Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/1/323830343a363331383a343130303a3a2f34382d3438203d3e20323639333338.roa
File:                     323830343a363331383a343130303a3a2f34382d3438203d3e20323639333338.roa (raw, json)
Hash identifier:          USzLvbMrKwcKeaxnbmoeM/10M6Ch6TwXC9N1Nv3q6rI=
Subject key identifier:   93:10:0C:0C:44:2A:E7:53:8E:9E:B2:FC:70:FF:94:68:69:C1:48:EA
Certificate issuer:       /CN=28EE46D4F099B24B9DA8C80842FED277ABB924AE
Certificate serial:       10B1143E41BE75EF4A25CBE6C6C3D66AB40451CF
Authority key identifier: 28:EE:46:D4:F0:99:B2:4B:9D:A8:C8:08:42:FE:D2:77:AB:B9:24:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28EE46D4F099B24B9DA8C80842FED277ABB924AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/1/323830343a363331383a343130303a3a2f34382d3438203d3e20323639333338.roa
Signing time:             Sat 13 Apr 2024 16:16:12 +0000
ROA not before:           Sat 13 Apr 2024 16:11:12 +0000
ROA not after:            Sat 12 Apr 2025 16:16:12 +0000
asID:                     269338
IP address blocks:        2804:6318:4100::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:b1:14:3e:41:be:75:ef:4a:25:cb:e6:c6:c3:d6:6a:b4:04:51:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28EE46D4F099B24B9DA8C80842FED277ABB924AE
        Validity
            Not Before: Apr 13 16:11:12 2024 GMT
            Not After : Apr 12 16:16:12 2025 GMT
        Subject: CN=93100C0C442AE7538E9EB2FC70FF946869C148EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:df:6b:ae:7b:f9:5f:ed:e4:d7:b1:e4:0d:0f:
                    be:0d:7f:52:89:ec:bd:e5:17:76:59:a6:6d:26:42:
                    7b:69:62:27:4f:05:47:6f:13:f0:1e:b5:09:bb:5e:
                    3c:a5:69:f6:aa:11:7b:2a:83:64:ee:3d:21:45:54:
                    36:19:64:f2:36:d0:37:5c:65:1b:5e:10:d9:c9:90:
                    19:64:01:3b:b5:d1:d5:db:10:7d:61:54:e9:0a:c0:
                    70:39:8a:22:94:33:c8:4e:69:db:70:da:d2:ad:87:
                    1a:95:5f:a4:4c:a9:ce:9f:e2:9d:46:db:e8:8e:50:
                    bb:0f:01:85:58:8f:1c:0f:34:cb:36:89:51:31:4c:
                    24:da:04:29:82:c6:53:ba:33:44:a5:25:85:c0:e7:
                    f7:6b:bd:cc:be:6e:3c:ba:37:4e:67:e7:ff:58:72:
                    41:f1:f1:33:df:b8:92:8b:f8:0d:8c:b7:72:a8:73:
                    06:8f:0b:d5:55:4a:7f:14:52:ce:a4:b5:a7:cc:38:
                    21:6f:34:f2:8c:30:0d:50:bb:a4:8c:54:d0:30:cc:
                    a0:f6:c3:8a:14:8f:a2:6d:2d:73:80:02:c6:d8:f1:
                    51:94:d3:08:39:52:3e:39:e9:4a:92:3e:89:ad:01:
                    1f:fb:b9:b5:2a:96:91:d8:13:d5:0c:15:78:71:db:
                    7d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:10:0C:0C:44:2A:E7:53:8E:9E:B2:FC:70:FF:94:68:69:C1:48:EA
            X509v3 Authority Key Identifier:
                keyid:28:EE:46:D4:F0:99:B2:4B:9D:A8:C8:08:42:FE:D2:77:AB:B9:24:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/1/28EE46D4F099B24B9DA8C80842FED277ABB924AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28EE46D4F099B24B9DA8C80842FED277ABB924AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/1/323830343a363331383a343130303a3a2f34382d3438203d3e20323639333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6318:4100::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:07:0f:22:a5:f3:b0:06:ce:aa:ae:41:10:50:0e:0a:81:97:
         d9:43:e9:8b:a4:c4:42:e0:dc:32:6d:60:a6:3d:07:75:51:65:
         cc:2b:24:a0:a2:23:cc:42:2d:60:30:5c:44:f2:59:da:02:bb:
         e1:38:1a:d4:13:8b:c6:b0:e8:0a:ef:1e:66:e2:20:f6:30:8e:
         09:37:66:59:c4:cc:01:5b:70:b9:e3:09:28:aa:7b:a9:64:ce:
         7b:c0:97:2a:91:5d:c4:52:34:6b:17:86:97:cb:64:b9:ae:e0:
         c7:03:2d:8f:c8:b1:ae:b0:e7:60:50:f5:b1:70:f6:33:d7:b2:
         88:0c:91:4a:ed:5b:ca:8e:94:8d:03:3e:e4:b6:d8:56:89:ad:
         59:1d:03:b5:dd:f4:e0:50:91:9e:6f:83:93:9f:aa:cc:33:e0:
         d0:25:39:01:85:9d:1c:6e:0d:e7:11:e1:ae:ec:2c:3f:d2:0d:
         1d:cd:44:94:0e:2d:e1:a6:ed:b4:da:4f:95:c1:01:4b:46:0c:
         1f:e7:c2:e7:65:84:3d:6c:38:9c:31:be:1c:a3:21:8f:3a:69:
         e1:f3:51:af:75:65:93:30:87:e7:03:b5:e6:6b:89:f7:8d:1b:
         75:5e:38:42:e9:61:0d:bf:28:35:69:41:6a:42:83:87:4b:73:
         de:7b:7d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org