Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a623030303a3a2f33362d3336203d3e20323638323335.roa
File:                     323830343a346530383a623030303a3a2f33362d3336203d3e20323638323335.roa (raw, json)
Hash identifier:          YY4jth9jSJzl4UH3w7SaTQESkmPWcoNQCo/TTxEHNYU=
Subject key identifier:   E6:9D:CB:E7:95:01:47:3C:D8:6F:D0:28:8B:60:4F:44:46:2F:8A:15
Certificate issuer:       /CN=5AB9CDBE226CB666D8272B3C166713B1F10A56C5
Certificate serial:       1AB1874523802ECC9744DB0399826BB015E64E5F
Authority key identifier: 5A:B9:CD:BE:22:6C:B6:66:D8:27:2B:3C:16:67:13:B1:F1:0A:56:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a623030303a3a2f33362d3336203d3e20323638323335.roa
Signing time:             Thu 25 Jul 2024 14:08:02 +0000
ROA not before:           Thu 25 Jul 2024 14:03:02 +0000
ROA not after:            Fri 25 Jul 2025 14:08:02 +0000
asID:                     268235
IP address blocks:        2804:4e08:b000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b1:87:45:23:80:2e:cc:97:44:db:03:99:82:6b:b0:15:e6:4e:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AB9CDBE226CB666D8272B3C166713B1F10A56C5
        Validity
            Not Before: Jul 25 14:03:02 2024 GMT
            Not After : Jul 25 14:08:02 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bc:47:c8:22:df:d2:6f:8a:d6:8e:39:bd:86:
                    30:79:e6:ee:c5:7b:d5:aa:b1:79:42:45:df:70:51:
                    fb:bb:c8:c7:e3:ac:64:a4:2d:d6:3c:92:bb:86:6e:
                    24:4d:04:f5:fb:71:b4:a9:96:ce:e1:2a:fc:0c:e5:
                    77:24:9e:26:61:4e:7a:d4:a3:a4:2f:a4:8f:29:b7:
                    6c:84:fa:13:21:81:25:55:c8:4e:75:55:e8:00:40:
                    0a:ac:14:16:66:c1:28:35:01:33:87:39:e6:ff:22:
                    9f:6a:92:8a:87:fc:12:d3:cd:67:76:75:4b:11:a6:
                    83:ec:2f:db:a8:a5:a0:6d:35:f1:5e:26:c1:36:01:
                    73:f3:56:c9:fb:5d:0e:ef:40:1c:3f:72:97:fb:25:
                    af:f7:89:0f:f6:aa:0f:1f:8b:18:c1:66:e2:b9:8d:
                    55:b2:c2:8c:e3:a7:d6:89:d3:d9:c6:92:6b:e7:20:
                    29:53:d2:6e:f8:33:73:e9:0b:0e:a1:ec:e7:0c:23:
                    6d:8c:a9:ba:9f:e2:0f:db:00:bc:e1:da:0b:a4:2c:
                    96:0c:da:53:d6:2b:cb:fa:23:15:e5:b6:e0:5f:f8:
                    74:63:b2:49:a1:f0:63:9f:8e:e1:3f:b6:60:9d:fc:
                    c4:61:6f:6c:77:bf:c3:5c:6d:56:33:ef:6b:4d:c7:
                    82:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:9D:CB:E7:95:01:47:3C:D8:6F:D0:28:8B:60:4F:44:46:2F:8A:15
            X509v3 Authority Key Identifier:
                keyid:5A:B9:CD:BE:22:6C:B6:66:D8:27:2B:3C:16:67:13:B1:F1:0A:56:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a623030303a3a2f33362d3336203d3e20323638323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e08:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a0:11:7b:13:9b:80:73:ae:23:0f:61:df:33:09:c4:10:69:a1:
         ef:72:29:8c:92:39:a3:e2:dd:6b:5c:1e:2e:19:54:0c:08:2b:
         8b:2d:34:51:7e:4f:1c:21:74:6e:bf:9a:a3:f8:ad:cf:b7:57:
         fd:97:8c:cc:56:98:5a:48:e0:d0:24:3c:b5:f1:dc:d2:5e:73:
         71:c3:fe:2e:34:29:98:a6:a2:77:c8:60:0b:ae:0f:b1:de:fd:
         2d:5c:66:da:6b:ed:50:94:c9:87:b3:de:ac:0a:a2:16:2c:f9:
         d0:33:11:5e:9a:f8:65:e8:8f:b3:d1:35:5c:87:ac:65:4d:a0:
         d8:0b:93:92:4f:fd:ea:78:6b:d2:d1:02:1e:55:d7:1a:0b:ff:
         5a:86:d0:92:a9:be:73:87:ca:78:9c:98:16:44:5d:21:0d:95:
         0a:a5:b9:fc:2e:35:2d:6c:43:d4:a9:12:84:76:88:a4:25:7d:
         a9:37:80:92:4e:72:ec:37:61:01:16:88:1a:95:f8:d0:b0:36:
         24:25:5b:66:c6:97:cd:89:36:9f:fe:cc:3b:f2:50:54:c4:2d:
         c2:70:4a:6c:a2:a5:0e:65:00:30:eb:f1:4a:2c:79:2d:a5:d2:
         c4:23:6b:55:28:ee:14:fe:b1:ea:74:69:db:82:f9:34:e5:96:
         ce:f5:6c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 06:32:57 2024 by rpki-client on console-fra.rpki-client.org