Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a653030303a3a2f33362d3336203d3e20323638323335.roa
File:                     323830343a346530383a653030303a3a2f33362d3336203d3e20323638323335.roa (raw, json)
Hash identifier:          74Dulr6IEZoVuUJ8D8BloVc17Wzf9sJajNKSe3dzZ20=
Subject key identifier:   EE:E2:13:6E:21:72:91:31:77:90:93:6A:6E:B7:14:A1:E3:D8:88:7C
Certificate issuer:       /CN=5AB9CDBE226CB666D8272B3C166713B1F10A56C5
Certificate serial:       2B675ED2B363D447BAD91C400147A7CE70787C4B
Authority key identifier: 5A:B9:CD:BE:22:6C:B6:66:D8:27:2B:3C:16:67:13:B1:F1:0A:56:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a653030303a3a2f33362d3336203d3e20323638323335.roa
Signing time:             Thu 25 Jul 2024 14:08:33 +0000
ROA not before:           Thu 25 Jul 2024 14:03:33 +0000
ROA not after:            Fri 25 Jul 2025 14:08:33 +0000
asID:                     268235
IP address blocks:        2804:4e08:e000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:67:5e:d2:b3:63:d4:47:ba:d9:1c:40:01:47:a7:ce:70:78:7c:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AB9CDBE226CB666D8272B3C166713B1F10A56C5
        Validity
            Not Before: Jul 25 14:03:33 2024 GMT
            Not After : Jul 25 14:08:33 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5f:6b:4f:c0:0c:bc:52:0a:fd:ce:77:0b:72:
                    be:f1:92:5d:bd:9e:18:de:97:79:ed:6c:bf:07:74:
                    b1:76:29:fa:69:46:b1:7d:af:d3:88:f4:27:8e:ac:
                    8e:11:9c:ff:76:98:ce:14:5a:fe:25:75:4f:82:c6:
                    66:9f:14:02:ac:ba:4c:80:ac:62:51:36:ea:e3:1d:
                    88:fa:cf:fa:16:cc:36:7e:fb:32:52:16:3c:c1:70:
                    65:68:52:02:30:fc:9a:6b:88:57:ec:f0:eb:56:12:
                    14:53:f5:86:88:ad:e6:12:56:72:3d:ae:ab:8f:45:
                    6d:88:d7:0a:c1:e2:93:55:b9:ea:1d:18:00:7e:3d:
                    b6:f4:c0:78:f4:19:fd:74:d7:1b:30:70:c1:2d:09:
                    a5:22:ff:2a:0e:84:9b:cc:f8:11:4d:f7:7b:44:ab:
                    3c:a8:75:ad:1f:b9:f3:79:40:e9:db:80:d1:02:81:
                    75:30:53:52:bc:ef:00:30:23:df:ef:0e:b1:3d:4e:
                    81:a8:7a:bf:f3:c4:b0:c3:bc:e0:75:fd:c3:80:61:
                    6f:aa:3b:98:42:1e:bf:51:06:6c:a1:a9:90:b0:31:
                    a4:a8:73:84:8a:2c:d8:6a:d0:16:e7:1c:51:29:a2:
                    48:3d:b7:4e:c1:c9:3e:6b:50:f2:ae:f6:88:77:17:
                    20:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E2:13:6E:21:72:91:31:77:90:93:6A:6E:B7:14:A1:E3:D8:88:7C
            X509v3 Authority Key Identifier:
                keyid:5A:B9:CD:BE:22:6C:B6:66:D8:27:2B:3C:16:67:13:B1:F1:0A:56:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a653030303a3a2f33362d3336203d3e20323638323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e08:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         aa:4f:84:bd:70:2f:d5:cd:31:3c:b9:68:59:b7:10:14:f0:7e:
         1f:b3:57:62:8d:7a:b4:eb:60:e6:55:85:19:b2:c9:10:85:5d:
         84:da:ac:0f:6d:fb:8d:26:6b:25:5c:9c:24:c5:6e:bf:44:bc:
         a2:8e:8b:f0:6a:6f:3f:b9:36:d9:ff:f9:cb:f3:e9:d4:1e:c8:
         09:d3:c6:2e:f7:d0:78:af:9f:16:ab:4d:e4:83:ef:b0:2f:17:
         03:e5:29:64:d8:8c:c5:42:e6:e6:a9:e4:2f:85:85:4c:33:c2:
         44:94:dd:f0:93:53:9f:13:99:bd:fd:9d:b3:f4:fe:e6:9d:7c:
         82:5a:4b:a4:3c:85:53:b1:34:7f:75:de:75:40:99:62:d1:17:
         bb:c2:67:c8:0f:1b:3f:ba:c1:db:e7:74:87:4b:32:60:89:06:
         48:25:38:17:f0:04:3b:f3:ba:5c:bb:e5:3d:69:5e:39:44:f1:
         3c:8f:82:4b:89:75:26:ce:f1:00:24:a9:f0:28:f9:a0:bc:06:
         c9:a9:a1:4a:ad:cf:20:95:54:0a:6a:2d:59:cf:66:01:ad:28:
         2f:81:35:f5:d3:11:16:2b:59:b1:7d:7c:8e:3d:80:09:2d:3f:
         36:5f:44:41:59:0a:05:3c:ab:56:ef:85:93:52:29:0f:2f:a7:
         49:bc:1f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 06:32:57 2024 by rpki-client on console-fra.rpki-client.org