Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a323a3a2f34382d3634203d3e20323633353834.roa
File:                     323830343a6636383a323a3a2f34382d3634203d3e20323633353834.roa (raw, json)
Hash identifier:          UEkoSfPfcBnG9+5XBUi07b7ilU02nmzwpjTG1tKlFOY=
Subject key identifier:   17:46:1B:DF:8E:01:E0:04:FF:9B:11:C1:8D:E9:41:1D:B0:69:F3:38
Certificate issuer:       /CN=5D1918C8BEA18D430C65710CC84BD1DC96D5EF27
Certificate serial:       310C803E58205A713CB8E89D4BAAD137AB2DF6F7
Authority key identifier: 5D:19:18:C8:BE:A1:8D:43:0C:65:71:0C:C8:4B:D1:DC:96:D5:EF:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D1918C8BEA18D430C65710CC84BD1DC96D5EF27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a323a3a2f34382d3634203d3e20323633353834.roa
Signing time:             Thu 28 Jul 2022 15:23:30 +0000
ROA not before:           Thu 28 Jul 2022 15:18:30 +0000
ROA not after:            Thu 27 Jul 2023 15:23:30 +0000
asID:                     263584
IP address blocks:        2804:f68:2::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:0c:80:3e:58:20:5a:71:3c:b8:e8:9d:4b:aa:d1:37:ab:2d:f6:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1918C8BEA18D430C65710CC84BD1DC96D5EF27
        Validity
            Not Before: Jul 28 15:18:30 2022 GMT
            Not After : Jul 27 15:23:30 2023 GMT
        Subject: CN=17461BDF8E01E004FF9B11C18DE9411DB069F338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cc:e1:f2:57:4b:25:24:cb:45:c7:41:fd:b7:
                    60:c7:de:4a:33:2d:d6:6d:ba:09:9b:73:e1:38:ce:
                    87:4b:9b:b1:55:cd:91:0e:d2:e1:51:83:10:b9:19:
                    4e:da:04:e8:11:96:85:82:24:48:48:83:b1:cc:8a:
                    81:fb:f1:57:83:b2:93:46:a4:49:e8:3d:96:a7:f8:
                    0d:75:5e:7c:e8:41:e4:37:40:64:cd:d9:5d:ad:d6:
                    e5:72:94:16:37:05:3e:2e:2d:b1:d4:52:11:c4:6b:
                    8f:23:2a:28:b8:9e:e2:83:cf:08:d3:80:57:15:32:
                    12:5a:a6:22:35:2d:54:05:2c:73:2c:fd:2a:f9:b8:
                    05:fe:9f:25:55:7b:11:d8:a2:5e:ee:4b:20:5d:6b:
                    4d:54:a5:3e:f0:6a:12:47:33:57:19:d8:40:cf:8d:
                    ad:ed:ef:a9:60:16:f5:a7:78:31:0a:d0:e0:b8:0a:
                    ce:61:ad:fd:59:22:cc:1b:67:65:0f:1d:9e:41:4d:
                    82:55:49:e6:aa:f6:6e:99:79:cb:db:d8:72:cc:c7:
                    43:bd:df:e4:73:0b:a2:54:a4:65:e0:25:5c:7d:db:
                    4d:96:97:c9:52:05:6d:63:3a:1c:92:de:98:d4:eb:
                    a3:64:0f:3d:95:a8:98:94:ad:d0:19:95:fb:30:08:
                    28:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:46:1B:DF:8E:01:E0:04:FF:9B:11:C1:8D:E9:41:1D:B0:69:F3:38
            X509v3 Authority Key Identifier:
                keyid:5D:19:18:C8:BE:A1:8D:43:0C:65:71:0C:C8:4B:D1:DC:96:D5:EF:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/5D1918C8BEA18D430C65710CC84BD1DC96D5EF27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D1918C8BEA18D430C65710CC84BD1DC96D5EF27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a323a3a2f34382d3634203d3e20323633353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f68:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:9e:f7:70:e6:2a:f3:4f:cd:9d:0d:4d:9e:8a:3a:6d:67:29:
         08:13:3d:e3:34:cd:05:91:f9:e6:a3:44:57:05:9d:49:a2:d7:
         eb:6f:3e:b0:f3:03:de:5d:a0:74:78:c2:70:0a:bd:42:be:e5:
         ce:ce:b4:65:a8:3e:de:2d:a8:ca:af:6c:3b:d6:0e:28:76:f7:
         53:16:aa:73:95:cd:21:60:56:ae:f8:ea:bf:9f:32:01:42:a3:
         e0:90:0e:50:ec:89:72:fe:a5:79:e7:b3:e1:e0:83:54:ae:1e:
         ed:c5:25:1a:2f:87:5d:52:3f:a0:d1:06:d7:8d:15:ac:b7:d1:
         2b:ef:c8:aa:64:4d:d0:fa:0d:a5:e6:e4:6b:9b:60:f1:8e:cb:
         05:2b:33:1d:7b:32:a8:c5:c1:71:b7:ad:f9:cb:7b:7f:00:c7:
         0e:38:eb:2e:4c:30:8c:75:ff:11:62:8a:5f:3a:f0:fa:24:c4:
         c7:cd:c7:67:d7:c3:de:f5:51:01:a6:00:c1:90:a6:82:6a:8d:
         c1:8b:0e:f2:6a:20:aa:82:02:ec:01:25:c4:c6:e0:ec:88:b1:
         47:e5:f2:ee:47:dd:19:20:47:70:55:ee:a3:47:73:02:6c:9e:
         22:28:bb:b7:3f:31:0d:c8:d1:b1:ea:31:0f:57:ac:43:26:92:
         a5:2b:0f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:24 2024 by rpki-client on console-ams.rpki-client.org