Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/0/323830343a383331383a3a2f34382d3438203d3e20323732313736.roa
File:                     323830343a383331383a3a2f34382d3438203d3e20323732313736.roa (raw, json)
Hash identifier:          AxKWY774qmGO9lPQtp8kVStxRrUJxQob6d/fYaxvV9M=
Subject key identifier:   D2:7C:44:DB:C2:E3:B6:B6:29:AE:6E:11:46:DB:FC:AC:C8:AB:CA:37
Certificate issuer:       /CN=16D16B20BBB43E296EB1AC368C83824C9BB0A64B
Certificate serial:       6EAC0DD7906B56FC870BB012D986015BBAC26F1B
Authority key identifier: 16:D1:6B:20:BB:B4:3E:29:6E:B1:AC:36:8C:83:82:4C:9B:B0:A6:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16D16B20BBB43E296EB1AC368C83824C9BB0A64B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/0/323830343a383331383a3a2f34382d3438203d3e20323732313736.roa
Signing time:             Mon 04 Mar 2024 11:31:09 +0000
ROA not before:           Mon 04 Mar 2024 11:26:09 +0000
ROA not after:            Mon 03 Mar 2025 11:31:09 +0000
asID:                     272176
IP address blocks:        2804:8318::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ac:0d:d7:90:6b:56:fc:87:0b:b0:12:d9:86:01:5b:ba:c2:6f:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16D16B20BBB43E296EB1AC368C83824C9BB0A64B
        Validity
            Not Before: Mar  4 11:26:09 2024 GMT
            Not After : Mar  3 11:31:09 2025 GMT
        Subject: CN=D27C44DBC2E3B6B629AE6E1146DBFCACC8ABCA37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:37:6d:0d:bc:d3:55:fb:1d:ff:51:ba:c7:5d:
                    ef:6b:19:67:3a:a0:4e:95:c3:68:ee:13:48:4f:6f:
                    bd:1b:4e:3f:35:0d:60:c0:ab:01:00:e9:0b:13:ce:
                    3f:c1:75:98:89:a1:35:5c:4c:e9:52:e5:a2:57:6e:
                    04:b0:e3:4c:25:da:46:ed:20:5e:70:f6:1d:a8:82:
                    00:aa:ec:6b:8f:f2:18:92:cb:0e:e2:2e:f4:c3:19:
                    a1:93:be:8e:b5:80:7c:0b:0d:c9:fa:ae:6d:b6:b7:
                    43:c9:f2:3c:69:bd:fc:34:4c:f0:ec:54:97:c3:65:
                    63:1d:a4:e1:6e:c0:62:a8:d3:3d:b2:ce:bd:67:4d:
                    7f:3a:ca:f2:65:f4:22:8b:75:09:c3:ac:7f:06:9f:
                    60:a7:5d:85:85:eb:55:fc:ac:31:2c:c5:74:df:d3:
                    83:e4:49:9f:90:70:79:4b:87:ac:69:0f:c0:dd:8e:
                    89:20:d1:c9:24:86:ee:0d:9b:ec:10:59:19:e6:5f:
                    c0:0e:e7:6a:0d:27:c8:27:f5:04:9b:3a:08:de:0c:
                    74:51:1d:72:45:2f:5c:a7:a8:15:a6:54:ff:c0:49:
                    fb:62:8c:cc:6b:76:29:d5:f6:f9:99:f3:a9:4f:cd:
                    39:c4:4a:e5:11:6d:ab:40:48:6b:98:86:5d:e4:5f:
                    dc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:7C:44:DB:C2:E3:B6:B6:29:AE:6E:11:46:DB:FC:AC:C8:AB:CA:37
            X509v3 Authority Key Identifier:
                keyid:16:D1:6B:20:BB:B4:3E:29:6E:B1:AC:36:8C:83:82:4C:9B:B0:A6:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/0/16D16B20BBB43E296EB1AC368C83824C9BB0A64B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16D16B20BBB43E296EB1AC368C83824C9BB0A64B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/0/323830343a383331383a3a2f34382d3438203d3e20323732313736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8318::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:86:4d:93:58:c8:a3:55:de:36:4a:f6:e5:88:65:31:97:d7:
         17:9c:25:60:e7:2e:ff:73:dd:64:ca:55:2b:8b:d7:ce:c9:fc:
         15:05:e4:42:95:84:68:a2:a1:d6:ab:c5:44:94:6c:8a:dc:8e:
         1e:5e:99:45:04:f7:00:57:ee:f4:1f:45:4d:7c:9e:7f:42:d4:
         25:aa:0f:18:13:49:74:28:f8:6d:e7:5a:eb:ab:c3:20:d9:86:
         dc:36:cf:ac:86:e7:e3:0d:a3:b6:71:ab:a8:ea:35:eb:54:18:
         e7:5d:dd:90:bc:45:ab:70:3a:b7:1a:10:09:36:38:f3:b3:8f:
         4e:ee:09:55:db:2f:18:fe:3d:9a:db:73:84:f4:ec:87:4d:2e:
         27:62:78:c1:2b:96:50:c9:e2:ad:8a:5f:91:1a:d6:26:df:2a:
         d8:74:38:eb:79:57:88:24:74:ba:ae:b2:99:3b:8b:0a:68:0a:
         20:cc:ad:f7:de:12:da:0b:c6:b0:92:dd:bf:20:f8:65:ae:8b:
         8d:55:c0:31:2c:d6:af:5f:67:2d:e8:bc:17:05:ed:c1:b9:cb:
         2a:2d:99:0a:b3:37:5a:c5:42:cf:17:b2:53:ed:27:db:c7:fe:
         68:7d:c3:07:fe:92:eb:a2:5c:21:54:71:57:48:55:ec:43:4d:
         33:d9:3a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org