Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fsjjm6QSV9ecHJyqvHR7uwf4ECdAZ84SMikunf8rZsmA/0/323830343a383865383a373030303a3a2f33362d3336203d3e20323733353638.roa
File:                     323830343a383865383a373030303a3a2f33362d3336203d3e20323733353638.roa (raw, json)
Hash identifier:          2qNIjledcFZWurRYAX3MaWWh9bKZ28i38wwlTe16EJ8=
Subject key identifier:   8E:54:5A:F0:32:5D:3C:FD:BD:6F:65:16:D1:6E:65:E7:D1:87:4A:17
Certificate issuer:       /CN=6F4A647AFA002C03109D6A323355E36ABA9C7284
Certificate serial:       4432B078CB52830765EE325879B634138BE4A034
Authority key identifier: 6F:4A:64:7A:FA:00:2C:03:10:9D:6A:32:33:55:E3:6A:BA:9C:72:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F4A647AFA002C03109D6A323355E36ABA9C7284.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fsjjm6QSV9ecHJyqvHR7uwf4ECdAZ84SMikunf8rZsmA/0/323830343a383865383a373030303a3a2f33362d3336203d3e20323733353638.roa
Signing time:             Tue 31 Oct 2023 18:38:57 +0000
ROA not before:           Tue 31 Oct 2023 18:33:57 +0000
ROA not after:            Tue 29 Oct 2024 18:38:57 +0000
asID:                     273568
IP address blocks:        2804:88e8:7000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:32:b0:78:cb:52:83:07:65:ee:32:58:79:b6:34:13:8b:e4:a0:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F4A647AFA002C03109D6A323355E36ABA9C7284
        Validity
            Not Before: Oct 31 18:33:57 2023 GMT
            Not After : Oct 29 18:38:57 2024 GMT
        Subject: CN=8E545AF0325D3CFDBD6F6516D16E65E7D1874A17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2d:bc:98:b4:7a:fe:9b:ee:2c:93:a3:04:fc:
                    42:b5:4e:14:60:a8:2f:da:b0:83:84:6f:12:35:c7:
                    c4:c2:a3:34:82:71:5d:d3:7f:f3:66:d6:01:1a:fc:
                    a8:92:bd:cf:0c:1a:08:6e:13:8e:d5:d6:2a:f8:83:
                    98:62:ee:49:ee:50:27:57:9c:8d:b9:f4:f1:30:8c:
                    5b:88:ee:2d:4a:9c:eb:9a:ba:a3:84:3b:9e:6f:2e:
                    c8:7f:f7:88:17:c0:ef:c5:4e:fe:fd:c0:e4:f1:ee:
                    d3:89:a5:fa:f3:b4:d4:36:64:0e:b9:77:b5:b1:16:
                    fd:22:1d:55:df:68:29:0f:79:fd:47:20:88:e3:f2:
                    55:37:d9:83:8b:d7:85:be:ef:18:a4:0e:3f:b6:2f:
                    ca:bf:d8:4f:db:f1:28:01:3d:6a:ea:e6:7d:a6:6f:
                    d1:77:53:64:26:8b:73:79:7c:33:6d:63:c7:fb:63:
                    4f:af:96:dd:f2:69:c7:d2:23:08:c6:b2:34:f4:81:
                    24:86:68:99:a8:58:f5:87:4a:53:62:e8:3d:0a:5b:
                    92:45:a6:72:4c:f1:21:84:6d:21:02:0b:33:55:76:
                    d6:49:d4:d6:35:80:01:e1:e1:c7:9b:9b:25:96:be:
                    ba:73:46:5b:9d:aa:b8:c2:91:07:db:6f:df:e8:97:
                    3d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:54:5A:F0:32:5D:3C:FD:BD:6F:65:16:D1:6E:65:E7:D1:87:4A:17
            X509v3 Authority Key Identifier:
                keyid:6F:4A:64:7A:FA:00:2C:03:10:9D:6A:32:33:55:E3:6A:BA:9C:72:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fsjjm6QSV9ecHJyqvHR7uwf4ECdAZ84SMikunf8rZsmA/0/6F4A647AFA002C03109D6A323355E36ABA9C7284.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F4A647AFA002C03109D6A323355E36ABA9C7284.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fsjjm6QSV9ecHJyqvHR7uwf4ECdAZ84SMikunf8rZsmA/0/323830343a383865383a373030303a3a2f33362d3336203d3e20323733353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:88e8:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         45:f5:03:af:a6:98:53:f3:e3:e0:48:b4:27:61:e0:84:81:16:
         71:75:7a:08:37:cb:57:42:13:6c:a4:c5:69:78:9a:cb:9e:09:
         63:27:50:5a:c7:59:ad:c8:7f:19:80:9b:33:b5:7e:3a:89:9b:
         6d:62:b7:e3:9a:a7:03:2b:07:0b:27:fb:d9:15:9d:5e:cf:ef:
         c3:01:99:09:0e:6f:e3:5d:32:48:84:73:e2:ec:b6:c2:a7:2a:
         57:fc:9b:7c:94:ee:b4:c3:89:b4:25:86:ba:aa:ec:b0:18:27:
         fe:1e:af:11:ff:e2:3b:70:3d:a9:1b:55:d2:02:51:74:dd:fa:
         e0:ef:60:dc:80:16:4b:fa:0e:93:a9:7a:1b:3b:e4:3d:4e:e1:
         0d:69:5a:a6:4e:aa:0b:cd:d9:e7:82:bf:fa:bd:53:67:30:b9:
         5a:35:45:32:50:cc:b4:59:fa:e4:b4:bc:bd:47:e2:9d:09:2b:
         c6:bd:6a:da:0a:6b:8a:55:b3:00:ae:9a:aa:77:ac:e1:a3:62:
         31:2b:c2:be:78:e9:db:5c:ae:32:68:06:5b:6a:63:9a:60:63:
         ac:04:1e:19:70:6e:fa:cd:57:32:3d:f3:d5:9c:72:2f:ba:5a:
         94:ee:e7:da:24:28:40:55:19:56:9a:06:b8:4b:24:fc:b2:84:
         67:5c:f5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:08 2024 by rpki-client on console-ams.rpki-client.org