Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a313030303a3a2f33362d3336203d3e20323638323335.roa
File:                     323830343a346530383a313030303a3a2f33362d3336203d3e20323638323335.roa (raw, json)
Hash identifier:          59bmBnBk6/lVxmp0EjlQTvfWFM+0g3UqmDBwTTJTm1s=
Subject key identifier:   FC:6A:AA:0F:F5:72:5C:B8:99:39:D9:3D:AF:24:53:AC:03:D4:0F:C3
Certificate issuer:       /CN=5AB9CDBE226CB666D8272B3C166713B1F10A56C5
Certificate serial:       71AC60EC46E0E3B34ECBD7301392913FA85E54BF
Authority key identifier: 5A:B9:CD:BE:22:6C:B6:66:D8:27:2B:3C:16:67:13:B1:F1:0A:56:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a313030303a3a2f33362d3336203d3e20323638323335.roa
Signing time:             Thu 25 Jul 2024 14:00:43 +0000
ROA not before:           Thu 25 Jul 2024 13:55:43 +0000
ROA not after:            Fri 25 Jul 2025 14:00:43 +0000
asID:                     268235
IP address blocks:        2804:4e08:1000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ac:60:ec:46:e0:e3:b3:4e:cb:d7:30:13:92:91:3f:a8:5e:54:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AB9CDBE226CB666D8272B3C166713B1F10A56C5
        Validity
            Not Before: Jul 25 13:55:43 2024 GMT
            Not After : Jul 25 14:00:43 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c6:a7:19:3f:c7:8c:9e:88:dc:c4:ed:18:b2:
                    b0:30:50:d9:00:87:ed:3e:6e:ba:46:2d:9a:38:0a:
                    a9:30:4b:e3:24:49:8b:34:18:8f:fd:f8:97:ad:a5:
                    53:70:af:e2:71:73:a1:d0:ae:10:74:1e:bd:35:59:
                    19:37:f2:1f:1f:86:79:d3:c9:b7:66:c2:17:90:74:
                    26:d8:b2:58:66:a8:72:f7:64:27:e2:e6:fc:56:9a:
                    5f:21:52:d7:96:d2:27:9c:c8:d0:23:57:8e:f8:1a:
                    2b:40:71:08:e8:2d:1b:1d:f1:a0:01:00:cc:ad:77:
                    79:d4:b0:70:a9:cc:45:25:46:9e:e1:1b:7a:8c:e3:
                    ce:b5:5f:ab:e1:7d:ee:55:53:84:dc:fb:56:ca:a9:
                    b5:64:06:aa:d2:79:c3:03:88:33:51:c4:2f:1d:35:
                    7c:75:dc:52:a4:95:03:a5:fc:bd:09:4e:ec:4a:4a:
                    70:2f:a2:5e:70:70:40:52:75:5b:71:00:51:ae:f2:
                    c3:28:5a:6a:57:9c:b7:26:42:e7:41:cc:16:ba:67:
                    13:45:24:90:51:03:a6:05:52:1e:a2:e7:5e:f3:00:
                    c9:04:26:f5:ad:78:1a:79:7d:0f:ce:36:cb:68:02:
                    d0:fd:34:b1:51:56:98:c8:b1:eb:97:5e:08:2e:9b:
                    7b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:6A:AA:0F:F5:72:5C:B8:99:39:D9:3D:AF:24:53:AC:03:D4:0F:C3
            X509v3 Authority Key Identifier:
                keyid:5A:B9:CD:BE:22:6C:B6:66:D8:27:2B:3C:16:67:13:B1:F1:0A:56:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a313030303a3a2f33362d3336203d3e20323638323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e08:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5d:48:77:57:75:72:6d:6a:56:d7:ec:6c:2b:ca:d8:5f:1e:79:
         6d:d9:e0:a8:48:d9:7b:52:09:b1:71:1e:09:a7:a1:3b:0a:d8:
         eb:d6:6c:f2:f5:63:db:16:12:41:65:fa:1a:44:e1:8a:0c:ed:
         1c:f8:18:b2:69:ed:f7:d4:0b:c4:6d:29:7f:85:2d:2e:52:fc:
         0c:bb:19:9a:ff:5a:e1:4e:06:9e:ae:d1:ac:38:b2:b0:72:fd:
         db:5a:cc:1a:75:04:8d:7c:66:a5:67:0f:5c:90:8c:84:60:dd:
         d5:e2:1b:73:d0:a9:5b:f4:5b:ba:f5:46:e6:b4:c3:7e:a2:26:
         f1:a5:d5:36:3c:4e:06:d2:8b:d5:bb:1a:2a:30:bb:97:cd:ae:
         98:a0:14:d3:5a:6a:63:b3:6b:32:6a:15:d4:f4:79:10:bb:34:
         ec:0c:20:f1:ee:fa:a8:2b:96:bb:7f:90:e7:6f:0a:b8:5c:a3:
         27:fa:d2:f8:11:85:33:b4:1a:fa:d0:98:6c:02:be:a3:bb:19:
         2f:64:9b:31:1d:93:74:02:16:20:2d:87:a3:a2:fb:05:00:0f:
         4f:8d:da:48:43:f8:f0:c2:0b:bf:00:de:a0:4b:3a:f5:cb:ab:
         d3:d8:66:cf:3d:af:ea:b2:95:d0:82:4a:39:88:7a:73:3b:c8:
         70:f1:84:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 06:32:57 2024 by rpki-client on console-fra.rpki-client.org