Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a343030303a3a2f33362d3336203d3e20323638323335.roa
File:                     323830343a346530383a343030303a3a2f33362d3336203d3e20323638323335.roa (raw, json)
Hash identifier:          +Hu4X9AjXIF3wZ7xybluY3CDQCqZACHoU+q4NFCXKOU=
Subject key identifier:   E0:82:70:81:0C:AB:45:D8:E7:7C:4E:CA:D0:CD:E3:C9:BF:69:6E:D5
Certificate issuer:       /CN=5AB9CDBE226CB666D8272B3C166713B1F10A56C5
Certificate serial:       76AC2CBB287CEC21A41BBD444224C52F6EBC269E
Authority key identifier: 5A:B9:CD:BE:22:6C:B6:66:D8:27:2B:3C:16:67:13:B1:F1:0A:56:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a343030303a3a2f33362d3336203d3e20323638323335.roa
Signing time:             Thu 25 Jul 2024 14:01:53 +0000
ROA not before:           Thu 25 Jul 2024 13:56:53 +0000
ROA not after:            Fri 25 Jul 2025 14:01:53 +0000
asID:                     268235
IP address blocks:        2804:4e08:4000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:ac:2c:bb:28:7c:ec:21:a4:1b:bd:44:42:24:c5:2f:6e:bc:26:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AB9CDBE226CB666D8272B3C166713B1F10A56C5
        Validity
            Not Before: Jul 25 13:56:53 2024 GMT
            Not After : Jul 25 14:01:53 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a8:96:8d:68:0e:94:b9:cc:dc:38:a4:da:de:
                    4e:05:54:96:41:c9:45:81:22:ea:b2:87:f3:59:83:
                    24:65:1b:3c:92:52:42:3a:7f:b0:8d:c5:28:a3:9f:
                    28:5d:51:83:59:28:cc:95:b2:89:bf:c3:99:c5:7d:
                    bd:6b:f3:73:10:f0:83:cb:db:57:fb:e6:49:a7:ed:
                    aa:ea:ad:16:d8:1a:85:fa:3e:09:70:f9:45:0f:f2:
                    c5:91:6b:76:63:d3:7f:48:71:71:f1:50:e7:77:14:
                    d9:67:6f:1e:ad:1a:00:9b:20:1b:77:e8:89:22:d5:
                    92:93:03:f2:b9:d6:13:01:67:31:92:87:2f:85:ac:
                    f4:90:d4:0f:86:02:dd:12:8c:b8:b9:03:51:25:96:
                    6a:b3:b3:91:b1:be:bb:23:08:fd:17:a3:5c:a7:a1:
                    04:47:6e:2f:0f:4a:a6:72:95:9b:d4:4f:18:64:65:
                    4e:53:0b:26:5f:b1:38:a3:a0:2d:5c:ec:8b:79:f0:
                    e2:73:03:f8:9f:93:d2:8f:ce:61:04:ac:e3:09:ff:
                    b1:06:0f:c9:91:4a:48:27:1d:2d:e1:18:7d:b3:a8:
                    a1:57:ff:03:c2:7d:3b:53:d8:e3:ee:6a:6d:fa:43:
                    4d:62:2e:d4:f1:17:96:07:35:5b:8f:eb:12:f2:65:
                    b5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:82:70:81:0C:AB:45:D8:E7:7C:4E:CA:D0:CD:E3:C9:BF:69:6E:D5
            X509v3 Authority Key Identifier:
                keyid:5A:B9:CD:BE:22:6C:B6:66:D8:27:2B:3C:16:67:13:B1:F1:0A:56:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a343030303a3a2f33362d3336203d3e20323638323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e08:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         64:9e:62:94:78:8b:34:f3:de:3d:d5:03:41:68:90:ce:58:8d:
         dc:05:14:ab:12:dd:90:0f:b9:66:ae:f9:d1:dc:e4:f0:d1:5c:
         aa:41:3b:af:03:25:4b:a5:fb:8c:e2:7c:b5:09:27:aa:91:4e:
         b4:77:0c:e9:25:50:17:1b:19:d8:4a:ba:6c:1e:63:aa:fc:30:
         d6:ba:3d:51:13:78:7b:eb:56:51:24:28:30:54:78:57:74:7e:
         2e:bc:82:1d:05:38:85:30:ef:6a:3d:c5:fb:3f:26:c5:11:68:
         9f:67:4f:fe:82:dd:27:1f:55:1e:59:f4:80:6e:54:ef:42:5e:
         9b:52:62:1a:4e:02:e7:2c:f9:ff:e7:77:f2:7b:5e:01:92:d5:
         96:cb:d7:ad:44:ea:96:81:fb:06:2d:1e:1d:fe:fa:76:2c:17:
         fb:fb:56:78:a1:29:b9:0d:6e:23:d9:6b:6f:6a:1a:bc:c6:60:
         fa:f2:20:82:02:34:30:5a:66:a1:a7:bd:29:4f:5a:61:94:df:
         02:88:f2:7f:87:62:d7:43:4e:95:93:4c:28:17:3f:ff:17:29:
         93:41:8e:65:12:cf:6e:4c:71:d0:da:21:a7:e0:54:1a:88:c4:
         72:6c:74:08:0c:fa:9b:69:97:b4:f2:24:c3:e4:29:0c:fc:79:
         a8:98:57:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 06:17:45 2024 by rpki-client on console-ams.rpki-client.org