Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/323830343a3635383a383030303a3a2f33352d3335203d3e20323632353738.roa
File:                     323830343a3635383a383030303a3a2f33352d3335203d3e20323632353738.roa (raw, json)
Hash identifier:          IRF7Gi+Z0HH1Ifqcg90R2jxyWShomKH1n9NeSdTVjqY=
Subject key identifier:   99:1B:21:DF:EF:00:0C:17:3C:B1:3E:6E:C7:B3:94:EE:12:C2:E8:38
Certificate issuer:       /CN=4EA6E0F8825C1688C91572C81C17F1E935C353D8
Certificate serial:       6915361DAFFCA301443BB76A091011231F899439
Authority key identifier: 4E:A6:E0:F8:82:5C:16:88:C9:15:72:C8:1C:17:F1:E9:35:C3:53:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/323830343a3635383a383030303a3a2f33352d3335203d3e20323632353738.roa
Signing time:             Wed 06 Sep 2023 17:31:34 +0000
ROA not before:           Wed 06 Sep 2023 17:26:34 +0000
ROA not after:            Wed 04 Sep 2024 17:31:34 +0000
asID:                     262578
IP address blocks:        2804:658:8000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:15:36:1d:af:fc:a3:01:44:3b:b7:6a:09:10:11:23:1f:89:94:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EA6E0F8825C1688C91572C81C17F1E935C353D8
        Validity
            Not Before: Sep  6 17:26:34 2023 GMT
            Not After : Sep  4 17:31:34 2024 GMT
        Subject: CN=991B21DFEF000C173CB13E6EC7B394EE12C2E838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:49:3f:ea:0e:c3:7e:fc:9a:9e:7a:9f:28:9d:
                    ad:52:0a:f1:10:79:b2:e6:48:1c:6b:cd:f4:cf:e1:
                    2a:80:0d:fd:39:00:31:8d:29:84:20:a2:98:5e:3a:
                    e4:5c:78:a0:17:c2:ae:ed:33:b2:3f:c6:d7:6e:68:
                    ad:3a:49:32:3d:fb:b7:9e:35:59:9a:c6:21:2a:74:
                    10:90:5a:9d:4e:52:df:45:fc:f2:13:14:40:28:71:
                    8c:31:c6:8d:b8:fc:38:7f:7b:99:d6:15:bc:3c:81:
                    35:31:ee:a3:f5:63:ea:08:6a:06:3a:9a:38:5e:d5:
                    52:3b:c7:06:fa:06:eb:d4:e5:90:62:82:06:15:dd:
                    90:51:11:6f:dc:f2:bc:0f:6e:c3:37:e4:f2:cd:0b:
                    a2:f7:d3:a2:1c:83:69:ba:95:77:13:05:aa:d2:23:
                    2d:6e:a2:13:d3:1a:60:56:ce:82:b7:e6:e7:35:da:
                    a2:89:0c:2c:bb:9e:08:ac:b0:1b:e2:8f:2f:82:2b:
                    38:ba:13:f4:20:17:b8:fd:e1:95:f0:53:8a:db:58:
                    eb:db:95:4d:7b:8f:83:ae:56:50:f1:03:6d:7b:42:
                    0b:8c:0f:ce:e2:c8:c5:7e:68:8d:d9:b6:22:ea:e8:
                    ce:7d:6a:d0:12:e3:1d:62:63:3d:c1:51:3a:25:2c:
                    10:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:1B:21:DF:EF:00:0C:17:3C:B1:3E:6E:C7:B3:94:EE:12:C2:E8:38
            X509v3 Authority Key Identifier:
                keyid:4E:A6:E0:F8:82:5C:16:88:C9:15:72:C8:1C:17:F1:E9:35:C3:53:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/323830343a3635383a383030303a3a2f33352d3335203d3e20323632353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:658:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         c1:6f:54:46:4f:00:eb:df:ea:22:07:15:eb:a1:e4:19:a4:f8:
         bf:fc:82:26:72:f1:69:1b:79:5f:ab:18:c8:74:ef:49:08:bc:
         ff:bd:0a:bd:a5:04:4f:01:e3:19:15:b1:ec:6b:5c:07:f3:5e:
         ad:a3:18:fc:14:1d:80:4e:92:6e:19:ea:2b:66:64:c6:3d:f2:
         9a:d6:55:19:ff:58:2d:06:c0:91:fe:d8:f4:04:02:26:dd:91:
         08:f4:f3:18:02:e6:e7:c4:d5:4c:7d:12:22:d1:58:27:13:11:
         8a:03:a4:70:8d:17:bc:49:cf:5c:fb:f1:73:4d:e9:a8:af:24:
         7e:62:7a:21:1d:fe:7c:0c:21:90:ec:10:ed:d2:2c:ea:60:47:
         79:8a:7a:8e:44:d9:f8:bf:db:c9:65:87:15:77:8a:89:47:c1:
         52:b2:3b:1b:f6:23:53:06:ef:02:51:14:ca:9e:52:4b:48:ce:
         c3:35:15:7e:38:b7:1e:65:b8:b8:a1:55:f1:9a:bf:8f:c0:c9:
         35:58:1d:b5:9d:0a:59:d7:66:92:c8:47:46:b3:74:95:c3:1d:
         7a:f5:8b:0c:fb:8e:a2:1a:bf:6f:b6:54:b0:a0:7d:fe:30:35:
         a2:50:6c:e1:77:e2:af:cb:1c:08:2c:8f:03:bd:0b:ac:f0:17:
         7a:b2:ae:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org