Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/323830343a366238383a343030303a3a2f33342d3334203d3e20323730343036.roa
File:                     323830343a366238383a343030303a3a2f33342d3334203d3e20323730343036.roa (raw, json)
Hash identifier:          8EXfyrKUP8npuGbORSY936QKhHmsEUJC2ZoJu6IOmQc=
Subject key identifier:   51:04:DD:03:C6:E8:71:1E:4C:95:9E:47:A8:D5:F9:0F:F9:C2:07:9B
Certificate issuer:       /CN=5FF0AF706C62B5250221CAAA58C63419A81F3472
Certificate serial:       23937BB95DECD576261CB5B1DD083E8AB9C4B22D
Authority key identifier: 5F:F0:AF:70:6C:62:B5:25:02:21:CA:AA:58:C6:34:19:A8:1F:34:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF0AF706C62B5250221CAAA58C63419A81F3472.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/323830343a366238383a343030303a3a2f33342d3334203d3e20323730343036.roa
Signing time:             Wed 03 Apr 2024 20:33:41 +0000
ROA not before:           Wed 03 Apr 2024 20:28:41 +0000
ROA not after:            Wed 02 Apr 2025 20:33:41 +0000
asID:                     270406
IP address blocks:        2804:6b88:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:93:7b:b9:5d:ec:d5:76:26:1c:b5:b1:dd:08:3e:8a:b9:c4:b2:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FF0AF706C62B5250221CAAA58C63419A81F3472
        Validity
            Not Before: Apr  3 20:28:41 2024 GMT
            Not After : Apr  2 20:33:41 2025 GMT
        Subject: CN=5104DD03C6E8711E4C959E47A8D5F90FF9C2079B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e4:e5:57:ed:6a:76:d0:a2:db:1d:8f:8a:2b:
                    e2:13:bb:00:55:85:57:84:c7:b7:8c:47:ec:db:8b:
                    85:ed:d7:b1:66:ab:63:e4:b1:1d:77:6f:21:b4:ed:
                    10:e6:f7:49:c9:32:fb:78:ab:94:f4:c3:6c:c1:26:
                    fd:68:40:b0:f7:2c:f5:c8:ff:6d:15:59:49:06:78:
                    62:4d:6e:63:a9:2e:22:6a:ec:74:23:13:e8:6d:1a:
                    37:58:73:17:be:01:49:0f:f2:39:f9:16:b1:36:98:
                    16:74:e5:8a:2e:6a:60:2c:9f:4a:0e:79:cf:48:c1:
                    88:a1:48:fa:9a:1f:be:48:ad:82:3d:23:cd:ca:4b:
                    76:35:48:b4:a3:5c:2c:9b:47:ea:a9:2a:22:31:c0:
                    37:ba:73:8e:41:1b:0e:af:f4:bd:a6:fd:36:aa:68:
                    27:52:fc:4e:27:70:bc:7d:dd:90:a3:fd:9d:9c:c8:
                    3c:ba:c6:3a:2a:d5:9e:74:cc:cc:d6:93:7a:6a:56:
                    cd:ea:bb:8b:e8:f4:19:c3:33:00:81:be:c3:e1:b5:
                    a5:d6:fc:80:1b:88:01:90:25:40:71:8c:90:29:57:
                    31:eb:1c:ca:da:d6:e3:dd:00:5e:75:5c:0e:21:7a:
                    06:82:b0:62:89:29:00:e1:ac:ee:b5:9f:ab:ad:27:
                    ef:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:04:DD:03:C6:E8:71:1E:4C:95:9E:47:A8:D5:F9:0F:F9:C2:07:9B
            X509v3 Authority Key Identifier:
                keyid:5F:F0:AF:70:6C:62:B5:25:02:21:CA:AA:58:C6:34:19:A8:1F:34:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/5FF0AF706C62B5250221CAAA58C63419A81F3472.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF0AF706C62B5250221CAAA58C63419A81F3472.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/323830343a366238383a343030303a3a2f33342d3334203d3e20323730343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b88:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         9c:27:1b:4d:3c:fc:97:11:73:98:90:5c:1f:eb:7f:b2:bc:f7:
         e0:8c:f0:0c:b1:f9:42:f6:0b:41:b2:a4:7c:fa:84:28:fa:8d:
         bc:e9:7f:f2:ed:5e:02:69:72:9a:0f:79:31:90:da:1d:64:20:
         11:f8:a5:6a:00:e8:d0:e7:1c:14:fc:34:6f:23:62:65:8c:2b:
         44:b0:fd:d3:33:d7:5e:3b:1b:95:bb:0f:83:91:3f:bb:b1:10:
         bd:8e:3e:ed:00:82:c2:f1:bb:29:c7:ac:b2:e0:f7:58:70:97:
         bf:59:7a:00:8e:62:83:1f:f7:90:fe:27:d7:e5:e8:15:e9:a9:
         0b:a8:d5:97:16:5a:ae:cf:96:a8:58:88:37:3b:10:7a:5c:92:
         e0:f9:1b:09:4c:80:bd:28:ac:96:83:f0:a3:6f:cf:45:27:af:
         4d:34:c0:ec:ac:47:aa:3a:38:d1:01:ae:1c:be:c8:45:b5:a7:
         0c:f0:ef:f6:c6:19:0a:f1:53:f2:26:e7:67:e0:a5:cd:7f:bc:
         ea:14:9c:74:4b:17:85:73:27:72:00:52:de:98:0d:e3:9a:db:
         9b:ed:60:9b:50:d3:be:57:53:77:5f:81:c9:4d:3d:1e:18:52:
         ef:3f:d4:79:79:36:cd:4a:ae:ef:15:a7:0f:35:5e:e8:be:10:
         76:6e:a7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org