Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/1/323830343a363331383a3a2f33342d3334203d3e20323639333338.roa
File:                     323830343a363331383a3a2f33342d3334203d3e20323639333338.roa (raw, json)
Hash identifier:          68P4ktVHPeoF+DgSW1Q3/OflcDnAV4BJs8upVavDHYE=
Subject key identifier:   35:28:21:A3:8F:98:08:0C:F8:96:0B:3F:04:2B:95:06:F9:9E:89:22
Certificate issuer:       /CN=28EE46D4F099B24B9DA8C80842FED277ABB924AE
Certificate serial:       4E044BC931A90D40AA0F9C186444250A6D37340F
Authority key identifier: 28:EE:46:D4:F0:99:B2:4B:9D:A8:C8:08:42:FE:D2:77:AB:B9:24:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28EE46D4F099B24B9DA8C80842FED277ABB924AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/1/323830343a363331383a3a2f33342d3334203d3e20323639333338.roa
Signing time:             Sat 13 Apr 2024 16:16:14 +0000
ROA not before:           Sat 13 Apr 2024 16:11:14 +0000
ROA not after:            Sat 12 Apr 2025 16:16:14 +0000
asID:                     269338
IP address blocks:        2804:6318::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:04:4b:c9:31:a9:0d:40:aa:0f:9c:18:64:44:25:0a:6d:37:34:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28EE46D4F099B24B9DA8C80842FED277ABB924AE
        Validity
            Not Before: Apr 13 16:11:14 2024 GMT
            Not After : Apr 12 16:16:14 2025 GMT
        Subject: CN=352821A38F98080CF8960B3F042B9506F99E8922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:89:8a:61:69:fb:92:dd:9f:ad:b8:79:bf:53:
                    ce:6f:00:6d:60:92:6f:d7:59:12:28:76:af:c8:b5:
                    9c:fa:89:82:fb:1a:a3:f4:40:0b:2a:99:84:0e:f2:
                    37:10:68:45:9d:26:a2:8e:b4:68:bf:f1:a3:94:98:
                    f2:9f:c2:89:7c:d3:eb:1f:43:fb:79:35:e7:29:98:
                    2b:41:d2:79:0d:13:d9:83:e2:8c:df:96:be:2b:c0:
                    15:10:35:c8:e9:fc:57:bc:02:53:c6:a3:bd:5f:37:
                    dd:fd:c8:19:c5:7a:32:5a:e7:82:32:cc:9e:f5:ba:
                    d2:f2:b1:67:3d:8d:47:fa:61:1d:72:91:a6:97:8b:
                    a7:a5:c0:34:5c:90:d9:8d:69:af:19:d2:0f:94:f0:
                    0f:34:63:ab:bf:dc:8b:12:90:4d:16:81:48:e1:99:
                    12:b9:b1:12:5d:b5:92:3c:20:c5:67:d1:14:fd:dc:
                    9f:f3:3a:f6:bd:87:36:5e:49:26:9f:7b:c3:0c:1f:
                    f7:ed:2c:63:b3:37:4f:f8:40:8e:f7:d3:ed:71:d4:
                    36:e2:3c:50:4c:fa:00:52:7b:66:2a:a6:6b:11:49:
                    16:29:d3:10:93:24:79:f8:0d:31:bf:ad:a6:54:e0:
                    92:ed:05:94:99:fa:f7:c4:78:60:1c:75:37:b0:c0:
                    14:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:28:21:A3:8F:98:08:0C:F8:96:0B:3F:04:2B:95:06:F9:9E:89:22
            X509v3 Authority Key Identifier:
                keyid:28:EE:46:D4:F0:99:B2:4B:9D:A8:C8:08:42:FE:D2:77:AB:B9:24:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/1/28EE46D4F099B24B9DA8C80842FED277ABB924AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28EE46D4F099B24B9DA8C80842FED277ABB924AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/1/323830343a363331383a3a2f33342d3334203d3e20323639333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6318::/34

    Signature Algorithm: sha256WithRSAEncryption
         3e:af:67:34:57:6d:37:29:36:29:33:08:cc:fc:6d:4c:8a:64:
         ee:9a:54:cd:14:51:a7:c5:b0:86:70:a8:85:4d:f6:5d:bb:6f:
         83:e7:47:c0:14:70:62:9c:6d:92:bc:c9:72:23:4f:fc:73:cd:
         18:95:5b:fc:ae:74:b9:c0:83:70:4c:4f:7c:91:11:24:9a:72:
         81:91:04:54:de:e8:e2:e4:14:c6:27:49:77:f8:a1:e1:ed:05:
         a2:71:b7:7a:b8:5a:cb:a7:bc:40:3d:c0:27:85:3d:b2:d8:bb:
         ba:34:b7:b0:af:b0:62:64:64:d0:69:fc:16:22:ca:1e:b3:31:
         53:a3:7b:0b:31:1d:36:54:da:68:ff:95:57:e4:95:31:30:38:
         26:e4:7b:e1:f1:4e:25:cb:74:87:4b:cd:1a:fc:4e:a6:5c:4a:
         b7:ea:3f:d2:84:59:32:b5:e6:2e:7c:78:88:c3:13:ee:45:34:
         e2:39:1a:28:43:28:11:a9:ef:74:e7:4e:b1:05:c4:35:12:4d:
         2f:8f:c8:3b:50:ad:36:22:44:5f:3f:44:82:a8:5a:d8:6a:db:
         44:1c:88:f2:28:74:64:e8:52:10:01:d3:90:0a:bd:45:96:88:
         ae:97:dc:20:62:2b:7c:2f:a4:36:c8:5a:20:0b:0f:a3:ce:25:
         55:c2:50:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org