Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G6axa42KkTusN5YZjbjmHMx6Pj1pG2bcmVXngcGgq9B6/0/323830343a373264633a3a2f33322d313238203d3e20323730383830.roa
File:                     323830343a373264633a3a2f33322d313238203d3e20323730383830.roa (raw, json)
Hash identifier:          5+YUZg3SEL/lL4k7snKj1swr3fPGj5UKmZfZOAWWtIU=
Subject key identifier:   DF:4D:16:4B:AB:F4:AA:B8:40:A7:02:47:E1:B8:0F:DD:9D:4F:59:6D
Certificate issuer:       /CN=87AAECBC3426D381256299C2D6E7F6FC62C8EDEC
Certificate serial:       4F6E74CF80B322A811DF61547C7FB86DB4DABAD3
Authority key identifier: 87:AA:EC:BC:34:26:D3:81:25:62:99:C2:D6:E7:F6:FC:62:C8:ED:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87AAECBC3426D381256299C2D6E7F6FC62C8EDEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6axa42KkTusN5YZjbjmHMx6Pj1pG2bcmVXngcGgq9B6/0/323830343a373264633a3a2f33322d313238203d3e20323730383830.roa
Signing time:             Mon 25 Sep 2023 17:19:33 +0000
ROA not before:           Mon 25 Sep 2023 17:14:33 +0000
ROA not after:            Mon 23 Sep 2024 17:19:33 +0000
asID:                     270880
IP address blocks:        2804:72dc::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:6e:74:cf:80:b3:22:a8:11:df:61:54:7c:7f:b8:6d:b4:da:ba:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87AAECBC3426D381256299C2D6E7F6FC62C8EDEC
        Validity
            Not Before: Sep 25 17:14:33 2023 GMT
            Not After : Sep 23 17:19:33 2024 GMT
        Subject: CN=DF4D164BABF4AAB840A70247E1B80FDD9D4F596D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5a:f5:be:33:29:38:ec:cc:e2:e7:68:44:72:
                    03:e7:cc:02:66:28:dd:1e:cc:4f:ec:b5:8b:7b:99:
                    5e:9b:53:87:76:20:fc:bc:87:34:ac:f6:e7:48:26:
                    5e:68:b7:02:30:4b:1d:74:08:8c:24:79:10:9e:f2:
                    a3:af:0d:a4:a8:59:22:28:57:9a:6c:43:ed:14:0b:
                    45:57:80:14:0a:f2:ba:ee:51:59:9d:87:40:72:fb:
                    4f:2e:2f:6a:eb:a4:39:5d:da:5a:a1:20:47:61:6f:
                    d5:a0:07:61:9a:6a:7f:e0:42:a6:f5:3e:84:16:2e:
                    23:0d:3a:69:57:0e:ec:f8:3e:ed:e7:81:df:d0:81:
                    0f:76:16:82:d5:d0:dc:f5:83:0e:33:0e:03:14:5d:
                    3c:3c:37:a4:28:64:34:79:2d:f7:2a:be:f8:5c:03:
                    32:f6:93:2c:fb:91:15:e1:8e:8b:82:72:1e:98:2d:
                    f0:9c:79:94:06:c5:9c:b7:40:f9:32:4b:1a:40:b6:
                    de:5b:16:0d:05:63:36:02:38:c2:9e:fd:f6:e1:a8:
                    23:8d:5b:d6:ab:49:2f:bc:31:e4:5b:fc:58:2f:4c:
                    12:8f:97:e0:34:78:1b:4a:2c:68:53:0c:ba:25:67:
                    11:da:54:87:54:0c:10:8b:f3:1a:21:3b:0a:a5:b5:
                    97:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4D:16:4B:AB:F4:AA:B8:40:A7:02:47:E1:B8:0F:DD:9D:4F:59:6D
            X509v3 Authority Key Identifier:
                keyid:87:AA:EC:BC:34:26:D3:81:25:62:99:C2:D6:E7:F6:FC:62:C8:ED:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6axa42KkTusN5YZjbjmHMx6Pj1pG2bcmVXngcGgq9B6/0/87AAECBC3426D381256299C2D6E7F6FC62C8EDEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87AAECBC3426D381256299C2D6E7F6FC62C8EDEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6axa42KkTusN5YZjbjmHMx6Pj1pG2bcmVXngcGgq9B6/0/323830343a373264633a3a2f33322d313238203d3e20323730383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:61:76:01:a6:b1:92:1a:b9:ca:83:79:65:05:31:8d:a5:11:
         9f:f0:f1:74:47:c5:f1:e2:bb:a4:96:7e:1e:f3:95:f1:da:fb:
         48:99:94:93:3a:0c:84:c3:ef:6a:08:ac:44:c8:93:1b:69:62:
         bd:24:13:9c:c5:ce:67:9c:cd:61:68:96:09:8c:62:fd:0b:63:
         70:e7:63:52:72:30:d9:2f:e5:e3:00:5e:86:de:e9:70:74:40:
         b1:b8:1a:77:31:43:b4:f6:7c:0b:b9:14:ef:a3:0e:a1:21:31:
         83:e6:3c:a3:6c:1b:02:09:10:14:58:d0:88:e0:2f:0c:59:b7:
         07:e2:61:09:03:7b:00:bb:75:e0:b4:c1:23:f5:3b:11:11:c3:
         f8:b9:3f:b7:af:f7:f9:8c:b3:9b:83:3a:ca:5e:e6:26:c0:cc:
         1e:c4:81:28:c4:18:03:e3:f4:83:5e:42:25:60:bd:25:4f:a8:
         d9:96:4b:13:2a:8f:00:dc:eb:31:1a:20:97:22:f1:d5:28:c7:
         9e:87:72:7e:15:55:b3:19:14:23:94:34:e6:d9:79:87:8b:e4:
         5a:51:47:68:c4:ca:0f:15:52:d5:52:8a:47:81:b9:57:99:3d:
         96:f8:39:9e:dd:2c:3d:3e:0e:18:91:be:56:ef:7a:8f:36:a5:
         07:e0:59:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org