Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E8gwGQmVsyGMqLXfNhACZnm1kpnTV7PHRUys6VDgF4t6/0/323830343a333639383a343030303a3a2f33342d3334203d3e20323636333538.roa
File:                     323830343a333639383a343030303a3a2f33342d3334203d3e20323636333538.roa (raw, json)
Hash identifier:          j9YDUumqhMLfnLLEtfj5INhU3qqrin6h2hKvSywlnP8=
Subject key identifier:   AE:66:4A:A9:D1:39:B7:C2:24:97:0C:F1:B9:3E:CB:59:F3:66:0A:8E
Certificate issuer:       /CN=689A0904150851FE4D3E06A04569C2EE6143E398
Certificate serial:       6BFD3820A5D9F43AE36AE4C6702F751DDF5072D0
Authority key identifier: 68:9A:09:04:15:08:51:FE:4D:3E:06:A0:45:69:C2:EE:61:43:E3:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/689A0904150851FE4D3E06A04569C2EE6143E398.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E8gwGQmVsyGMqLXfNhACZnm1kpnTV7PHRUys6VDgF4t6/0/323830343a333639383a343030303a3a2f33342d3334203d3e20323636333538.roa
Signing time:             Tue 26 Apr 2022 18:10:35 +0000
ROA not before:           Tue 26 Apr 2022 18:05:35 +0000
ROA not after:            Tue 25 Apr 2023 18:10:35 +0000
asID:                     266358
IP address blocks:        2804:3698:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:fd:38:20:a5:d9:f4:3a:e3:6a:e4:c6:70:2f:75:1d:df:50:72:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=689A0904150851FE4D3E06A04569C2EE6143E398
        Validity
            Not Before: Apr 26 18:05:35 2022 GMT
            Not After : Apr 25 18:10:35 2023 GMT
        Subject: CN=AE664AA9D139B7C224970CF1B93ECB59F3660A8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a7:75:6c:39:e9:02:d9:a4:ab:a9:c2:1c:f1:
                    dd:fd:48:50:0b:06:3a:44:b4:34:04:d9:22:0a:86:
                    6f:dd:d9:10:b5:5e:f3:75:ce:f9:7e:26:e3:82:13:
                    df:0a:21:33:72:7c:6a:56:28:dc:e9:63:2c:3f:e1:
                    a1:ec:4f:c7:eb:91:43:db:3b:69:0c:b2:c5:4a:d3:
                    64:e9:58:fc:28:19:65:f6:af:4e:22:ee:01:f0:8e:
                    29:c3:fa:cb:22:1d:02:12:02:3f:0b:01:c3:8d:e6:
                    b2:0f:0b:13:5d:65:37:23:38:66:a7:7b:1e:5a:30:
                    15:1e:c7:6c:c6:88:54:d1:5a:ba:ea:28:a1:11:5f:
                    c0:e0:c2:cf:9e:8d:ce:6a:61:21:8d:89:4f:fc:1e:
                    e2:ee:05:80:5f:95:25:72:03:5a:00:4a:c9:36:33:
                    2d:00:98:bf:64:96:ff:1a:a6:c1:6e:2a:b1:d9:59:
                    10:4d:86:76:c8:a2:16:24:5d:8e:24:0b:c3:d8:16:
                    ce:f4:da:e3:4e:c1:97:23:ee:dc:04:93:41:59:54:
                    98:58:f5:3c:bb:49:a2:14:13:c8:39:aa:e9:9c:79:
                    46:74:6a:af:b1:5f:83:1e:ab:c4:84:f1:88:ce:74:
                    eb:6f:b2:0f:2e:71:43:34:ac:21:a6:41:9e:78:a0:
                    a2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:66:4A:A9:D1:39:B7:C2:24:97:0C:F1:B9:3E:CB:59:F3:66:0A:8E
            X509v3 Authority Key Identifier:
                keyid:68:9A:09:04:15:08:51:FE:4D:3E:06:A0:45:69:C2:EE:61:43:E3:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E8gwGQmVsyGMqLXfNhACZnm1kpnTV7PHRUys6VDgF4t6/0/689A0904150851FE4D3E06A04569C2EE6143E398.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/689A0904150851FE4D3E06A04569C2EE6143E398.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8gwGQmVsyGMqLXfNhACZnm1kpnTV7PHRUys6VDgF4t6/0/323830343a333639383a343030303a3a2f33342d3334203d3e20323636333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3698:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8a:d6:99:0c:0c:77:63:55:0a:b1:26:d5:fa:c2:37:ef:8d:fb:
         84:72:83:50:92:d8:d1:eb:60:7b:84:dc:bf:a2:4e:9e:25:f5:
         c3:3e:48:85:cc:f7:7e:8a:55:d0:e7:b9:77:c0:7a:ba:9f:2d:
         82:43:12:42:dc:1e:af:62:fe:e4:f4:27:af:ba:5f:18:fd:10:
         c3:9a:26:3f:d1:c7:7a:ce:50:16:f8:62:55:87:e9:7b:90:b0:
         db:e4:ed:fd:1c:ce:4f:b0:5d:b0:81:46:30:97:d0:fe:6d:07:
         94:e3:74:a4:a0:f1:e0:2f:d0:72:11:3c:a3:36:1e:46:48:08:
         fe:39:bf:d1:88:32:1e:29:ad:4c:11:cf:ad:78:0c:30:c6:33:
         e3:83:62:66:e2:f0:40:71:71:31:cc:d5:20:c1:5f:22:06:49:
         3d:f6:59:23:9b:bd:89:0e:e2:15:2a:63:65:82:af:11:e4:c3:
         22:32:7b:ed:e6:e6:4e:53:d3:bd:8b:21:d2:f5:a6:2a:2d:ad:
         04:b5:8e:86:a8:92:1c:ba:c4:49:b4:82:cf:ae:df:37:a4:ab:
         c6:b5:41:f5:ae:50:b5:dd:6e:5e:39:6d:b2:ed:a7:ef:33:7d:
         7b:49:62:1a:f1:0a:64:a1:ea:d3:27:94:37:8b:93:11:6c:ab:
         48:fd:73:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:37 2024 by rpki-client on console-fra.rpki-client.org