Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/0/AS61832.roa
File:                     AS61832.roa (raw, json)
Hash identifier:          Rr4x8XJ4PCY6YQaOH34etomcojGs4JwQYHHCTCbmTO0=
Subject key identifier:   2E:11:B5:BB:29:80:05:0B:E2:3F:DC:DF:7D:5E:2D:58:4E:94:4E:96
Certificate issuer:       /CN=273D3405FC3C25BBC6A3CB18AF97628EBF4162A8
Certificate serial:       7CF9DD08549519EBAE3BB94D7522B1B0F2A20BAD
Authority key identifier: 27:3D:34:05:FC:3C:25:BB:C6:A3:CB:18:AF:97:62:8E:BF:41:62:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/273D3405FC3C25BBC6A3CB18AF97628EBF4162A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/0/AS61832.roa
Signing time:             Mon 01 Apr 2024 19:55:41 +0000
ROA not before:           Mon 01 Apr 2024 19:50:41 +0000
ROA not after:            Mon 31 Mar 2025 19:55:41 +0000
asID:                     61832
IP address blocks:        2804:854:a::/48 maxlen: 48
                          2804:854:b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:f9:dd:08:54:95:19:eb:ae:3b:b9:4d:75:22:b1:b0:f2:a2:0b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=273D3405FC3C25BBC6A3CB18AF97628EBF4162A8
        Validity
            Not Before: Apr  1 19:50:41 2024 GMT
            Not After : Mar 31 19:55:41 2025 GMT
        Subject: CN=2E11B5BB2980050BE23FDCDF7D5E2D584E944E96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1c:6a:ce:0a:cb:fd:83:47:e6:5e:ef:96:94:
                    78:80:a1:19:07:e5:52:5a:92:78:19:3d:f1:42:76:
                    16:94:d7:4f:29:85:c4:48:a8:d5:5d:06:67:a8:82:
                    04:57:2f:cf:59:ee:68:f5:20:db:da:fc:63:35:6d:
                    e9:ec:fb:eb:75:95:ae:00:09:52:ad:be:df:4b:b1:
                    6a:f2:64:27:29:d0:ce:54:79:bd:ad:07:7c:b3:5d:
                    da:6e:d9:98:1c:f7:38:83:f0:3a:68:f7:0d:f1:18:
                    dc:86:eb:b4:60:ef:ba:7f:54:e1:dd:f7:80:d2:9d:
                    58:1a:33:28:b0:13:a3:4c:f2:23:9b:48:46:62:36:
                    89:74:6c:1e:08:cd:a1:a2:9e:04:fb:52:5c:c8:fe:
                    41:a0:60:44:e0:49:04:6a:b2:f7:ac:14:6f:36:96:
                    e9:90:4c:1d:89:9d:a2:c8:60:2b:58:50:a0:67:e1:
                    8b:ef:2d:33:74:24:70:d8:39:c1:51:78:da:09:6d:
                    4d:f7:2c:6b:54:63:0b:69:bf:10:df:e9:d3:90:bd:
                    71:0d:75:c8:90:13:fc:bd:08:ce:20:ef:b3:18:d2:
                    6c:6b:5f:94:58:ca:a6:bb:d1:22:9f:f8:f6:e5:2f:
                    b9:85:64:1e:43:0a:de:84:42:fa:ce:a1:b2:2e:8c:
                    8b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:11:B5:BB:29:80:05:0B:E2:3F:DC:DF:7D:5E:2D:58:4E:94:4E:96
            X509v3 Authority Key Identifier:
                keyid:27:3D:34:05:FC:3C:25:BB:C6:A3:CB:18:AF:97:62:8E:BF:41:62:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/0/273D3405FC3C25BBC6A3CB18AF97628EBF4162A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/273D3405FC3C25BBC6A3CB18AF97628EBF4162A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/0/AS61832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:854:a::/47

    Signature Algorithm: sha256WithRSAEncryption
         10:bf:be:d3:ab:87:71:ee:d7:01:54:eb:9d:3b:34:0d:ee:3f:
         e1:82:af:dc:aa:2f:0c:b8:ac:2c:c6:c3:59:38:27:fe:ca:c1:
         3d:7c:97:70:55:8d:81:34:c1:f4:04:47:68:50:8a:44:7c:cf:
         19:2f:18:bd:05:8d:51:75:1d:ec:cc:de:04:5f:80:e2:c8:62:
         4b:bc:a9:97:64:a1:60:5a:55:c3:9e:84:20:71:88:1d:57:c3:
         f8:72:4a:35:00:55:ed:21:8e:fd:b4:7c:48:fa:45:c8:02:b0:
         55:c1:15:c8:fb:7c:21:e6:e3:0e:0e:76:22:f8:1a:7e:cd:40:
         a9:0b:c7:49:87:ec:79:27:ae:90:6c:09:88:67:d9:d6:a3:2c:
         6a:3a:89:84:4f:87:86:98:78:15:ae:e0:13:4e:ad:2d:ad:d2:
         a0:bf:6e:57:e9:e3:e9:86:50:35:b1:d9:7d:48:a8:0e:a9:c0:
         11:34:5e:eb:1f:ca:10:d1:a0:70:97:04:9a:fc:23:b5:fc:2e:
         d9:ed:32:3c:61:7c:47:e4:f1:19:ab:10:80:ea:c5:1e:6c:72:
         b3:e3:40:be:37:e5:54:25:61:36:56:65:6f:77:56:4f:55:c9:
         00:ee:9f:6e:c4:c8:a7:c3:48:85:13:23:59:b7:25:54:32:8c:
         cc:39:91:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:36 2024 by rpki-client on console-ams.rpki-client.org