Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/323830343a323132383a3a2f33322d3332203d3e20323634353339.roa
File:                     323830343a323132383a3a2f33322d3332203d3e20323634353339.roa (raw, json)
Hash identifier:          3guxdWdFp4vG1lBzAMoj/4XWRPbS/59YwKA4q9XMlLM=
Subject key identifier:   6C:AC:28:C6:89:08:4B:71:57:37:65:91:7C:BE:53:4C:19:FC:26:1B
Certificate issuer:       /CN=AD0F2A1345790C4B061672E4A6491483609A7BCB
Certificate serial:       3F109E7B2BA98EF544E17D5A0D2FF9B23EA83E44
Authority key identifier: AD:0F:2A:13:45:79:0C:4B:06:16:72:E4:A6:49:14:83:60:9A:7B:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD0F2A1345790C4B061672E4A6491483609A7BCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/323830343a323132383a3a2f33322d3332203d3e20323634353339.roa
Signing time:             Thu 29 Jun 2023 14:52:18 +0000
ROA not before:           Thu 29 Jun 2023 14:47:18 +0000
ROA not after:            Thu 27 Jun 2024 14:52:18 +0000
asID:                     264539
IP address blocks:        2804:2128::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:10:9e:7b:2b:a9:8e:f5:44:e1:7d:5a:0d:2f:f9:b2:3e:a8:3e:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD0F2A1345790C4B061672E4A6491483609A7BCB
        Validity
            Not Before: Jun 29 14:47:18 2023 GMT
            Not After : Jun 27 14:52:18 2024 GMT
        Subject: CN=6CAC28C689084B71573765917CBE534C19FC261B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:07:3d:84:5b:9b:36:ba:20:cb:00:b6:63:97:
                    58:e3:90:45:c0:44:be:e4:ab:ac:ab:4a:1b:cf:25:
                    d8:3f:2f:e9:8b:43:b5:5c:fa:06:4f:7c:91:f3:c7:
                    48:2b:46:fa:90:00:7b:17:56:45:f5:e9:da:6b:09:
                    da:1f:34:39:9e:81:29:c8:60:ce:3f:e4:5c:d1:bb:
                    e4:9a:ae:99:20:3c:51:9d:25:01:d9:b0:27:5c:67:
                    53:e7:70:22:26:b7:95:b8:8b:06:d3:0a:90:5e:61:
                    72:9b:f7:f0:3d:52:be:7d:96:87:95:64:f1:3d:3b:
                    12:50:a6:a9:c8:e0:54:8a:c8:2a:d6:53:90:05:86:
                    0b:5c:c7:74:5b:72:87:bb:c8:10:ed:19:b1:f5:f8:
                    df:35:9b:07:fd:08:f5:cb:a2:fe:2d:58:d3:1b:8d:
                    cb:0d:f6:54:23:45:17:3a:6d:40:03:9a:17:44:db:
                    7e:55:6b:bf:0b:4d:6d:e1:10:e7:6c:23:e2:67:d5:
                    c2:2f:10:47:5d:22:84:b7:d0:6d:92:5d:a0:bc:0f:
                    2d:b8:ad:99:5a:f9:3b:20:4b:88:7d:23:cc:88:f8:
                    6b:a8:ac:31:93:44:c0:e7:09:84:8e:b3:fc:0c:5f:
                    6c:1b:5c:30:c9:78:6a:8a:04:7b:26:f4:ee:70:7d:
                    19:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:AC:28:C6:89:08:4B:71:57:37:65:91:7C:BE:53:4C:19:FC:26:1B
            X509v3 Authority Key Identifier:
                keyid:AD:0F:2A:13:45:79:0C:4B:06:16:72:E4:A6:49:14:83:60:9A:7B:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/AD0F2A1345790C4B061672E4A6491483609A7BCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD0F2A1345790C4B061672E4A6491483609A7BCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/323830343a323132383a3a2f33322d3332203d3e20323634353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2128::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:b3:99:7f:83:1b:cc:3d:01:d7:8c:d6:ec:d2:e7:4a:58:e4:
         fe:4c:14:a1:e9:9b:c3:97:e1:c8:59:10:25:ee:7a:1d:25:8e:
         84:55:d2:98:74:11:60:ee:c5:6b:53:a9:61:26:c7:11:47:3d:
         f4:75:ea:e1:ac:f9:eb:58:15:89:98:4f:a2:81:11:53:56:ad:
         37:3e:65:fb:2e:39:71:6a:1d:e9:3a:d6:f2:33:49:4a:04:89:
         b5:56:7b:ce:80:55:88:90:e9:87:0f:90:ee:37:b6:9f:9a:d6:
         63:7a:d3:c6:eb:50:7c:c5:76:8b:b3:ba:04:4f:55:2e:64:49:
         96:f3:6f:03:bf:31:88:ff:e4:80:27:14:d4:2e:e5:82:5f:f8:
         6b:90:32:bc:63:58:e2:15:a4:05:b0:d1:d2:17:be:9e:95:bb:
         e7:71:6d:ae:3f:2c:a3:06:ca:1e:69:d4:b9:a0:00:03:76:11:
         d9:bf:98:60:7d:7f:20:87:9d:15:e9:41:e1:cc:5a:65:e7:20:
         5b:de:62:43:24:3c:f3:09:8f:e5:8b:ab:a4:fa:09:ee:0b:5b:
         5c:2b:7e:06:f5:80:37:e3:97:23:73:82:8a:c5:8e:fb:24:26:
         cd:82:f5:53:fc:e2:9a:36:3c:a4:22:78:6b:90:02:cb:b7:06:
         64:e3:96:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org