Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a633030303a3a2f33362d3336203d3e20323638323335.roa
File:                     323830343a346530383a633030303a3a2f33362d3336203d3e20323638323335.roa (raw, json)
Hash identifier:          9ljZZufzNMMTn8f2iygoVFD9r59Me/BtXVme0zH0hw8=
Subject key identifier:   08:DF:4D:CE:B4:1A:DC:44:9C:7F:E8:3D:03:1D:15:64:18:27:90:A6
Certificate issuer:       /CN=5AB9CDBE226CB666D8272B3C166713B1F10A56C5
Certificate serial:       1386E184BEFCEFA5885FE5D3A562009D1D698CFF
Authority key identifier: 5A:B9:CD:BE:22:6C:B6:66:D8:27:2B:3C:16:67:13:B1:F1:0A:56:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a633030303a3a2f33362d3336203d3e20323638323335.roa
Signing time:             Thu 25 Jul 2024 14:08:12 +0000
ROA not before:           Thu 25 Jul 2024 14:03:12 +0000
ROA not after:            Fri 25 Jul 2025 14:08:12 +0000
asID:                     268235
IP address blocks:        2804:4e08:c000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:86:e1:84:be:fc:ef:a5:88:5f:e5:d3:a5:62:00:9d:1d:69:8c:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AB9CDBE226CB666D8272B3C166713B1F10A56C5
        Validity
            Not Before: Jul 25 14:03:12 2024 GMT
            Not After : Jul 25 14:08:12 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e2:46:fd:a2:2a:72:90:15:70:29:8b:d6:53:
                    58:c7:b1:b9:f8:66:1d:af:49:df:c1:99:fd:82:15:
                    fc:1e:04:de:90:5b:78:02:fe:54:f7:ba:af:74:8b:
                    f7:01:a8:00:13:59:58:45:4b:c6:42:a3:0c:e9:1e:
                    49:2b:ca:ee:c0:32:aa:d1:ba:a4:9a:8f:ab:6f:0a:
                    9d:43:00:f7:03:6c:11:e9:27:dd:c4:b5:67:90:4e:
                    7a:38:83:86:b7:64:46:6a:97:17:bd:f9:63:b0:f4:
                    21:be:3b:95:dc:f1:88:ab:3c:aa:5e:8c:37:89:5e:
                    ed:b8:6a:c9:6b:7c:30:d3:a9:e8:6a:7c:d5:e8:ad:
                    b5:a5:7d:3b:f4:a7:9e:34:dc:e4:6e:86:8c:dc:5c:
                    23:6d:18:0b:a7:b8:2f:62:16:75:06:72:54:a0:d5:
                    40:1c:d7:b3:3e:51:66:29:be:2a:00:64:a3:9d:18:
                    13:95:a5:2a:70:28:42:ab:93:46:54:92:50:f2:86:
                    cf:38:44:d8:96:b2:b6:63:82:36:17:d8:a0:c4:29:
                    4f:33:57:7a:ea:27:ce:07:2a:02:fe:7c:df:0d:bc:
                    61:26:28:0a:a2:dd:fe:53:df:c2:cd:73:cb:ef:37:
                    57:fb:c6:73:a6:6e:68:be:02:f5:17:c1:86:de:f2:
                    ca:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:DF:4D:CE:B4:1A:DC:44:9C:7F:E8:3D:03:1D:15:64:18:27:90:A6
            X509v3 Authority Key Identifier:
                keyid:5A:B9:CD:BE:22:6C:B6:66:D8:27:2B:3C:16:67:13:B1:F1:0A:56:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a633030303a3a2f33362d3336203d3e20323638323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e08:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b7:88:fb:72:7f:ba:e8:9e:46:90:ef:65:4d:3a:34:b2:1b:6f:
         46:b4:66:66:f7:38:ac:c9:e4:aa:5f:35:46:ba:b0:93:c0:c0:
         3b:f3:57:bd:f5:9a:ff:7b:1e:40:da:d8:f0:00:62:bb:b2:83:
         7c:f7:9f:96:ff:74:10:46:e2:ad:8f:82:2b:a8:bd:35:12:1a:
         f9:3c:75:cd:41:ef:82:ba:1a:92:4e:63:15:90:c1:54:1a:4d:
         22:b8:68:5e:7f:69:c6:cc:07:61:71:6e:72:f4:bf:91:f0:8e:
         c7:ce:80:71:fc:09:60:df:15:8a:44:8a:08:3c:9b:e9:87:aa:
         6d:41:26:07:d2:37:25:e2:b4:35:c2:bb:43:7a:f6:2b:b8:66:
         68:73:52:ec:1a:15:e5:45:2c:45:b6:b9:aa:cd:05:69:89:9b:
         b6:39:c9:5e:b0:fe:c5:b0:42:ec:ba:1a:7b:9b:ee:fb:70:e9:
         6b:88:50:5f:a7:0e:2c:c3:47:1b:b1:7b:10:24:c0:4a:ea:b8:
         b8:f7:34:39:be:12:69:2e:d6:c7:92:de:28:c0:e1:d2:6c:23:
         98:63:dd:66:6f:64:68:c5:57:e0:27:a6:e9:9f:58:9d:2c:3a:
         6e:f4:cb:1d:fb:05:73:c5:cf:17:04:ce:7c:40:e8:8f:25:25:
         28:49:6c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 06:32:57 2024 by rpki-client on console-fra.rpki-client.org