Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/323830343a353963633a3a2f33332d3333203d3e20323638373236.roa
File:                     323830343a353963633a3a2f33332d3333203d3e20323638373236.roa (raw, json)
Hash identifier:          WmMYvcj7+3kMmnEiaApvLKs6evWwzE5ek1yBFdmAf7c=
Subject key identifier:   35:A2:A2:8D:D8:00:DC:91:A2:5A:8F:36:E0:AB:C4:A3:45:14:7B:4F
Certificate issuer:       /CN=C6A2521E13521DFA520C40EC85BF7155050CA33B
Certificate serial:       42BF7E0DA308CD1226CCA1E4F4A6B0A352D264E0
Authority key identifier: C6:A2:52:1E:13:52:1D:FA:52:0C:40:EC:85:BF:71:55:05:0C:A3:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6A2521E13521DFA520C40EC85BF7155050CA33B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/323830343a353963633a3a2f33332d3333203d3e20323638373236.roa
Signing time:             Wed 03 Apr 2024 13:30:56 +0000
ROA not before:           Wed 03 Apr 2024 13:25:56 +0000
ROA not after:            Wed 02 Apr 2025 13:30:56 +0000
asID:                     268726
IP address blocks:        2804:59cc::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:bf:7e:0d:a3:08:cd:12:26:cc:a1:e4:f4:a6:b0:a3:52:d2:64:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6A2521E13521DFA520C40EC85BF7155050CA33B
        Validity
            Not Before: Apr  3 13:25:56 2024 GMT
            Not After : Apr  2 13:30:56 2025 GMT
        Subject: CN=35A2A28DD800DC91A25A8F36E0ABC4A345147B4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:81:53:4c:71:7f:94:78:54:ce:e2:01:9d:bf:
                    05:1a:c1:c6:82:52:53:32:3c:86:bf:5c:e2:b5:fc:
                    43:b1:bb:1f:51:29:f4:c3:ec:97:5e:e9:a9:82:f7:
                    16:1f:8c:2e:b4:e5:5c:95:e3:07:62:f0:93:ea:4d:
                    92:63:b1:48:df:46:88:ec:4d:fe:ae:da:0e:0c:c9:
                    22:94:1e:fa:4f:5e:d9:d6:71:0b:1d:22:8a:35:68:
                    3f:4c:7d:46:85:f3:51:6e:c3:e1:31:2c:4d:e7:73:
                    85:44:80:f1:0e:85:c4:33:a2:f1:03:c5:5f:f6:55:
                    7b:1c:2a:8b:60:42:87:d4:8e:ab:e4:6d:f4:7a:17:
                    88:d2:0a:4f:00:2a:63:40:5e:2a:f8:5e:e2:14:06:
                    9f:3c:47:b7:3b:44:73:dd:9e:f0:73:6b:34:92:c7:
                    1c:a6:ef:b9:1d:35:a6:d2:b5:14:dc:e0:58:a2:13:
                    bc:09:50:d0:19:ea:d8:9b:69:84:cb:96:b9:14:01:
                    2f:7a:7c:66:7e:b6:bc:f1:d0:83:26:f1:6b:17:15:
                    fe:7a:2b:aa:be:1c:85:08:24:59:fd:f3:3d:cb:0f:
                    39:74:e9:56:67:d5:88:34:e8:28:9b:41:27:af:95:
                    8e:70:c1:c0:9f:a7:22:70:00:03:53:6a:5b:87:9e:
                    c2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A2:A2:8D:D8:00:DC:91:A2:5A:8F:36:E0:AB:C4:A3:45:14:7B:4F
            X509v3 Authority Key Identifier:
                keyid:C6:A2:52:1E:13:52:1D:FA:52:0C:40:EC:85:BF:71:55:05:0C:A3:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/C6A2521E13521DFA520C40EC85BF7155050CA33B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6A2521E13521DFA520C40EC85BF7155050CA33B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/323830343a353963633a3a2f33332d3333203d3e20323638373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59cc::/33

    Signature Algorithm: sha256WithRSAEncryption
         37:a8:7a:6e:3f:90:5c:d6:99:db:65:fc:62:01:66:54:8a:d9:
         cb:03:34:1a:fb:77:99:33:c3:0f:93:85:ed:1e:52:44:42:f3:
         a2:72:27:62:37:64:ff:86:45:f4:62:c2:ab:fd:0e:fa:57:2e:
         0b:50:78:54:05:0c:7c:d6:25:e0:64:d4:89:a1:ca:ea:6d:9d:
         66:80:89:e2:60:ae:ff:56:e8:6d:3b:25:3f:0c:65:10:5a:cb:
         9f:7a:65:20:25:04:81:41:ef:ea:a2:71:ef:97:1a:93:28:52:
         98:92:ca:55:56:94:f0:38:3d:3e:bd:f8:e2:92:b4:ae:24:fa:
         60:f4:11:90:aa:6d:e6:b0:3c:dc:61:07:47:be:16:14:0c:4d:
         79:2b:e8:b2:21:1f:02:b9:aa:12:24:9c:0c:78:0b:4a:98:d8:
         ed:e6:d5:5a:ab:d2:56:7f:1e:1a:f0:79:71:c8:c3:17:c4:93:
         a2:86:a8:20:ec:cd:71:90:44:dc:95:00:e8:ad:d0:50:c4:bc:
         5f:e7:eb:88:a5:0d:ca:01:d5:c8:e9:f6:bb:55:d1:ff:67:b1:
         56:7a:f6:f0:48:23:2a:b7:89:e7:1c:cd:96:a4:c8:9b:b4:97:
         81:b4:9c:33:29:84:6b:42:71:11:90:f9:73:b2:b9:8b:17:18:
         4d:34:6d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org