Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/1/323830343a363331383a3a2f33332d3333203d3e20323639333338.roa
File:                     323830343a363331383a3a2f33332d3333203d3e20323639333338.roa (raw, json)
Hash identifier:          ogVlcmQEIBKJ9rOqyyzb3G+h4zDPLSrw7I166NL/quM=
Subject key identifier:   9B:6E:38:3A:C0:4F:F5:64:2E:C9:3B:20:D0:3C:FB:F3:06:61:80:B3
Certificate issuer:       /CN=28EE46D4F099B24B9DA8C80842FED277ABB924AE
Certificate serial:       24232C6F526B91E7F1EBAD2EFF01F0E8A965FB03
Authority key identifier: 28:EE:46:D4:F0:99:B2:4B:9D:A8:C8:08:42:FE:D2:77:AB:B9:24:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28EE46D4F099B24B9DA8C80842FED277ABB924AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/1/323830343a363331383a3a2f33332d3333203d3e20323639333338.roa
Signing time:             Sat 13 Apr 2024 16:16:09 +0000
ROA not before:           Sat 13 Apr 2024 16:11:09 +0000
ROA not after:            Sat 12 Apr 2025 16:16:09 +0000
asID:                     269338
IP address blocks:        2804:6318::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:23:2c:6f:52:6b:91:e7:f1:eb:ad:2e:ff:01:f0:e8:a9:65:fb:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28EE46D4F099B24B9DA8C80842FED277ABB924AE
        Validity
            Not Before: Apr 13 16:11:09 2024 GMT
            Not After : Apr 12 16:16:09 2025 GMT
        Subject: CN=9B6E383AC04FF5642EC93B20D03CFBF3066180B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cf:c9:3a:af:24:c7:33:47:a2:84:cc:6c:c0:
                    91:f4:48:23:6b:e4:40:b7:36:bf:a7:06:bd:05:2d:
                    fc:89:5c:ad:9c:8c:18:06:a2:cc:e8:b5:22:5f:a2:
                    a3:b1:f8:ee:75:52:77:eb:4a:4b:ba:70:c8:c7:a2:
                    16:75:ed:8e:37:f7:e7:08:1f:1d:e9:fc:96:1d:0d:
                    a4:c5:51:82:1b:15:a5:e9:df:3a:e5:5e:9c:c4:81:
                    49:49:e1:0f:fd:f6:c2:96:c2:25:7e:d3:0b:a9:6e:
                    3f:66:90:06:cb:cb:51:35:43:bb:2a:5a:29:00:a5:
                    ef:a4:71:64:57:1e:66:51:9f:a2:0e:4c:d2:46:85:
                    84:40:5e:b3:f1:6d:2d:12:5c:14:3b:c9:dc:cb:38:
                    80:c6:d6:a0:3f:c4:b8:b2:b7:f6:44:06:0d:75:fb:
                    c7:d3:de:dc:6b:05:68:78:81:2c:2d:3f:64:2a:70:
                    8e:6d:4c:88:72:d7:0f:fd:7c:06:3d:31:f2:a1:3c:
                    e2:b2:32:fb:54:47:2a:9d:a2:e6:e6:bf:1f:6c:47:
                    89:b4:22:fc:6b:57:82:65:fe:30:fb:15:90:4e:dd:
                    42:b7:4a:ae:65:f8:24:39:6a:50:c6:13:5f:c2:7c:
                    54:a3:43:04:4d:e7:fc:be:8e:e4:13:00:5e:35:86:
                    9b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:6E:38:3A:C0:4F:F5:64:2E:C9:3B:20:D0:3C:FB:F3:06:61:80:B3
            X509v3 Authority Key Identifier:
                keyid:28:EE:46:D4:F0:99:B2:4B:9D:A8:C8:08:42:FE:D2:77:AB:B9:24:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/1/28EE46D4F099B24B9DA8C80842FED277ABB924AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28EE46D4F099B24B9DA8C80842FED277ABB924AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/1/323830343a363331383a3a2f33332d3333203d3e20323639333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6318::/33

    Signature Algorithm: sha256WithRSAEncryption
         78:5c:7f:eb:28:5f:4b:53:b9:4f:f3:26:17:02:44:4f:1e:f2:
         5d:71:2e:cb:e0:2e:de:50:0a:aa:f7:3d:3a:33:e7:e4:e8:35:
         17:a8:af:9c:2f:6f:c9:53:4a:a5:8b:51:47:2a:ef:af:92:53:
         07:71:e3:14:1a:69:63:46:1c:51:26:53:34:31:d5:3f:fd:f5:
         9a:32:01:d4:52:f3:33:d8:a8:1a:29:c6:99:74:66:7a:98:47:
         1c:7f:a3:4e:e6:ac:06:7e:90:fe:40:6a:19:f3:03:9b:39:b5:
         07:8f:2c:81:21:17:0f:41:3f:d5:e4:e4:29:36:d0:6f:10:3b:
         d7:b4:00:95:dc:c0:a8:39:a4:50:b5:dd:bd:b3:1d:aa:1e:25:
         b6:fe:b2:2e:a2:6a:3e:f3:86:4c:a8:44:de:53:ec:3b:5e:ad:
         20:0a:7c:76:b7:9a:b4:57:ca:4b:b1:63:f0:89:a2:32:3a:42:
         44:5f:31:fb:11:08:21:e3:e7:32:a8:10:27:23:71:85:70:87:
         0a:d8:00:11:85:dc:af:41:64:dd:59:af:2c:f4:21:2d:a5:97:
         27:9f:9f:fa:dd:3a:aa:4a:f8:48:36:d4:d8:aa:94:a6:92:93:
         d8:8b:26:25:b5:0a:e0:a2:cc:68:4e:20:bb:1e:4d:29:d6:06:
         01:c2:0d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org