Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/0/323830343a316235633a3a2f33322d3438203d3e203238333334.roa
File:                     323830343a316235633a3a2f33322d3438203d3e203238333334.roa (raw, json)
Hash identifier:          cSLO2nxctkY9lTodDYezZoql4GCFohiPDRLhz2rsCQE=
Subject key identifier:   0D:61:F2:B8:0C:84:E1:91:DD:80:AE:F0:FD:B8:36:F2:E9:03:63:4C
Certificate issuer:       /CN=C6FD89549D5BEF0C2C05BB4F5E253D1C02EEFDF9
Certificate serial:       2A31BFB456DBF8E75DEA068D4B36419DEF6D7BBF
Authority key identifier: C6:FD:89:54:9D:5B:EF:0C:2C:05:BB:4F:5E:25:3D:1C:02:EE:FD:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6FD89549D5BEF0C2C05BB4F5E253D1C02EEFDF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/0/323830343a316235633a3a2f33322d3438203d3e203238333334.roa
Signing time:             Tue 16 May 2023 13:58:33 +0000
ROA not before:           Tue 16 May 2023 13:53:33 +0000
ROA not after:            Tue 14 May 2024 13:58:33 +0000
asID:                     28334
IP address blocks:        2804:1b5c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:31:bf:b4:56:db:f8:e7:5d:ea:06:8d:4b:36:41:9d:ef:6d:7b:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6FD89549D5BEF0C2C05BB4F5E253D1C02EEFDF9
        Validity
            Not Before: May 16 13:53:33 2023 GMT
            Not After : May 14 13:58:33 2024 GMT
        Subject: CN=0D61F2B80C84E191DD80AEF0FDB836F2E903634C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d1:29:d2:69:40:47:7a:3c:41:18:f8:bd:e9:
                    c0:14:61:de:9f:44:f5:97:88:a5:12:13:53:95:c0:
                    55:b8:5b:f9:74:94:75:f9:4d:64:3b:77:9b:07:b9:
                    90:41:2c:6b:0e:af:38:d9:f5:15:ac:c8:dc:8e:dd:
                    dc:84:41:04:ae:c1:2d:58:bc:fd:f9:12:8f:e0:12:
                    ce:ac:9a:e1:5e:85:b8:42:e2:df:fd:fc:ca:1f:5d:
                    9b:f3:86:aa:55:fc:0c:af:0b:fa:43:00:53:23:ce:
                    df:86:8f:9c:75:b4:b1:0e:0e:25:1f:83:6d:5d:6a:
                    9f:a3:78:2c:ae:30:db:ad:75:e8:96:43:44:18:77:
                    33:6f:d9:8c:7f:f0:d0:19:09:cc:db:e1:a9:d7:89:
                    53:eb:75:9c:b7:5f:a2:ae:ee:33:f4:b5:f5:ac:7f:
                    53:bd:31:de:3f:7e:47:7b:eb:46:3a:ff:17:68:11:
                    82:45:96:18:f4:6a:ba:95:4d:5b:b1:15:9f:e5:a7:
                    2f:63:67:3e:5e:df:1a:3b:8b:48:9f:ae:66:ef:84:
                    c1:28:a4:8f:01:b5:d2:c6:ed:91:36:1e:77:61:3a:
                    78:53:8c:bc:78:73:31:07:bc:45:e3:9e:4b:6e:8d:
                    95:34:23:65:62:23:00:24:96:d7:56:4e:ea:0c:f1:
                    a0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:61:F2:B8:0C:84:E1:91:DD:80:AE:F0:FD:B8:36:F2:E9:03:63:4C
            X509v3 Authority Key Identifier:
                keyid:C6:FD:89:54:9D:5B:EF:0C:2C:05:BB:4F:5E:25:3D:1C:02:EE:FD:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/0/C6FD89549D5BEF0C2C05BB4F5E253D1C02EEFDF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6FD89549D5BEF0C2C05BB4F5E253D1C02EEFDF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/0/323830343a316235633a3a2f33322d3438203d3e203238333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b5c::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:4c:30:0d:bb:32:c5:16:8f:36:ff:b8:22:32:3d:1d:a8:e4:
         09:74:2a:39:e4:df:e0:99:be:d4:5d:f5:78:47:7c:cd:1b:73:
         8a:0c:5f:29:c5:b5:4f:a5:50:a7:04:c3:c9:93:2f:27:3b:d3:
         24:e7:cf:33:91:d1:3f:66:7d:e2:7b:20:ce:ff:a4:4a:1a:a6:
         05:cb:66:8c:6b:ac:62:e9:48:74:b6:50:70:7f:8a:33:22:35:
         3a:a1:86:fc:90:f2:4b:18:41:eb:28:11:d6:03:08:fd:2e:c5:
         50:d2:1e:7a:cc:ee:9a:f8:30:f9:11:05:60:f9:43:9f:32:d9:
         ff:a3:6b:9f:25:e4:77:a4:13:31:05:1f:66:6c:1b:69:d9:55:
         05:58:b1:6d:7c:04:8f:fd:31:13:fe:46:7b:b8:0f:d1:37:bb:
         fd:be:36:cc:5f:e2:33:56:c7:f6:4c:4d:e7:d9:d7:74:06:a2:
         61:71:58:fe:15:8b:31:66:be:18:53:8c:3f:a4:30:be:08:aa:
         40:ba:26:2b:67:8e:20:df:42:cd:7c:ac:9c:19:92:b8:50:ee:
         39:9d:82:39:a7:20:09:9d:88:06:36:27:1f:d6:76:6c:14:c5:
         81:dc:fc:ae:b4:35:8c:0c:88:b7:d4:22:c7:6e:cb:b1:cb:1e:
         6b:6e:1a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org