Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a323a3a2f34382d3438203d3e20323633353834.roa
File:                     323830343a6636383a323a3a2f34382d3438203d3e20323633353834.roa (raw, json)
Hash identifier:          tDDZ6PB1TWFWoQt035G/h6NzfqyuOoKVgIav6owsGmI=
Subject key identifier:   BD:58:54:87:92:80:45:E4:CC:19:CF:3F:C4:80:D0:6F:F6:CF:D2:1D
Certificate issuer:       /CN=16DC1AE354984C3C9B94EB05280F158DBFDD92B6
Certificate serial:       1CA2D28F454214A4088F7195DEFD339CB977F254
Authority key identifier: 16:DC:1A:E3:54:98:4C:3C:9B:94:EB:05:28:0F:15:8D:BF:DD:92:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16DC1AE354984C3C9B94EB05280F158DBFDD92B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a323a3a2f34382d3438203d3e20323633353834.roa
Signing time:             Fri 12 May 2023 03:45:44 +0000
ROA not before:           Fri 12 May 2023 03:40:44 +0000
ROA not after:            Fri 10 May 2024 03:45:44 +0000
asID:                     263584
IP address blocks:        2804:f68:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a2:d2:8f:45:42:14:a4:08:8f:71:95:de:fd:33:9c:b9:77:f2:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16DC1AE354984C3C9B94EB05280F158DBFDD92B6
        Validity
            Not Before: May 12 03:40:44 2023 GMT
            Not After : May 10 03:45:44 2024 GMT
        Subject: CN=BD585487928045E4CC19CF3FC480D06FF6CFD21D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0b:0b:dd:f4:a0:d1:ae:58:7b:43:4e:6e:db:
                    21:c7:5f:c5:ed:52:fe:35:34:61:30:b4:1a:4e:5c:
                    b1:cd:92:44:02:3a:72:3d:44:82:c6:e5:a0:a8:dd:
                    23:9d:1e:8e:c6:66:0c:3e:e6:df:a9:23:b0:2a:4a:
                    ba:cc:18:08:bb:02:84:8e:38:1b:44:78:8b:14:8f:
                    1b:9f:3c:26:2a:49:5e:f3:11:92:6b:4e:34:90:da:
                    fc:0a:49:15:b7:05:1d:fb:87:59:73:33:24:1a:fd:
                    43:f8:c9:47:a6:bd:28:15:02:6b:98:1e:bc:4c:f2:
                    e9:4e:07:68:e0:94:03:66:64:2d:15:25:ea:65:04:
                    33:d2:29:46:41:64:d2:a5:3e:95:8f:ad:d7:8a:4e:
                    6e:b1:a5:fe:4c:fd:af:fc:d2:c2:be:85:8a:1a:ab:
                    af:fa:79:a4:15:a5:81:0e:99:35:f3:45:d2:0d:c2:
                    40:93:be:94:1c:8f:e0:12:44:e7:b6:a5:1b:7c:7f:
                    d7:39:be:e5:6d:a3:25:29:79:b9:82:6c:30:fe:75:
                    f9:b8:22:64:e8:a4:c2:bc:c6:7d:1b:08:16:8b:74:
                    16:3a:b8:ae:e4:48:11:82:22:19:10:69:19:94:82:
                    ef:4c:8d:b1:d1:dd:44:05:7f:6d:b5:c2:41:92:3f:
                    a5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:58:54:87:92:80:45:E4:CC:19:CF:3F:C4:80:D0:6F:F6:CF:D2:1D
            X509v3 Authority Key Identifier:
                keyid:16:DC:1A:E3:54:98:4C:3C:9B:94:EB:05:28:0F:15:8D:BF:DD:92:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/16DC1AE354984C3C9B94EB05280F158DBFDD92B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16DC1AE354984C3C9B94EB05280F158DBFDD92B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a323a3a2f34382d3438203d3e20323633353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f68:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:c4:c8:ea:66:eb:f2:3d:67:7c:5b:ca:c0:cb:74:95:33:a4:
         ad:79:ec:54:10:04:88:21:f1:a7:bc:c4:7b:06:7a:c2:12:d8:
         f0:e7:aa:c2:e5:0e:1a:68:f6:4c:dd:6a:89:d2:d6:e6:fd:be:
         d1:39:9e:3f:66:80:e5:8a:67:0a:8e:07:25:7c:12:3a:92:23:
         5c:f6:92:1a:1e:43:38:81:bd:af:43:38:e6:96:29:49:39:9e:
         58:0c:bd:bf:77:dc:0c:18:03:01:44:d5:3d:c0:4d:a5:27:fd:
         f0:c0:9f:37:43:9a:24:24:63:07:04:c5:30:b2:1a:3e:86:ae:
         74:09:18:3e:d1:96:77:b2:f3:a1:cd:92:c2:89:00:c4:23:3f:
         94:47:d3:f2:0a:99:0c:17:b7:4e:cf:5e:c0:6a:ad:20:7b:03:
         79:40:82:05:70:9b:57:a8:ec:12:f7:7e:f5:89:6b:ac:f6:1b:
         b9:7f:74:19:0c:4b:70:4d:9d:ea:f7:06:98:f6:1c:8e:f8:db:
         8d:29:f0:e9:ff:6c:11:72:68:ac:63:bf:93:fe:d4:1d:8e:95:
         3b:39:e9:76:f5:cb:4e:bb:e4:c1:80:08:e6:e4:24:30:66:0e:
         97:d9:9d:e3:33:56:2a:fb:c5:af:4a:63:fd:4b:80:a2:52:cc:
         74:1b:b0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:24 2024 by rpki-client on console-ams.rpki-client.org