Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/323830343a316562383a623161343a3a2f34382d3438203d3e203532353634.roa
File:                     323830343a316562383a623161343a3a2f34382d3438203d3e203532353634.roa (raw, json)
Hash identifier:          IU6s/6okpq8mbzdhjnaNI+lsIMbz75GAw4oHxR7Kr5o=
Subject key identifier:   87:84:59:BF:9F:9E:21:B0:9D:95:BC:15:19:4B:F2:AF:56:94:1F:8B
Certificate issuer:       /CN=6F302B4EBC08D62D14C6ED76F61D1763BC9ED748
Certificate serial:       4F486B577C50DDE959C0A29B46EBDCBAA2C7AA4A
Authority key identifier: 6F:30:2B:4E:BC:08:D6:2D:14:C6:ED:76:F6:1D:17:63:BC:9E:D7:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F302B4EBC08D62D14C6ED76F61D1763BC9ED748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/323830343a316562383a623161343a3a2f34382d3438203d3e203532353634.roa
Signing time:             Tue 31 Oct 2023 20:33:03 +0000
ROA not before:           Tue 31 Oct 2023 20:28:03 +0000
ROA not after:            Tue 29 Oct 2024 20:33:03 +0000
asID:                     52564
IP address blocks:        2804:1eb8:b1a4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:48:6b:57:7c:50:dd:e9:59:c0:a2:9b:46:eb:dc:ba:a2:c7:aa:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F302B4EBC08D62D14C6ED76F61D1763BC9ED748
        Validity
            Not Before: Oct 31 20:28:03 2023 GMT
            Not After : Oct 29 20:33:03 2024 GMT
        Subject: CN=878459BF9F9E21B09D95BC15194BF2AF56941F8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c6:9a:96:99:85:ce:8d:28:70:70:61:42:c2:
                    7c:2e:d7:b8:f7:6e:fe:28:95:03:c9:c1:1a:e5:ed:
                    cc:d1:ea:69:18:24:25:d1:4e:d7:fd:82:52:71:50:
                    f3:52:8b:8c:84:0f:4c:98:ef:ee:72:92:9d:91:26:
                    88:bf:3b:97:a8:f8:11:50:00:f1:28:f1:08:6f:3f:
                    c1:9b:09:82:1d:f4:6b:4c:63:76:9a:da:f1:2d:d1:
                    dd:04:40:ad:3a:95:4b:5f:30:04:eb:f7:ac:2e:93:
                    78:7a:d0:a3:c6:3c:54:26:2d:9c:cc:59:98:d6:f8:
                    61:9e:26:2c:e1:f8:1b:33:26:01:67:72:b9:60:ae:
                    0f:ae:50:41:17:28:56:5f:cc:2f:2a:18:cc:45:ba:
                    a2:b4:41:fd:61:0b:33:d9:87:3a:2c:e3:00:97:17:
                    4e:33:f4:e0:92:f2:b1:fc:db:a5:97:9a:b2:34:6c:
                    a8:00:bb:40:f2:c5:f5:2a:6d:5f:36:aa:a0:cd:3c:
                    62:1b:16:e5:ae:e9:0e:9e:d4:6f:4d:83:c0:cd:05:
                    e6:3d:c2:3f:81:0d:c8:82:87:55:7a:a4:02:20:bc:
                    0f:a4:75:fa:65:23:53:d0:75:ef:9a:02:f6:eb:e6:
                    73:79:00:cf:d2:22:bc:97:f7:59:df:9b:d6:5b:f8:
                    a2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:84:59:BF:9F:9E:21:B0:9D:95:BC:15:19:4B:F2:AF:56:94:1F:8B
            X509v3 Authority Key Identifier:
                keyid:6F:30:2B:4E:BC:08:D6:2D:14:C6:ED:76:F6:1D:17:63:BC:9E:D7:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/6F302B4EBC08D62D14C6ED76F61D1763BC9ED748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F302B4EBC08D62D14C6ED76F61D1763BC9ED748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/323830343a316562383a623161343a3a2f34382d3438203d3e203532353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1eb8:b1a4::/48

    Signature Algorithm: sha256WithRSAEncryption
         b8:2f:11:0f:8b:a9:d5:77:64:fd:55:5e:d6:6c:b6:f6:44:8a:
         8c:64:2c:86:08:3b:7d:32:0d:0e:83:d8:36:07:f7:1a:45:bc:
         c8:03:40:e1:1e:4d:4c:84:cf:f4:97:f2:ea:f0:9f:d7:45:b3:
         84:68:c7:3b:c9:22:5b:57:cc:b8:45:63:ea:5c:b0:16:52:17:
         8d:ec:6c:c4:73:66:4c:c3:55:90:1d:9f:5f:c5:79:22:1b:39:
         71:82:ac:c6:f6:cb:ae:65:02:95:88:1e:a7:da:82:45:2b:e4:
         8b:00:71:b5:04:f9:6f:8b:8e:4e:c2:a0:3b:94:91:05:57:45:
         ac:90:c8:25:8b:b3:e4:07:31:30:73:44:9e:d0:28:73:ef:0e:
         da:68:38:91:35:47:de:5c:46:66:6a:4b:ae:c2:2a:3a:71:ad:
         f3:50:07:73:42:d1:92:a5:9e:50:23:ff:11:70:8f:87:d1:1f:
         04:b9:c7:b5:c7:6b:c7:92:57:bc:ec:bd:94:70:5b:32:07:4a:
         ed:7f:42:68:01:00:d6:17:fe:96:8a:47:13:97:4b:7e:be:28:
         dd:e5:ca:3f:dd:a1:c2:ca:56:2a:9a:41:03:18:21:ee:61:8b:
         26:48:9a:08:a5:d3:7a:72:29:5d:b2:fe:0e:9d:88:7d:e8:de:
         0f:88:37:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org