:d0:b7:ae:61:62:f1:88:41:a1:2a:9a:bf:d0:6d:21:4b:
         8d:f0:f7:f4:d9:b2:92:b9:cf:23:56:01:90:6d:6d:42:47:33:
         37:78:47:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:26 2024 by rpki-client on console-ams.rpki-client.org