Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/323830343a353963633a3a2f33322d3332203d3e20323638373236.roa
File:                     323830343a353963633a3a2f33322d3332203d3e20323638373236.roa (raw, json)
Hash identifier:          IGKxq1IQSqA5okno/1vly5SN3q70sNVMev2tdli8LAU=
Subject key identifier:   27:4F:AC:6A:49:B3:0B:E8:12:D3:D5:E8:AA:A7:34:58:8E:38:18:A4
Certificate issuer:       /CN=C6A2521E13521DFA520C40EC85BF7155050CA33B
Certificate serial:       27A711823B18CE98B6DCB6038C8C0E0DFC789D37
Authority key identifier: C6:A2:52:1E:13:52:1D:FA:52:0C:40:EC:85:BF:71:55:05:0C:A3:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6A2521E13521DFA520C40EC85BF7155050CA33B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/323830343a353963633a3a2f33322d3332203d3e20323638373236.roa
Signing time:             Wed 03 Apr 2024 13:30:54 +0000
ROA not before:           Wed 03 Apr 2024 13:25:54 +0000
ROA not after:            Wed 02 Apr 2025 13:30:54 +0000
asID:                     268726
IP address blocks:        2804:59cc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:a7:11:82:3b:18:ce:98:b6:dc:b6:03:8c:8c:0e:0d:fc:78:9d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6A2521E13521DFA520C40EC85BF7155050CA33B
        Validity
            Not Before: Apr  3 13:25:54 2024 GMT
            Not After : Apr  2 13:30:54 2025 GMT
        Subject: CN=274FAC6A49B30BE812D3D5E8AAA734588E3818A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1a:4d:b7:d6:40:b4:8b:82:a8:6a:c1:31:4b:
                    48:e6:99:e3:7e:b7:63:59:60:66:24:d0:fe:10:f9:
                    d0:63:e1:dc:e5:23:aa:18:55:68:22:5e:bb:69:c8:
                    e1:82:0c:a9:4f:95:2c:e2:0c:96:71:82:e7:34:4b:
                    fb:bb:66:07:41:a6:80:62:4b:b3:ee:f0:e1:63:01:
                    25:bd:7b:27:a2:85:0d:9c:41:6e:e2:21:af:7d:d0:
                    db:fc:f6:43:a1:d0:35:4c:51:8c:0f:c6:65:a8:5a:
                    5d:6c:3a:20:79:52:9c:cb:14:9c:20:e9:7d:4a:ba:
                    c4:df:da:4d:b7:b9:15:e9:81:85:96:96:53:4c:4e:
                    ca:61:f6:ea:1f:9c:0d:3d:0d:80:48:13:64:e7:e7:
                    e1:3b:3b:d1:fd:d1:de:e2:fc:61:89:a7:b9:60:6e:
                    52:e0:e1:14:ed:be:13:ac:e9:47:a4:0a:a9:7e:99:
                    be:ab:aa:53:1f:90:b0:80:cf:f0:b0:29:b6:bb:67:
                    71:c2:6d:24:cd:7b:b0:e1:8a:ae:e1:6c:ab:42:fb:
                    55:53:59:a8:1d:92:33:73:be:5e:73:58:46:e4:bf:
                    ce:41:a9:00:ec:48:07:c9:36:da:3e:1d:1d:88:06:
                    7f:bd:b3:0d:56:4a:62:59:20:c2:29:9b:b0:7b:5e:
                    c3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4F:AC:6A:49:B3:0B:E8:12:D3:D5:E8:AA:A7:34:58:8E:38:18:A4
            X509v3 Authority Key Identifier:
                keyid:C6:A2:52:1E:13:52:1D:FA:52:0C:40:EC:85:BF:71:55:05:0C:A3:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/C6A2521E13521DFA520C40EC85BF7155050CA33B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6A2521E13521DFA520C40EC85BF7155050CA33B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/323830343a353963633a3a2f33322d3332203d3e20323638373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:00:c5:1f:d2:f1:4c:c3:66:b5:ac:fb:75:97:78:a6:45:d4:
         0a:55:f4:96:a6:be:2e:41:aa:e1:dc:78:15:97:0c:e6:ac:af:
         22:82:f1:8b:1f:a9:34:48:f9:77:1a:61:34:da:b4:35:30:29:
         51:ea:f6:e9:1f:a6:f1:12:e3:7a:25:5e:1c:61:7f:54:7e:7b:
         f2:b6:37:e5:a7:45:e5:d9:c1:45:04:35:df:54:45:2a:d1:e0:
         da:2d:b4:01:64:3e:52:5d:1e:88:a0:60:de:f3:c5:f8:fe:12:
         a5:55:91:04:0b:0a:1c:ee:a5:db:e1:98:3e:63:15:9d:e3:36:
         95:17:63:e9:d0:57:ee:a7:90:8c:5f:82:ef:c9:5d:9c:72:48:
         66:9e:03:94:ae:03:78:18:bf:ae:cc:76:42:ed:0b:0f:0d:30:
         37:26:a6:c4:ac:97:79:3f:7a:e4:b2:37:22:9c:c8:a9:fa:7f:
         ec:ae:b0:6b:96:96:0a:57:36:31:bb:15:7d:64:86:3d:56:a4:
         bf:42:75:98:d3:07:61:bf:fe:d9:27:c9:e7:85:24:fa:24:34:
         42:5a:5f:ae:f1:48:f7:b2:75:7d:81:97:69:a0:02:b7:66:48:
         12:61:89:c6:3b:df:3d:e0:08:05:56:dd:3c:5d:af:02:88:08:
         1f:2f:b9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org