Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/0/323830343a3136343a666130303a3a2f34302d3430203d3e20323632363633.roa
File:                     323830343a3136343a666130303a3a2f34302d3430203d3e20323632363633.roa (raw, json)
Hash identifier:          hKTJwZ6Qck4gCAv/mLWfZL1ouSNxLsAqbRZZD0ZXsCY=
Subject key identifier:   6F:E1:6F:2D:8B:E3:38:DB:B2:92:95:36:4E:BC:14:29:81:2E:CF:95
Certificate issuer:       /CN=C809254760A5E7001DE1BBAEA7549A4E45D009E2
Certificate serial:       3F54426734676211E53A4441829B85E5D8B0E168
Authority key identifier: C8:09:25:47:60:A5:E7:00:1D:E1:BB:AE:A7:54:9A:4E:45:D0:09:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C809254760A5E7001DE1BBAEA7549A4E45D009E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/0/323830343a3136343a666130303a3a2f34302d3430203d3e20323632363633.roa
Signing time:             Fri 16 Jun 2023 16:12:36 +0000
ROA not before:           Fri 16 Jun 2023 16:07:36 +0000
ROA not after:            Fri 14 Jun 2024 16:12:36 +0000
asID:                     262663
IP address blocks:        2804:164:fa00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:54:42:67:34:67:62:11:e5:3a:44:41:82:9b:85:e5:d8:b0:e1:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C809254760A5E7001DE1BBAEA7549A4E45D009E2
        Validity
            Not Before: Jun 16 16:07:36 2023 GMT
            Not After : Jun 14 16:12:36 2024 GMT
        Subject: CN=6FE16F2D8BE338DBB29295364EBC1429812ECF95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bd:fc:cc:66:e2:71:8e:02:93:6f:91:10:01:
                    03:49:92:c6:1c:78:d1:b2:93:15:60:75:05:85:2a:
                    f7:c3:09:ef:34:d9:ef:28:7d:f8:22:4f:a8:27:8d:
                    0e:87:e0:13:ed:23:dc:ff:64:48:aa:a9:9d:16:5f:
                    57:3d:38:a9:8f:9a:15:4e:a3:af:4c:90:4e:11:9b:
                    14:b5:4f:c3:4f:6c:77:cb:55:d5:0e:2e:ab:38:3e:
                    2f:e4:58:87:bc:6c:9d:22:af:b6:6d:8d:66:f1:9f:
                    ac:35:03:4d:bf:c9:ad:9c:ac:5c:05:c6:15:79:8c:
                    d8:60:e3:f8:7b:17:29:05:38:c1:33:77:21:11:47:
                    d2:4d:fd:cd:e2:77:38:a9:05:06:47:11:c1:d0:7f:
                    6a:9c:76:d8:40:bf:0c:0f:00:bc:38:ef:ff:6c:de:
                    46:ea:51:3a:d1:e1:8b:da:b5:84:08:08:a9:23:d6:
                    fc:9d:04:4d:b6:46:38:de:29:6a:8f:12:4f:dc:39:
                    83:52:9a:76:13:c3:fd:ca:94:31:59:d6:11:de:09:
                    d2:88:25:38:a7:01:d2:81:17:77:30:82:0d:db:39:
                    c4:f5:ff:d9:a8:a7:76:99:1f:99:9b:e2:ea:a2:61:
                    c3:f3:82:76:cf:a2:cc:59:05:77:8d:df:26:16:bb:
                    b8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E1:6F:2D:8B:E3:38:DB:B2:92:95:36:4E:BC:14:29:81:2E:CF:95
            X509v3 Authority Key Identifier:
                keyid:C8:09:25:47:60:A5:E7:00:1D:E1:BB:AE:A7:54:9A:4E:45:D0:09:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/0/C809254760A5E7001DE1BBAEA7549A4E45D009E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C809254760A5E7001DE1BBAEA7549A4E45D009E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/0/323830343a3136343a666130303a3a2f34302d3430203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:164:fa00::/40

    Signature Algorithm: sha256WithRSAEncryption
         12:ac:80:6a:89:1f:ed:1e:ca:58:21:be:b1:e7:8d:b8:47:43:
         4e:49:c6:e8:dc:ea:3d:c5:d5:a6:e3:e6:e6:e5:2f:8c:5c:49:
         de:2d:73:95:2d:27:30:1a:5b:a4:04:57:35:2c:9b:04:ad:f9:
         30:80:76:36:48:51:ea:86:39:d7:a8:4e:82:5d:a5:8e:f5:f3:
         af:99:db:69:a5:2e:11:8e:06:b3:13:c0:3b:c9:8d:ed:07:8a:
         56:ef:d2:39:59:b9:5a:d4:58:da:2c:da:79:40:3f:7a:ca:eb:
         d1:bf:d6:22:9b:12:71:c2:2d:c2:d1:f9:45:ad:6b:e9:5c:85:
         cd:e7:c7:c1:e1:50:69:5f:96:d5:9d:10:3d:02:07:02:84:2b:
         bc:67:80:fe:ee:b2:f8:e6:f4:5a:5b:4b:ca:9b:0d:bd:74:8c:
         54:7a:8c:1a:3c:33:98:c9:15:53:6f:cc:d1:09:d5:7b:7d:c1:
         cf:3a:f9:3b:78:73:95:86:ba:59:60:5a:b6:01:07:9d:50:27:
         20:3f:aa:5f:45:fb:80:ea:07:73:93:fc:66:a1:1b:64:44:b4:
         28:a7:19:aa:a0:dc:d5:86:69:14:8d:bb:80:60:97:61:8f:ef:
         00:43:96:9f:e9:e0:65:70:f2:f4:bd:d5:f6:dc:4d:dc:2f:27:
         12:f9:9f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org