Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/0/323830343a353537343a3a2f33322d3332203d3e20323637393336.roa
File:                     323830343a353537343a3a2f33322d3332203d3e20323637393336.roa (raw, json)
Hash identifier:          yiKT//kcIAEvuR9rEhFCxNj/QnXrRa4pObVa74lVZA4=
Subject key identifier:   36:BE:7D:4E:3E:3B:A0:4E:62:E9:70:72:D7:A3:54:E8:90:6B:89:1E
Certificate issuer:       /CN=60EFEDD12BA8B61A14A1F150E68BA1BF6F8A199E
Certificate serial:       314C42C71462FF4CE2F8360E1F620D2A40EF4FCE
Authority key identifier: 60:EF:ED:D1:2B:A8:B6:1A:14:A1:F1:50:E6:8B:A1:BF:6F:8A:19:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60EFEDD12BA8B61A14A1F150E68BA1BF6F8A199E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/0/323830343a353537343a3a2f33322d3332203d3e20323637393336.roa
Signing time:             Tue 12 Mar 2024 14:37:37 +0000
ROA not before:           Tue 12 Mar 2024 14:32:37 +0000
ROA not after:            Tue 11 Mar 2025 14:37:37 +0000
asID:                     267936
IP address blocks:        2804:5574::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:4c:42:c7:14:62:ff:4c:e2:f8:36:0e:1f:62:0d:2a:40:ef:4f:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60EFEDD12BA8B61A14A1F150E68BA1BF6F8A199E
        Validity
            Not Before: Mar 12 14:32:37 2024 GMT
            Not After : Mar 11 14:37:37 2025 GMT
        Subject: CN=36BE7D4E3E3BA04E62E97072D7A354E8906B891E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ef:1f:3b:13:68:c7:bd:29:04:60:9b:c8:e7:
                    9d:bc:32:8d:8d:ed:7a:2d:11:bb:ca:07:a2:03:bf:
                    33:15:43:1c:3b:fc:20:0e:e7:38:2b:19:e2:e1:5f:
                    1e:2e:1b:51:d4:94:6e:28:c8:59:ba:0d:53:28:c5:
                    c7:79:f8:9b:ed:a2:b9:c2:2f:6a:5e:76:81:53:a8:
                    72:d9:94:8f:2a:16:33:58:db:8b:b1:d5:cb:f0:9b:
                    7b:a2:d2:ce:42:ff:51:05:dc:b2:08:65:42:5c:ec:
                    4a:fe:2d:15:9b:60:cf:ee:7d:cf:8c:8d:0e:f3:c6:
                    70:c1:60:5b:aa:80:c2:6f:64:7a:d9:4a:48:16:2f:
                    7f:86:66:aa:07:2a:9a:a0:ce:03:a5:5d:ba:97:76:
                    28:57:0c:ee:cb:aa:75:b1:46:4f:51:c9:bf:ff:ca:
                    03:4e:0f:c9:9d:f8:22:0d:9e:62:a8:8a:6b:31:a5:
                    0c:69:29:a6:a5:7d:c4:17:50:b2:19:e8:04:c9:51:
                    02:82:e6:0e:58:59:4d:87:d1:db:66:39:c0:5c:5f:
                    1d:4d:60:3f:39:28:bb:d7:93:13:2d:0c:a7:d6:4a:
                    e9:17:2d:26:b1:9e:8b:f7:9c:7a:03:71:9d:a6:75:
                    7b:32:da:30:72:b5:87:b2:5f:bd:af:84:d8:bc:3c:
                    0f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:BE:7D:4E:3E:3B:A0:4E:62:E9:70:72:D7:A3:54:E8:90:6B:89:1E
            X509v3 Authority Key Identifier:
                keyid:60:EF:ED:D1:2B:A8:B6:1A:14:A1:F1:50:E6:8B:A1:BF:6F:8A:19:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/0/60EFEDD12BA8B61A14A1F150E68BA1BF6F8A199E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60EFEDD12BA8B61A14A1F150E68BA1BF6F8A199E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/0/323830343a353537343a3a2f33322d3332203d3e20323637393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5574::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:ea:e3:52:59:55:e5:3d:1f:5f:9e:6b:09:f4:86:4a:d5:49:
         8f:1f:90:14:8e:31:6b:90:c1:4a:d1:14:9a:39:3f:a3:7f:44:
         6f:31:bb:37:cc:67:db:82:d7:4e:8b:ba:dd:9d:8e:af:41:f2:
         8a:91:50:84:56:dc:ac:d0:76:e9:9c:8e:81:f0:76:cf:41:2d:
         d7:2f:d1:08:4e:db:b1:48:bb:1b:20:b3:a9:86:38:90:e7:30:
         1c:a0:5e:1d:86:9d:d2:13:f1:18:0b:f0:21:0f:ce:2b:00:8b:
         86:61:c8:47:51:a9:6c:b2:b7:9a:d8:e1:9d:c2:f2:e0:a5:56:
         03:0d:fc:08:e5:35:cb:7b:7b:53:4a:c8:9c:c8:bc:0c:57:2b:
         bd:24:c2:d3:c4:eb:3b:8f:5d:5e:3c:e3:e5:30:55:86:4b:32:
         39:75:44:31:f4:57:9a:18:d6:55:5f:3b:03:bb:6a:a4:20:6d:
         74:d1:e7:36:32:1a:9a:06:94:51:4d:4a:90:e6:26:d1:7d:be:
         22:3e:3f:59:85:92:d0:10:38:41:81:49:d8:e7:8b:25:2f:78:
         31:fc:9b:d2:45:d5:1b:aa:38:40:64:c5:6a:67:4e:7d:b1:29:
         51:36:a6:45:b3:e6:34:52:58:76:43:aa:b5:a5:95:3b:ed:4c:
         0b:47:85:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org