Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a383030303a3a2f33362d3336203d3e20323638323335.roa
File:                     323830343a346530383a383030303a3a2f33362d3336203d3e20323638323335.roa (raw, json)
Hash identifier:          CVLm+1j8xbTTg8OA9MTYp4liL7XeZUxzSZaF0Llv6OQ=
Subject key identifier:   40:7B:89:45:4C:70:AC:A0:A9:E4:AD:9C:A3:BE:4B:7F:0A:93:BC:48
Certificate issuer:       /CN=5AB9CDBE226CB666D8272B3C166713B1F10A56C5
Certificate serial:       F374CB1A14917E34DC27A690BB26F7C8E99AFA
Authority key identifier: 5A:B9:CD:BE:22:6C:B6:66:D8:27:2B:3C:16:67:13:B1:F1:0A:56:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a383030303a3a2f33362d3336203d3e20323638323335.roa
Signing time:             Thu 25 Jul 2024 14:07:30 +0000
ROA not before:           Thu 25 Jul 2024 14:02:30 +0000
ROA not after:            Fri 25 Jul 2025 14:07:30 +0000
asID:                     268235
IP address blocks:        2804:4e08:8000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f3:74:cb:1a:14:91:7e:34:dc:27:a6:90:bb:26:f7:c8:e9:9a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AB9CDBE226CB666D8272B3C166713B1F10A56C5
        Validity
            Not Before: Jul 25 14:02:30 2024 GMT
            Not After : Jul 25 14:07:30 2025 GMT
        Subject: CN=3082010A0282010100DB34BD4F6A002B1ED1427DBFEA80564CBB2F86EE3023553B38CDDE7F05BD262815F135042F7CAB880355BD9AB692149A88B2B2D69A83109E7A9DB8A710DDFF32B0F27BD3351A60530E8FA7E72C44EB630CDCC2EDBEEEF86C2E8ABCE9C6564A8B1C3389E91A2D0187E4A68409E6E2AF545498F20D786BD1A7241E6A05D006228B8FECBDD0D3D2E58B4A505F47E3A1FB2AB854545DAA5A398FF447DF12B6FC0C67D5EBAA8D7C858AAD2E8C307E60B2FA87649ED2F523BDDBEA9B6B3C763C3C9582E185F34953CA15F9060099A0B735409911F9A8D5B5688003FDEEE46062EC9BC8C611460A0EDD64BC0A05ADBA928174003537B74E02D6D62AFDF390E86317E9030203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:34:bd:4f:6a:00:2b:1e:d1:42:7d:bf:ea:80:
                    56:4c:bb:2f:86:ee:30:23:55:3b:38:cd:de:7f:05:
                    bd:26:28:15:f1:35:04:2f:7c:ab:88:03:55:bd:9a:
                    b6:92:14:9a:88:b2:b2:d6:9a:83:10:9e:7a:9d:b8:
                    a7:10:dd:ff:32:b0:f2:7b:d3:35:1a:60:53:0e:8f:
                    a7:e7:2c:44:eb:63:0c:dc:c2:ed:be:ee:f8:6c:2e:
                    8a:bc:e9:c6:56:4a:8b:1c:33:89:e9:1a:2d:01:87:
                    e4:a6:84:09:e6:e2:af:54:54:98:f2:0d:78:6b:d1:
                    a7:24:1e:6a:05:d0:06:22:8b:8f:ec:bd:d0:d3:d2:
                    e5:8b:4a:50:5f:47:e3:a1:fb:2a:b8:54:54:5d:aa:
                    5a:39:8f:f4:47:df:12:b6:fc:0c:67:d5:eb:aa:8d:
                    7c:85:8a:ad:2e:8c:30:7e:60:b2:fa:87:64:9e:d2:
                    f5:23:bd:db:ea:9b:6b:3c:76:3c:3c:95:82:e1:85:
                    f3:49:53:ca:15:f9:06:00:99:a0:b7:35:40:99:11:
                    f9:a8:d5:b5:68:80:03:fd:ee:e4:60:62:ec:9b:c8:
                    c6:11:46:0a:0e:dd:64:bc:0a:05:ad:ba:92:81:74:
                    00:35:37:b7:4e:02:d6:d6:2a:fd:f3:90:e8:63:17:
                    e9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:7B:89:45:4C:70:AC:A0:A9:E4:AD:9C:A3:BE:4B:7F:0A:93:BC:48
            X509v3 Authority Key Identifier:
                keyid:5A:B9:CD:BE:22:6C:B6:66:D8:27:2B:3C:16:67:13:B1:F1:0A:56:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a383030303a3a2f33362d3336203d3e20323638323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e08:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         60:f7:0b:2d:45:ad:7c:80:6a:17:6b:4b:c4:22:c9:62:7e:80:
         84:62:0f:b2:fd:08:7c:14:c6:ee:99:89:f1:1e:99:a8:87:d0:
         37:78:8f:6b:56:17:18:8c:ff:10:9b:7e:02:12:2c:a4:36:10:
         08:18:78:b7:76:2a:19:4f:d9:7b:c5:97:14:71:c1:f7:d5:b2:
         b3:5c:fd:d7:3a:1b:8f:52:3d:ee:28:d7:2a:56:76:2b:48:05:
         d2:c1:b6:aa:75:10:22:0b:78:17:16:b5:69:48:3e:e7:e6:94:
         4f:75:31:62:2c:36:94:07:64:d7:a7:9a:f5:4c:a1:a1:e3:c9:
         d5:00:8f:82:3a:e2:24:d0:8d:ce:14:10:a2:4f:1b:be:9d:bb:
         eb:66:20:82:b4:3f:22:35:e9:89:4a:1b:3c:eb:bc:f3:f3:ed:
         d7:28:ba:a6:7e:22:e7:95:5a:59:da:98:23:13:47:7f:68:07:
         e8:29:30:ae:a8:27:66:55:89:fc:0d:01:a9:84:4e:d1:41:22:
         2c:a3:7d:7c:0f:51:e7:9f:dd:a2:4c:42:20:f7:19:65:58:95:
         2d:16:a1:34:cb:7a:e3:a7:09:9e:8e:20:d6:b2:8c:79:98:3e:
         90:03:06:ed:2a:1c:cb:c7:b5:10:ba:24:05:f6:c4:04:cd:78:
         28:93:a5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 06:32:57 2024 by rpki-client on console-fra.rpki-client.org