Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a353030303a3a2f33362d3336203d3e20323638323335.roa
File:                     323830343a346530383a353030303a3a2f33362d3336203d3e20323638323335.roa (raw, json)
Hash identifier:          aGcHww9UhqGAlycwl9n7DfpCqlnUgTDU8uX8d98+3dk=
Subject key identifier:   9D:73:0C:5B:33:79:84:A7:C1:F6:D9:1C:34:49:BE:3A:D4:8B:BB:68
Certificate issuer:       /CN=5AB9CDBE226CB666D8272B3C166713B1F10A56C5
Certificate serial:       64540810266D098A57E1255CDA98869195C1F9E7
Authority key identifier: 5A:B9:CD:BE:22:6C:B6:66:D8:27:2B:3C:16:67:13:B1:F1:0A:56:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a353030303a3a2f33362d3336203d3e20323638323335.roa
Signing time:             Thu 25 Jul 2024 14:02:04 +0000
ROA not before:           Thu 25 Jul 2024 13:57:04 +0000
ROA not after:            Fri 25 Jul 2025 14:02:04 +0000
asID:                     268235
IP address blocks:        2804:4e08:5000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:54:08:10:26:6d:09:8a:57:e1:25:5c:da:98:86:91:95:c1:f9:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AB9CDBE226CB666D8272B3C166713B1F10A56C5
        Validity
            Not Before: Jul 25 13:57:04 2024 GMT
            Not After : Jul 25 14:02:04 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d2:98:00:d9:05:8f:c6:df:a3:6e:f9:84:cc:
                    e3:46:7c:9d:ef:fb:4f:60:6e:ad:0d:d3:db:0f:98:
                    8a:af:db:d3:11:66:aa:2d:d2:70:f7:f9:b4:58:e8:
                    95:af:85:ed:af:fc:65:d3:ba:1d:a0:01:a4:2c:0b:
                    74:b7:34:0a:f4:69:f5:ed:28:0e:6f:37:93:98:6e:
                    da:51:3d:36:b5:f3:f2:63:0e:3f:90:3b:ec:50:7b:
                    fb:55:ef:53:27:67:61:fb:b0:c5:1a:9f:2d:7b:53:
                    f4:49:aa:55:6a:76:55:e7:23:1a:24:ba:ec:d0:5c:
                    60:c2:56:6f:5f:79:df:cb:74:50:e0:ee:17:cd:91:
                    25:c3:c1:69:d7:cc:01:c2:63:aa:c4:93:da:05:36:
                    f1:51:e2:a6:3d:d2:d6:b5:76:2b:e5:b7:b7:cd:d3:
                    89:a5:1b:fe:68:de:16:68:86:1e:25:ae:7f:5b:8b:
                    76:4e:80:b1:52:91:52:d0:b8:c8:c4:36:76:38:f1:
                    08:29:fc:fe:15:1e:8b:a5:59:6d:58:0f:46:d0:e8:
                    cf:3c:a9:f0:ed:3a:21:97:fd:01:3e:47:bb:33:8e:
                    e3:3d:93:bc:91:f7:54:ae:43:a0:8d:1b:47:50:c7:
                    78:78:eb:15:88:27:c8:26:1d:c2:da:35:89:79:91:
                    00:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:73:0C:5B:33:79:84:A7:C1:F6:D9:1C:34:49:BE:3A:D4:8B:BB:68
            X509v3 Authority Key Identifier:
                keyid:5A:B9:CD:BE:22:6C:B6:66:D8:27:2B:3C:16:67:13:B1:F1:0A:56:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a353030303a3a2f33362d3336203d3e20323638323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e08:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         77:8e:64:9d:db:88:f1:ba:bc:82:65:45:b3:18:16:5e:c8:1b:
         25:e9:33:31:8e:21:2d:bb:a4:c4:9f:fa:a5:d9:a4:75:a2:03:
         5a:4f:c0:2b:90:c7:bf:b8:87:e5:10:38:b1:4e:5b:3c:6f:b5:
         7a:60:d0:3c:0f:a7:aa:36:14:4c:01:fc:f2:7b:d4:b5:d3:03:
         3f:6b:f8:15:d6:ef:43:9f:f6:e4:dc:34:0a:fb:e2:e7:d0:cf:
         03:97:ae:98:b6:9d:1d:1c:c9:69:f6:be:29:d4:5f:69:57:6c:
         3e:fb:08:3d:f3:47:89:83:15:de:73:82:a9:d2:a1:bb:eb:31:
         66:e2:cf:f7:19:93:79:19:03:67:13:5e:78:dc:a8:c8:0c:15:
         ea:a2:bd:ba:e2:2d:f7:e0:66:a9:8a:1a:46:e3:da:92:f4:f9:
         ce:7f:a7:3a:7d:f1:39:a6:a8:59:91:85:27:e8:3e:51:08:3a:
         25:7b:da:41:b2:32:9e:fc:ec:1f:e0:eb:dd:8e:3c:6a:5e:97:
         ac:a0:f5:fb:61:08:9b:4c:23:d2:54:ea:b1:2c:b7:7e:43:24:
         07:93:d6:f8:b6:69:ce:47:93:cb:ee:b5:6c:e6:8e:87:b2:7a:
         cc:bb:5a:c6:46:a3:0d:db:00:93:7b:ca:86:9b:64:08:4d:e5:
         c6:29:97:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 06:17:45 2024 by rpki-client on console-ams.rpki-client.org