Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a3a2f33362d3336203d3e20323638323335.roa
File:                     323830343a346530383a3a2f33362d3336203d3e20323638323335.roa (raw, json)
Hash identifier:          a0z4zlx01VSGNZ/sVC3KQZg2VwBa+bwn/jNz5Gc9DAk=
Subject key identifier:   39:AE:B0:44:78:E4:68:B2:42:2C:A9:BC:C4:17:AF:32:5E:C8:DF:04
Certificate issuer:       /CN=5AB9CDBE226CB666D8272B3C166713B1F10A56C5
Certificate serial:       20A2C9102E282C4CF987624CBD314A17C62EC328
Authority key identifier: 5A:B9:CD:BE:22:6C:B6:66:D8:27:2B:3C:16:67:13:B1:F1:0A:56:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a3a2f33362d3336203d3e20323638323335.roa
Signing time:             Thu 25 Jul 2024 14:00:01 +0000
ROA not before:           Thu 25 Jul 2024 13:55:01 +0000
ROA not after:            Fri 25 Jul 2025 14:00:01 +0000
asID:                     268235
IP address blocks:        2804:4e08::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:a2:c9:10:2e:28:2c:4c:f9:87:62:4c:bd:31:4a:17:c6:2e:c3:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AB9CDBE226CB666D8272B3C166713B1F10A56C5
        Validity
            Not Before: Jul 25 13:55:01 2024 GMT
            Not After : Jul 25 14:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:07:a9:18:31:4a:14:1d:ff:3e:e1:84:95:c9:
                    89:4d:9a:cc:2c:78:6d:05:75:99:5d:7b:3e:96:4e:
                    57:94:ca:1b:4d:ad:cd:69:a9:4e:3d:5a:a1:05:ef:
                    b4:99:3a:77:a0:5a:8c:fb:2a:67:8d:45:6f:cd:9d:
                    22:d0:d5:7b:92:fb:93:9f:e7:5d:92:e5:bd:19:68:
                    e0:b7:c5:85:97:af:0c:ac:7e:8d:9d:26:d5:78:51:
                    40:f0:69:72:89:c2:ea:e9:59:07:66:88:4d:95:f0:
                    19:b7:a1:51:15:f3:d9:03:a6:20:f0:43:29:24:96:
                    16:be:68:04:54:7b:51:3c:90:b2:ae:b0:e4:1d:82:
                    b5:4e:3b:6e:e8:e5:3a:eb:be:10:e5:c2:79:b0:06:
                    4b:4c:92:6f:9d:d6:c4:51:80:a1:de:03:37:f0:b6:
                    4d:e1:db:a9:20:bc:95:97:b4:2f:c7:9d:41:74:01:
                    40:fa:ac:1f:99:1a:e4:ae:0b:7a:b1:db:c7:77:ad:
                    a8:cc:ed:82:68:f2:fa:ce:c1:c0:91:63:ae:5f:23:
                    f9:e5:49:53:a4:c8:c9:1d:c9:75:9c:e6:86:40:68:
                    9c:0c:1a:2f:f4:28:b5:b5:b2:c7:79:ba:9d:d5:cb:
                    18:21:31:b3:a0:65:dd:37:4c:ba:0e:49:21:ee:f6:
                    08:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:AE:B0:44:78:E4:68:B2:42:2C:A9:BC:C4:17:AF:32:5E:C8:DF:04
            X509v3 Authority Key Identifier:
                keyid:5A:B9:CD:BE:22:6C:B6:66:D8:27:2B:3C:16:67:13:B1:F1:0A:56:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a3a2f33362d3336203d3e20323638323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e08::/36

    Signature Algorithm: sha256WithRSAEncryption
         79:52:3e:51:a7:17:6f:53:48:d3:82:95:78:05:42:fc:dc:38:
         8b:28:6c:57:e6:fc:af:2c:96:af:70:45:7e:ed:2c:f4:44:6f:
         99:88:97:51:b8:06:3f:5d:70:16:9f:5c:c8:88:a4:9e:ad:1f:
         e3:be:e4:e8:8d:00:ed:9c:df:49:ca:97:ca:e1:1d:ff:24:cc:
         38:44:58:41:b5:b4:bf:79:1d:19:8a:bd:22:78:a8:ab:6b:a0:
         91:b9:03:b2:53:9c:cc:6a:77:46:bc:a5:56:b1:6f:98:6c:d6:
         46:ad:ce:07:5e:f7:4f:6a:1e:4a:1f:6d:9d:8a:ad:7d:3f:44:
         84:d4:f2:68:bb:3a:f3:db:16:6c:6a:8d:51:3f:f9:bf:5b:f2:
         ba:54:f3:b5:34:8c:3f:73:5b:88:34:a8:c8:10:9a:bc:53:61:
         30:4b:bf:dd:e6:48:a2:04:43:cd:31:a3:df:a2:59:d9:8e:09:
         1f:da:32:c9:07:a3:31:c4:4c:d8:9e:58:d5:47:22:72:1f:cf:
         d6:b1:9b:64:c2:6e:10:15:6c:ba:5c:38:b8:2f:c8:31:ae:57:
         d0:1b:01:8f:6c:16:71:9f:2f:4f:21:a1:81:99:8f:c1:64:ce:
         3c:4b:09:6c:89:54:88:4b:fa:12:cf:e6:70:97:13:2f:50:43:
         c2:70:63:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 06:17:45 2024 by rpki-client on console-ams.rpki-client.org