Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GLNM8BgNKkYHBHHn1xjjcaWTyxCyrHY7YN2sbVeMj5zd/0/323830343a3339633a3a2f33322d3634203d3e203238333239.roa
File:                     323830343a3339633a3a2f33322d3634203d3e203238333239.roa (raw, json)
Hash identifier:          dF3v1GDSxa7BHdVnSLUjGZwqsAlbNmUoIxlwXdx/IMQ=
Subject key identifier:   FF:0A:D1:18:17:35:8C:7B:6C:2B:D9:F4:8E:07:E4:37:C5:40:A1:4A
Certificate issuer:       /CN=D8080D58CE4D30EFB1407E8DEDEDB02B3CC96CDB
Certificate serial:       6D7CF5A360558CECAD89E44F3907892A0B317FE6
Authority key identifier: D8:08:0D:58:CE:4D:30:EF:B1:40:7E:8D:ED:ED:B0:2B:3C:C9:6C:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8080D58CE4D30EFB1407E8DEDEDB02B3CC96CDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GLNM8BgNKkYHBHHn1xjjcaWTyxCyrHY7YN2sbVeMj5zd/0/323830343a3339633a3a2f33322d3634203d3e203238333239.roa
Signing time:             Fri 25 Feb 2022 05:19:06 +0000
ROA not before:           Fri 25 Feb 2022 05:14:06 +0000
ROA not after:            Sat 25 Feb 2023 05:19:06 +0000
asID:                     28329
IP address blocks:        2804:39c::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:7c:f5:a3:60:55:8c:ec:ad:89:e4:4f:39:07:89:2a:0b:31:7f:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8080D58CE4D30EFB1407E8DEDEDB02B3CC96CDB
        Validity
            Not Before: Feb 25 05:14:06 2022 GMT
            Not After : Feb 25 05:19:06 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2c:2d:9f:d9:1a:08:1e:95:00:dc:65:db:f0:
                    be:bf:6a:56:ba:df:4a:84:46:81:0c:1b:f6:8b:8c:
                    a3:d1:47:07:bc:18:77:96:94:fb:a2:0a:56:4d:af:
                    19:b7:b2:57:93:c9:02:8d:1c:b0:73:8f:ed:fd:7c:
                    9d:61:7e:ba:36:c8:b5:69:8f:63:21:15:b7:06:aa:
                    6a:9b:01:c0:cc:20:81:46:67:7e:e7:bc:d9:f8:ff:
                    75:b7:bd:7b:3c:e6:66:25:56:ca:39:71:ab:c3:b1:
                    a1:08:1b:76:4c:84:dd:36:8a:99:c5:5c:41:e4:0c:
                    09:51:14:64:36:b0:b9:76:93:d4:db:42:cf:d2:9d:
                    7e:8c:d9:14:3d:ec:a0:5d:73:99:16:73:b9:2a:8d:
                    48:3b:76:c6:dc:98:ea:cb:7e:93:62:17:41:d4:57:
                    fd:6d:73:47:e2:e0:9a:da:d3:b6:b5:e6:c4:1d:3f:
                    e1:fd:7f:b0:14:f7:0c:54:10:47:5e:f3:f1:e1:72:
                    70:59:94:06:98:62:08:11:d0:a3:ea:3d:36:1c:87:
                    fd:65:17:03:57:53:57:5e:ad:38:e0:ea:95:95:8a:
                    3a:8f:c2:42:b9:17:d8:2b:32:b6:43:f1:41:2f:23:
                    3c:69:cb:7c:99:ec:d5:65:44:fc:cb:c2:d7:c0:7b:
                    34:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:0A:D1:18:17:35:8C:7B:6C:2B:D9:F4:8E:07:E4:37:C5:40:A1:4A
            X509v3 Authority Key Identifier:
                keyid:D8:08:0D:58:CE:4D:30:EF:B1:40:7E:8D:ED:ED:B0:2B:3C:C9:6C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GLNM8BgNKkYHBHHn1xjjcaWTyxCyrHY7YN2sbVeMj5zd/0/D8080D58CE4D30EFB1407E8DEDEDB02B3CC96CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8080D58CE4D30EFB1407E8DEDEDB02B3CC96CDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GLNM8BgNKkYHBHHn1xjjcaWTyxCyrHY7YN2sbVeMj5zd/0/323830343a3339633a3a2f33322d3634203d3e203238333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:39c::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:7c:95:e3:5a:ab:e7:e3:a2:e9:97:a4:ab:29:56:08:14:e2:
         e3:f2:00:7e:6e:6e:b7:b5:fb:42:31:3d:90:b6:a6:5a:0a:a3:
         f0:05:80:9b:d4:0a:e9:30:02:29:57:ed:aa:02:7a:ee:b4:00:
         7d:7c:86:9b:57:8e:89:5e:85:f4:90:19:f3:c5:ca:2f:3f:76:
         30:21:9d:c1:37:2c:ed:78:0b:9b:4b:d5:80:97:0a:e4:60:e2:
         65:d9:a0:48:6c:5c:08:3b:12:cd:67:45:35:6f:d4:70:42:83:
         5c:47:a4:a8:99:10:08:85:52:f1:86:b1:2c:c5:1e:41:f3:fa:
         a9:df:84:7c:5d:47:10:4d:04:96:45:e2:eb:90:09:8f:d7:d9:
         ba:66:cc:dc:18:18:fe:18:77:50:55:d1:b9:dd:47:bc:1e:a3:
         48:19:3d:68:bd:d9:9d:1f:d6:5e:5b:e9:ef:b2:d0:bc:27:89:
         66:6d:13:b9:76:76:47:7f:c9:2b:e0:c0:43:09:f3:5f:61:a2:
         a5:4b:29:75:f9:70:a3:00:73:b0:9f:42:af:c2:55:d2:14:0a:
         7c:b8:b5:28:f8:13:ca:bb:16:fc:ed:02:0b:46:80:40:f3:ad:
         37:58:9f:d4:d0:7c:6a:76:27:9e:34:6b:f2:9e:c7:2f:d2:bd:
         ab:72:35:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:24 2024 by rpki-client on console-ams.rpki-client.org