Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/1/323830343a363331383a3a2f33322d3332203d3e20323639333338.roa
File:                     323830343a363331383a3a2f33322d3332203d3e20323639333338.roa (raw, json)
Hash identifier:          pg5vIorqHlWyL1/ihAazqxGhLh+fbYlyIQYfXElWS9M=
Subject key identifier:   C6:03:33:B8:F6:7A:0D:91:26:44:13:BF:37:51:C0:8E:07:02:A4:12
Certificate issuer:       /CN=28EE46D4F099B24B9DA8C80842FED277ABB924AE
Certificate serial:       62023B1DD7E76AC92891249BDAA4B800C0879B1D
Authority key identifier: 28:EE:46:D4:F0:99:B2:4B:9D:A8:C8:08:42:FE:D2:77:AB:B9:24:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28EE46D4F099B24B9DA8C80842FED277ABB924AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/1/323830343a363331383a3a2f33322d3332203d3e20323639333338.roa
Signing time:             Sat 13 Apr 2024 16:16:10 +0000
ROA not before:           Sat 13 Apr 2024 16:11:10 +0000
ROA not after:            Sat 12 Apr 2025 16:16:10 +0000
asID:                     269338
IP address blocks:        2804:6318::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:02:3b:1d:d7:e7:6a:c9:28:91:24:9b:da:a4:b8:00:c0:87:9b:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28EE46D4F099B24B9DA8C80842FED277ABB924AE
        Validity
            Not Before: Apr 13 16:11:10 2024 GMT
            Not After : Apr 12 16:16:10 2025 GMT
        Subject: CN=C60333B8F67A0D91264413BF3751C08E0702A412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b4:eb:10:62:b1:7c:a2:6a:e0:9e:97:f2:58:
                    1d:39:e1:b6:2a:e8:80:42:01:45:bf:81:4f:55:91:
                    a7:a8:91:e4:3e:a1:37:3c:81:a0:e9:45:50:e2:71:
                    d3:21:ba:75:1f:4e:2b:1f:de:c0:ff:e4:f7:e3:5e:
                    55:64:3e:77:a3:ef:69:e5:71:ce:2c:0a:07:32:fd:
                    52:5c:78:73:7b:9d:e7:94:ee:6c:6a:7c:c2:5f:c9:
                    64:55:22:4e:48:e8:37:9b:2e:b8:ab:1d:a4:57:78:
                    39:38:7d:f1:6f:06:bf:91:35:93:fc:cc:52:23:9b:
                    b9:0b:f7:ec:da:71:32:ee:a7:71:00:38:33:f6:8a:
                    9b:21:3e:88:1b:b9:0b:6e:c0:c9:b3:06:e6:33:7f:
                    d1:49:a5:01:a3:3e:76:b0:c5:ff:d2:e5:5f:22:80:
                    15:b7:21:9a:fa:0b:0d:c9:8d:32:18:8c:73:06:58:
                    8e:af:72:0b:c7:f7:17:75:07:53:0d:34:f8:4a:e6:
                    11:9b:0e:f9:34:b9:6d:ec:24:26:10:c6:54:ba:71:
                    93:66:92:39:43:87:d5:a6:e6:4c:cb:23:62:1b:43:
                    ec:41:c3:8a:b6:5f:1a:76:0b:40:f5:85:79:77:06:
                    24:03:d1:d5:a4:ef:3c:3e:2f:0a:de:a4:0e:65:f0:
                    88:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:03:33:B8:F6:7A:0D:91:26:44:13:BF:37:51:C0:8E:07:02:A4:12
            X509v3 Authority Key Identifier:
                keyid:28:EE:46:D4:F0:99:B2:4B:9D:A8:C8:08:42:FE:D2:77:AB:B9:24:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/1/28EE46D4F099B24B9DA8C80842FED277ABB924AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28EE46D4F099B24B9DA8C80842FED277ABB924AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/1/323830343a363331383a3a2f33322d3332203d3e20323639333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6318::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:b8:ba:c7:a8:a0:b3:07:73:96:b2:0b:44:d4:56:2a:28:e1:
         61:5f:ee:cb:06:fe:b0:9d:79:bf:04:7b:d5:6a:e3:fb:3f:58:
         3a:75:15:c0:8b:14:f4:35:cb:3c:de:92:b3:6c:e5:8a:43:02:
         d8:e3:2a:ad:75:6b:f8:d1:26:c1:21:37:9b:17:02:d7:5d:75:
         2c:70:85:70:2d:67:0b:b5:e2:e4:46:f9:e8:31:0e:d9:f4:fa:
         16:87:c4:da:c5:1a:36:d6:f3:c8:dc:6d:3e:39:1b:2e:4d:56:
         05:e9:a5:7d:cc:7c:08:36:f3:4e:05:85:1b:69:b7:e6:db:89:
         1a:02:05:41:8b:a1:2c:7a:45:64:84:0a:89:f9:d3:c8:51:93:
         ec:84:6e:98:00:a2:de:52:07:64:04:5b:5f:8d:13:66:96:8c:
         6a:cb:cd:12:fb:60:85:52:f2:79:95:5e:40:be:95:8b:cf:50:
         21:e0:e6:50:00:13:28:ef:d9:e2:ad:f2:54:f9:2b:a5:6d:89:
         58:78:3b:51:8c:fe:07:f1:0b:f7:1f:74:40:3f:0c:8a:d4:46:
         e2:30:de:1e:d7:fa:a5:5b:31:b8:f2:5c:7b:ad:8f:ea:ac:34:
         bd:e5:37:ef:51:24:4c:38:70:4d:45:59:85:23:f4:61:33:69:
         f5:8c:a6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org