Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E8gwGQmVsyGMqLXfNhACZnm1kpnTV7PHRUys6VDgF4t6/0/323830343a333639383a633030303a3a2f33342d3334203d3e20323636333538.roa
File:                     323830343a333639383a633030303a3a2f33342d3334203d3e20323636333538.roa (raw, json)
Hash identifier:          IKJtVgqwMZZ4j/IpiW1bhK/njYbCjCnY5t0+nMn3u58=
Subject key identifier:   E1:CB:C0:E2:16:82:7B:A3:55:E3:BC:2F:68:C6:AB:B2:81:7D:2F:1C
Certificate issuer:       /CN=689A0904150851FE4D3E06A04569C2EE6143E398
Certificate serial:       27E6EC5B2830CBFA24B1E7FDFC59CDED87285D25
Authority key identifier: 68:9A:09:04:15:08:51:FE:4D:3E:06:A0:45:69:C2:EE:61:43:E3:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/689A0904150851FE4D3E06A04569C2EE6143E398.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E8gwGQmVsyGMqLXfNhACZnm1kpnTV7PHRUys6VDgF4t6/0/323830343a333639383a633030303a3a2f33342d3334203d3e20323636333538.roa
Signing time:             Tue 28 Mar 2023 18:48:04 +0000
ROA not before:           Tue 28 Mar 2023 18:43:04 +0000
ROA not after:            Tue 26 Mar 2024 18:48:04 +0000
asID:                     266358
IP address blocks:        2804:3698:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:e6:ec:5b:28:30:cb:fa:24:b1:e7:fd:fc:59:cd:ed:87:28:5d:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=689A0904150851FE4D3E06A04569C2EE6143E398
        Validity
            Not Before: Mar 28 18:43:04 2023 GMT
            Not After : Mar 26 18:48:04 2024 GMT
        Subject: CN=E1CBC0E216827BA355E3BC2F68C6ABB2817D2F1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e4:d8:c5:34:2a:69:7c:47:d5:ac:c6:cc:09:
                    ac:7f:14:37:8e:59:7a:cd:8d:c3:52:0b:2a:eb:43:
                    04:94:92:f3:55:9d:6a:cf:15:5e:41:96:5d:1c:1a:
                    31:21:a5:cf:b3:0c:b7:2c:b7:f0:08:8c:37:00:1f:
                    8d:42:68:3d:91:02:d1:f7:57:cd:7b:e0:d2:23:7d:
                    0d:c0:c9:eb:5d:1e:8e:1b:e4:16:5f:62:41:3a:e0:
                    60:e0:f5:08:71:28:ef:29:49:13:cd:e6:f6:cc:c2:
                    10:00:7b:36:78:bb:5b:57:63:b6:70:4d:bd:b4:f2:
                    63:43:d0:14:33:8c:e6:b9:12:a8:e9:12:c5:4f:30:
                    e2:e8:cb:05:87:e6:2f:5c:08:0e:c3:fe:db:79:8a:
                    22:6b:97:b1:13:05:5a:b6:cd:e6:9d:39:62:88:c5:
                    a8:90:91:cc:cf:79:c0:68:ff:c4:c7:88:26:9e:46:
                    a6:24:61:04:ed:e9:62:49:7a:6e:d2:d7:7b:77:0f:
                    64:f9:af:76:e1:39:0c:df:2f:36:ed:62:41:b2:36:
                    bd:7e:db:84:8b:62:29:b6:a2:37:c7:c5:ed:5d:73:
                    6c:79:1c:8d:94:dd:d8:0a:ba:84:78:9d:cf:cb:af:
                    c7:de:2b:d5:b4:57:42:84:b6:0f:77:88:a8:be:f9:
                    c9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:CB:C0:E2:16:82:7B:A3:55:E3:BC:2F:68:C6:AB:B2:81:7D:2F:1C
            X509v3 Authority Key Identifier:
                keyid:68:9A:09:04:15:08:51:FE:4D:3E:06:A0:45:69:C2:EE:61:43:E3:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E8gwGQmVsyGMqLXfNhACZnm1kpnTV7PHRUys6VDgF4t6/0/689A0904150851FE4D3E06A04569C2EE6143E398.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/689A0904150851FE4D3E06A04569C2EE6143E398.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8gwGQmVsyGMqLXfNhACZnm1kpnTV7PHRUys6VDgF4t6/0/323830343a333639383a633030303a3a2f33342d3334203d3e20323636333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3698:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         35:3d:62:e6:5f:62:59:3b:19:0c:c2:42:f3:01:85:1c:a6:5c:
         c9:0e:7a:d6:6e:f6:35:f2:e4:11:6d:f8:dc:39:44:f2:89:d5:
         98:10:65:2c:20:19:fa:bf:a0:c3:a7:22:01:bc:4f:b9:75:38:
         bf:43:ca:45:36:30:28:db:aa:92:87:bd:6e:14:09:8e:1c:f8:
         64:29:1b:e8:3a:67:19:9d:6f:ec:05:4b:2b:ec:06:e7:de:ea:
         01:32:91:ab:c8:93:be:27:29:72:b4:22:29:de:e9:27:0d:47:
         2d:54:9d:0f:39:f4:31:da:13:30:5b:3e:f8:4c:c9:76:8d:27:
         a2:6a:26:2c:5e:94:11:9c:51:05:83:ff:d0:0e:2c:08:09:3f:
         5d:18:4c:2b:4c:07:f0:a8:2d:3c:e7:4c:aa:c5:63:3e:1a:3b:
         ef:55:1c:87:5a:7d:2f:00:2b:e2:30:8d:11:18:b2:41:f5:90:
         73:1c:e9:35:b7:70:88:7c:83:c1:d8:30:26:ca:2a:b7:6c:af:
         4f:3d:68:19:74:42:ea:97:d1:f1:8b:79:c0:4c:c7:77:35:28:
         55:e3:8e:9f:b1:4e:7b:02:f0:ad:aa:02:c4:86:fb:2b:e0:2c:
         48:40:7c:fc:fd:24:45:82:d0:d5:65:96:55:b4:28:12:77:86:
         63:19:7d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:44 2024 by rpki-client on console-ams.rpki-client.org