Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/323830343a313439343a3a2f33322d3438203d3e20323633333338.roa
File:                     323830343a313439343a3a2f33322d3438203d3e20323633333338.roa (raw, json)
Hash identifier:          B2vDXYAY89+ZKCb3LPELAIBA8d/+d6uj3JeqxHL0PPU=
Subject key identifier:   61:49:B9:7B:05:CD:17:67:F0:4E:E3:8F:7B:52:4F:EC:C3:E6:EE:47
Certificate issuer:       /CN=B6DAAD32AAB94FC40A18437F7F452BF3069B37A8
Certificate serial:       44CDE69095BAB1801688FC9375576330B1D833D8
Authority key identifier: B6:DA:AD:32:AA:B9:4F:C4:0A:18:43:7F:7F:45:2B:F3:06:9B:37:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DAAD32AAB94FC40A18437F7F452BF3069B37A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/323830343a313439343a3a2f33322d3438203d3e20323633333338.roa
Signing time:             Tue 16 Apr 2024 11:41:47 +0000
ROA not before:           Tue 16 Apr 2024 11:36:47 +0000
ROA not after:            Tue 15 Apr 2025 11:41:47 +0000
asID:                     263338
IP address blocks:        2804:1494::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:cd:e6:90:95:ba:b1:80:16:88:fc:93:75:57:63:30:b1:d8:33:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6DAAD32AAB94FC40A18437F7F452BF3069B37A8
        Validity
            Not Before: Apr 16 11:36:47 2024 GMT
            Not After : Apr 15 11:41:47 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:41:d1:d6:a4:d0:e3:18:5c:7f:f9:ab:56:b3:
                    d0:e6:70:56:47:63:d2:ac:02:5a:cc:ff:09:49:62:
                    31:bc:3c:ef:1a:0a:0b:23:ff:e0:65:0a:a2:85:e1:
                    27:dd:e5:1a:fd:fe:c1:e5:ef:99:e1:46:c9:cd:91:
                    31:25:89:01:68:05:f0:5c:0a:c3:b7:bd:24:2e:85:
                    4b:23:e6:ef:9d:ff:a1:ee:60:6d:10:af:5e:87:f3:
                    90:77:0b:3d:b4:a3:dd:cd:0b:5f:7b:43:18:40:fa:
                    36:2f:80:a0:d1:5d:3a:3c:f8:40:0c:01:76:d6:4b:
                    e5:e0:01:db:92:f3:ef:29:b2:34:a5:d3:fc:70:ab:
                    a9:2b:6f:de:aa:ae:6d:b0:f3:ac:f5:ba:1e:5b:a7:
                    84:d1:bf:ad:bc:98:bf:1a:dc:ce:77:ef:8f:dd:bc:
                    1b:91:09:ea:9d:15:c3:d2:33:36:46:b7:a1:e4:a7:
                    67:92:5d:da:ba:52:97:68:d8:84:c7:b8:36:e1:25:
                    68:1c:4f:39:87:ea:42:2f:5e:1d:2a:26:62:32:99:
                    a3:93:2b:3d:58:fd:48:c4:f4:f7:32:58:06:88:d7:
                    6a:1c:8e:d4:af:ff:f7:67:3e:86:6e:7c:5b:5d:c1:
                    dc:f9:19:1f:20:08:8f:ab:26:76:2d:bd:5a:df:2d:
                    80:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:49:B9:7B:05:CD:17:67:F0:4E:E3:8F:7B:52:4F:EC:C3:E6:EE:47
            X509v3 Authority Key Identifier:
                keyid:B6:DA:AD:32:AA:B9:4F:C4:0A:18:43:7F:7F:45:2B:F3:06:9B:37:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/B6DAAD32AAB94FC40A18437F7F452BF3069B37A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DAAD32AAB94FC40A18437F7F452BF3069B37A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/323830343a313439343a3a2f33322d3438203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1494::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:62:b2:0a:5e:a9:34:b5:fb:0f:cd:fc:f5:6a:9e:f9:6b:a5:
         f9:62:4f:f8:34:2c:9e:ec:37:f2:1f:d0:9e:56:79:a4:f7:2b:
         11:81:0b:b8:1e:29:25:12:14:67:1f:95:36:3c:81:57:70:9f:
         59:52:32:45:ab:5e:59:eb:26:4a:26:a7:db:f3:5e:31:71:61:
         44:97:6d:7d:ca:83:a2:24:a3:ad:25:0a:67:b6:33:45:7a:c3:
         3f:b5:fe:fd:04:e7:85:5d:2b:76:30:8f:06:f6:f5:e0:92:24:
         27:90:11:6e:60:93:f6:94:ed:03:ec:d4:8d:c5:0e:c2:74:41:
         20:df:22:47:5a:7b:7e:6a:6d:98:90:29:ca:33:8b:17:b7:3e:
         c3:93:3a:28:7d:cc:91:0f:35:e1:74:6a:fe:c3:66:2d:91:31:
         a7:b4:3c:19:4a:dd:a1:b0:20:5f:45:6b:00:62:b0:8f:73:3b:
         2f:3c:89:5b:5c:2a:67:0b:97:11:3b:7c:43:d5:13:12:a4:59:
         b8:d0:fa:69:1c:13:67:d2:71:b4:0f:7c:43:64:8c:70:1d:85:
         4a:21:d5:75:fb:6f:25:d4:50:cd:e5:91:72:0d:3b:30:7c:41:
         b8:d9:9a:37:42:17:63:39:6e:17:2d:90:83:38:85:e4:2f:c7:
         df:0c:eb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:36 2024 by rpki-client on console-ams.rpki-client.org