Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/0/323830343a6561383a3a2f33322d3438203d3e20323632393636.roa
File:                     323830343a6561383a3a2f33322d3438203d3e20323632393636.roa (raw, json)
Hash identifier:          yrCR84V4Qc7WOeIGeuBlOLy2iW3YAvMgOaaLMdwKAss=
Subject key identifier:   51:A3:6C:43:FA:54:60:DE:2B:8B:C5:D9:90:2D:58:50:1B:1F:EE:A1
Certificate issuer:       /CN=ABB4C702F23574E58CE72DE74FCACBB0D74F490C
Certificate serial:       0A3A08BA3AAC49132E3D624453C10FF6B9C769E5
Authority key identifier: AB:B4:C7:02:F2:35:74:E5:8C:E7:2D:E7:4F:CA:CB:B0:D7:4F:49:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ABB4C702F23574E58CE72DE74FCACBB0D74F490C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/0/323830343a6561383a3a2f33322d3438203d3e20323632393636.roa
Signing time:             Fri 09 Feb 2024 19:56:43 +0000
ROA not before:           Fri 09 Feb 2024 19:51:43 +0000
ROA not after:            Fri 07 Feb 2025 19:56:43 +0000
asID:                     262966
IP address blocks:        2804:ea8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:3a:08:ba:3a:ac:49:13:2e:3d:62:44:53:c1:0f:f6:b9:c7:69:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABB4C702F23574E58CE72DE74FCACBB0D74F490C
        Validity
            Not Before: Feb  9 19:51:43 2024 GMT
            Not After : Feb  7 19:56:43 2025 GMT
        Subject: CN=51A36C43FA5460DE2B8BC5D9902D58501B1FEEA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8c:7b:2f:7d:48:73:cc:f2:8b:6c:dd:a7:cc:
                    dd:eb:68:9f:ae:72:d1:94:68:8f:21:91:4a:d7:5d:
                    a1:78:73:4f:0b:78:38:b2:1d:c6:df:b9:57:7e:be:
                    ca:fa:80:c2:24:63:74:1f:be:53:d8:1b:83:18:b1:
                    a5:26:47:f2:64:08:94:be:33:3c:e3:39:c6:c8:97:
                    70:8f:27:4c:c0:34:89:52:9e:7f:d7:c1:7d:2a:aa:
                    6b:f0:ba:9a:83:16:83:be:6c:06:40:9f:48:5e:c9:
                    02:0f:be:42:c7:2e:ac:36:c8:2c:08:56:73:10:e9:
                    46:6a:01:c7:9c:cd:59:70:bb:37:74:63:41:dc:dd:
                    43:68:78:2f:e2:4f:f8:22:c3:6a:6f:5a:c6:dc:b0:
                    4c:09:72:39:41:fc:3e:e1:f4:b3:f0:23:b8:c7:8d:
                    f9:dd:80:8c:16:0f:5e:e6:64:9d:98:df:ce:68:f6:
                    8b:2b:af:50:d2:af:5d:a8:a8:02:db:40:23:b2:3d:
                    19:11:c1:3c:18:04:09:99:38:fc:65:75:64:f3:23:
                    0c:53:57:53:00:da:22:ea:3a:24:cc:5b:cd:1a:7f:
                    41:e7:66:03:9f:58:ce:2b:52:a4:52:4e:19:6a:54:
                    85:b3:85:4f:96:7d:16:c1:5a:13:37:08:cc:38:19:
                    06:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A3:6C:43:FA:54:60:DE:2B:8B:C5:D9:90:2D:58:50:1B:1F:EE:A1
            X509v3 Authority Key Identifier:
                keyid:AB:B4:C7:02:F2:35:74:E5:8C:E7:2D:E7:4F:CA:CB:B0:D7:4F:49:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/0/ABB4C702F23574E58CE72DE74FCACBB0D74F490C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ABB4C702F23574E58CE72DE74FCACBB0D74F490C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/0/323830343a6561383a3a2f33322d3438203d3e20323632393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ea8::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:cb:78:d1:5b:f1:31:50:fa:50:0c:4a:48:ee:7c:50:af:cb:
         40:35:10:df:17:76:75:3a:60:1a:e6:8f:6a:11:ff:b8:cb:0f:
         26:8b:0f:da:84:bc:89:e3:2d:c6:3a:66:fe:cf:8d:df:62:c8:
         08:a8:10:15:ae:d3:66:71:8e:e2:63:a8:e8:0a:6f:b5:d8:4f:
         88:8a:96:b5:b9:79:1a:6f:69:2f:0b:61:e0:ef:9c:a3:9e:da:
         27:5e:6d:30:0a:2f:b1:e0:89:86:6d:03:aa:ef:0f:ab:b3:7b:
         a0:3a:ee:5c:57:17:bc:51:9d:42:ac:23:5b:c5:58:3a:30:3c:
         98:38:1f:1a:38:de:ec:fb:fc:d5:e9:88:f1:ce:ed:84:85:b2:
         ca:19:92:fd:d4:d7:6c:92:d2:56:ca:f4:1d:7f:e2:ac:7f:37:
         23:13:b4:b8:91:d6:ca:a2:e5:d2:32:a0:1c:d8:6b:6b:86:e3:
         67:32:ab:e9:a9:a5:bd:3d:a8:d8:dc:d7:74:e7:d5:62:1b:2e:
         bb:a6:7d:0b:64:3d:82:b9:f0:53:a9:ee:39:a0:a0:ad:a0:01:
         1e:c2:e4:12:aa:f2:99:a5:41:10:67:de:a1:ec:25:62:87:2e:
         f0:f8:2e:d0:d8:92:5f:f6:2b:ec:20:9e:c1:85:e4:01:73:19:
         fc:e6:e5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org