Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a343030303a3a2f33342d3334203d3e20323637343538.roa
File:                     323830343a343164303a343030303a3a2f33342d3334203d3e20323637343538.roa (raw, json)
Hash identifier:          lshqwp0IPZMOFlKR9XgvT3f4MD8D6DR0KpVeJ5LtdbY=
Subject key identifier:   8B:89:89:9F:B8:FD:02:4E:F6:3C:0E:AC:9D:90:06:7A:C6:76:A9:49
Certificate issuer:       /CN=6E8B64572C4C005FCD08B2B1AE1D7888490253E1
Certificate serial:       64C99D6E9C8962ED0D425ABC08C2823DD5C8E88A
Authority key identifier: 6E:8B:64:57:2C:4C:00:5F:CD:08:B2:B1:AE:1D:78:88:49:02:53:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E8B64572C4C005FCD08B2B1AE1D7888490253E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a343030303a3a2f33342d3334203d3e20323637343538.roa
Signing time:             Mon 07 Feb 2022 12:09:36 +0000
ROA not before:           Mon 07 Feb 2022 12:04:36 +0000
ROA not after:            Mon 06 Feb 2023 12:09:36 +0000
asID:                     267458
IP address blocks:        2804:41d0:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:c9:9d:6e:9c:89:62:ed:0d:42:5a:bc:08:c2:82:3d:d5:c8:e8:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E8B64572C4C005FCD08B2B1AE1D7888490253E1
        Validity
            Not Before: Feb  7 12:04:36 2022 GMT
            Not After : Feb  6 12:09:36 2023 GMT
        Subject: CN=8B89899FB8FD024EF63C0EAC9D90067AC676A949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3a:73:82:9f:66:3b:0f:ed:ea:df:e6:11:f2:
                    31:5b:aa:28:e0:b7:65:4d:e1:f5:fa:a5:21:0e:e1:
                    d5:79:bc:e8:82:b2:3f:41:95:f0:37:87:c4:6b:a4:
                    31:58:50:84:f7:79:6f:84:11:f7:22:94:b2:8b:77:
                    40:6a:2d:6f:a5:5b:1a:8c:c5:24:8c:0f:c9:a9:35:
                    71:57:4c:09:9e:e6:79:9f:7a:e1:3f:80:3e:01:bb:
                    78:1a:aa:11:e2:e8:fa:44:f8:bd:ab:9d:b5:c0:f5:
                    d2:8a:61:c3:b4:e2:90:f4:36:27:b5:56:3b:c3:ea:
                    c6:d0:6c:e1:73:2d:03:aa:0e:2a:f3:0b:55:0c:a2:
                    06:9a:d2:f4:e2:2e:1c:2f:0f:ec:b0:86:ae:3d:5e:
                    8a:bb:30:d3:69:08:72:1c:7e:56:6a:a2:b1:f5:98:
                    c0:a8:73:4c:53:cd:02:ed:58:b3:87:a1:25:25:af:
                    d8:34:b8:c4:4f:93:3e:6b:b5:9d:a9:4c:e5:84:8a:
                    84:e1:a1:79:82:13:16:be:ff:1d:50:e4:9c:5c:fe:
                    cb:d6:61:00:a2:08:af:b9:2a:1b:12:79:d6:85:81:
                    e0:2a:0d:e8:57:49:af:f0:16:0a:45:ea:ee:f0:34:
                    4d:11:20:85:31:16:40:6a:39:0f:66:3e:50:b7:1d:
                    37:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:89:89:9F:B8:FD:02:4E:F6:3C:0E:AC:9D:90:06:7A:C6:76:A9:49
            X509v3 Authority Key Identifier:
                keyid:6E:8B:64:57:2C:4C:00:5F:CD:08:B2:B1:AE:1D:78:88:49:02:53:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/6E8B64572C4C005FCD08B2B1AE1D7888490253E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E8B64572C4C005FCD08B2B1AE1D7888490253E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a343030303a3a2f33342d3334203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41d0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         ae:04:53:66:07:f2:79:76:57:be:51:dc:57:70:ef:d1:53:05:
         8c:fd:3e:12:90:3f:76:ff:12:2d:0f:56:9d:d6:32:6d:20:3c:
         43:1c:4e:a5:25:01:f4:e2:e8:7b:5a:db:d4:d6:b4:00:89:ce:
         d0:09:a5:2b:8a:bf:34:ec:56:01:c4:1c:6a:49:73:7e:3a:12:
         0a:06:0d:4c:66:05:f8:45:0a:e5:ce:b9:8a:ec:9d:bc:73:4f:
         d3:ab:a0:8d:7f:87:44:1f:c8:8d:ae:60:63:db:90:b6:6d:12:
         f5:b6:be:20:f1:e3:dd:62:a5:48:12:bd:e0:fd:60:61:2e:4d:
         82:9f:59:88:da:9a:e6:17:2f:fc:24:17:e7:f5:d1:4c:03:08:
         c4:97:cc:ff:da:cc:8f:75:ef:f0:90:99:0f:75:50:10:b0:34:
         78:1a:e2:48:ea:3a:73:32:3b:58:60:69:20:4d:f5:83:b3:60:
         5d:5e:79:33:ba:20:cb:07:be:66:fc:9e:11:7e:99:76:ca:0a:
         81:b1:93:34:e3:a3:f8:bf:10:9f:08:28:2e:b7:a0:98:9a:ef:
         bb:f8:1a:8d:25:a4:3f:1d:b2:7a:e6:99:65:4d:f3:20:2e:ad:
         de:9d:4e:eb:3c:e9:81:45:43:3a:ff:4a:5d:d7:a3:c6:58:29:
         94:ee:49:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:53 2024 by rpki-client on console-fra.rpki-client.org