Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/323830343a363230633a3a2f33322d3332203d3e203238323235.roa
File:                     323830343a363230633a3a2f33322d3332203d3e203238323235.roa (raw, json)
Hash identifier:          3W2JVSrgHcuIlxeQZZ94M9us2bTUnhZKcL6IDOv6B5Y=
Subject key identifier:   45:85:68:C3:5A:A8:DE:13:61:DE:57:74:83:85:26:F4:94:E1:31:33
Certificate issuer:       /CN=A09DA72952F507E87867658358D81CEFBDB67686
Certificate serial:       651F5272C4596F2EA541DBE5AFF58306EE6CB1B6
Authority key identifier: A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/323830343a363230633a3a2f33322d3332203d3e203238323235.roa
Signing time:             Tue 09 Jan 2024 12:56:15 +0000
ROA not before:           Tue 09 Jan 2024 12:51:15 +0000
ROA not after:            Tue 07 Jan 2025 12:56:15 +0000
asID:                     28225
IP address blocks:        2804:620c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:1f:52:72:c4:59:6f:2e:a5:41:db:e5:af:f5:83:06:ee:6c:b1:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A09DA72952F507E87867658358D81CEFBDB67686
        Validity
            Not Before: Jan  9 12:51:15 2024 GMT
            Not After : Jan  7 12:56:15 2025 GMT
        Subject: CN=458568C35AA8DE1361DE5774838526F494E13133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:68:5d:ad:59:17:f6:4a:53:a3:73:d4:2f:78:
                    23:b1:45:db:fb:2f:31:cf:6b:26:94:13:24:67:3f:
                    05:31:d3:a9:50:d3:07:59:c7:b0:07:ff:04:dc:14:
                    4b:cc:31:89:d4:cb:2f:1b:50:71:34:4f:ed:ce:fd:
                    fd:91:33:5f:ff:2d:09:46:c9:78:3f:1e:47:0a:40:
                    1b:86:62:49:93:71:53:89:06:b8:f6:52:1f:43:02:
                    0c:3f:38:2f:ff:aa:ca:3f:5f:ac:92:1a:ae:46:ff:
                    bc:51:b1:af:86:27:1f:96:eb:bb:97:80:c1:5f:df:
                    eb:1e:df:d4:2f:99:5c:0a:79:ce:9c:9d:3c:16:31:
                    51:8e:df:c6:31:2f:a9:64:ff:5b:c6:cc:a2:fe:9a:
                    77:fd:0e:82:62:3b:6f:11:d7:d4:bf:e8:90:3d:4a:
                    35:93:cf:c6:ea:62:c4:f6:8b:68:94:75:34:0c:8a:
                    f4:a6:32:a0:cf:3c:de:ec:29:b6:36:39:b1:b6:ca:
                    fc:99:e5:fa:a2:52:fe:3a:ac:ac:09:99:0a:fb:4a:
                    64:4b:4c:58:e1:8a:50:93:ad:f5:42:90:df:74:f5:
                    5f:98:b7:4e:34:6c:8b:28:df:05:78:c0:ff:93:07:
                    87:27:63:ec:93:f3:e5:c8:ab:16:b0:bf:43:47:1d:
                    ef:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:85:68:C3:5A:A8:DE:13:61:DE:57:74:83:85:26:F4:94:E1:31:33
            X509v3 Authority Key Identifier:
                keyid:A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/A09DA72952F507E87867658358D81CEFBDB67686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/323830343a363230633a3a2f33322d3332203d3e203238323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:620c::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:cb:c0:ea:88:8e:f7:38:0d:73:96:28:27:17:65:be:2a:4d:
         ac:d3:e8:74:1b:30:f0:cb:8a:04:25:7d:ad:09:42:b8:e8:b1:
         e3:c1:83:72:b3:42:4e:c8:30:9c:77:43:b3:23:95:1a:3d:4a:
         57:7d:80:44:b1:1d:70:45:27:d9:c8:f5:63:0f:b9:99:c1:ae:
         eb:62:ac:69:0d:1f:2a:35:f8:8f:27:1e:65:08:7c:37:50:b6:
         bd:76:dc:78:0e:d0:0b:6f:ba:47:51:fb:04:28:73:3a:f2:d8:
         75:8b:8e:a3:5d:00:8f:3c:3c:56:f6:f5:f1:4e:d6:54:4e:1c:
         d1:9a:66:aa:31:d0:2a:73:0f:e7:87:53:4b:b7:64:0d:a2:18:
         8f:c0:52:f3:9c:07:b2:a5:f9:eb:ed:dc:db:9b:ac:86:c0:b9:
         cb:3c:85:8d:82:91:9a:60:b1:31:09:d0:21:9f:11:9d:29:a2:
         1a:7f:36:f1:9e:ee:25:86:f2:17:7a:a1:ec:28:62:bf:75:48:
         16:18:e5:6f:60:4c:c3:2d:8f:11:6c:1f:74:18:49:74:0d:ad:
         76:76:18:ca:5d:ef:e9:77:5d:3a:9d:79:57:f8:eb:63:ea:a4:
         c6:0a:69:45:17:c0:28:a4:92:81:ff:57:62:b4:9d:4d:53:21:
         86:af:8f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org