Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GwFgR3HsWbcFw18xEHxDvvRi75UoJVJpD7AQqoh965et/0/323830343a326437343a3a2f33322d3438203d3e20323635323833.roa
File:                     323830343a326437343a3a2f33322d3438203d3e20323635323833.roa (raw, json)
Hash identifier:          z0qv8QQOwhkZOGQswe70db0RzwgMZ6jTgEaVl6SDUF8=
Subject key identifier:   73:DB:35:31:58:C3:4E:91:9A:75:5B:5F:80:9B:18:0C:CD:29:EB:F6
Certificate issuer:       /CN=2A6AE5AA7A06F4F6C2A9DEEF94142DACD600F6CD
Certificate serial:       6F22D9B1CA1B69B00E3DE7911B42F77F1B9C3A16
Authority key identifier: 2A:6A:E5:AA:7A:06:F4:F6:C2:A9:DE:EF:94:14:2D:AC:D6:00:F6:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A6AE5AA7A06F4F6C2A9DEEF94142DACD600F6CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GwFgR3HsWbcFw18xEHxDvvRi75UoJVJpD7AQqoh965et/0/323830343a326437343a3a2f33322d3438203d3e20323635323833.roa
Signing time:             Fri 24 Feb 2023 19:58:00 +0000
ROA not before:           Fri 24 Feb 2023 19:53:00 +0000
ROA not after:            Fri 23 Feb 2024 19:58:00 +0000
asID:                     265283
IP address blocks:        2804:2d74::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:22:d9:b1:ca:1b:69:b0:0e:3d:e7:91:1b:42:f7:7f:1b:9c:3a:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A6AE5AA7A06F4F6C2A9DEEF94142DACD600F6CD
        Validity
            Not Before: Feb 24 19:53:00 2023 GMT
            Not After : Feb 23 19:58:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:49:4b:0a:88:8f:1c:c9:de:c2:1b:a2:b8:fe:
                    6f:e5:ed:76:5c:df:e3:4f:a8:ad:3a:bf:68:f5:ec:
                    73:2a:c8:ab:9b:aa:bb:02:06:91:d1:48:83:a5:97:
                    b3:be:37:70:4d:b3:f8:7d:dd:18:fc:d8:db:f5:6c:
                    27:a1:2c:8c:30:77:20:de:95:fd:c0:84:2a:d4:00:
                    52:21:1b:3c:bc:88:75:c4:1b:86:70:a6:ed:09:38:
                    f4:a5:e1:ad:44:77:35:b2:71:ff:01:ba:fc:f9:93:
                    32:43:16:4b:97:e4:59:2b:bf:2a:51:24:36:4a:46:
                    b1:4f:88:63:43:b2:73:a5:f6:48:45:e2:77:49:25:
                    05:e5:a5:74:fa:aa:94:cf:a1:fd:1c:95:48:c5:33:
                    2e:e1:e0:ba:4c:5f:4b:f1:ac:a8:04:37:11:3d:86:
                    48:e9:de:1b:ec:42:ff:d5:be:3b:7c:60:cc:13:af:
                    03:3b:9b:00:4d:6c:f2:da:6e:9d:11:31:35:fb:69:
                    02:eb:9e:25:bf:c2:c4:a2:5a:32:56:bb:13:13:b2:
                    92:30:fe:61:cc:0b:b5:37:36:50:1c:4a:65:da:ed:
                    a4:38:e2:b3:b0:3f:b4:63:b1:75:2f:3a:92:25:f9:
                    c3:e6:ab:7a:ee:a8:97:40:da:47:de:91:ed:c3:44:
                    29:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DB:35:31:58:C3:4E:91:9A:75:5B:5F:80:9B:18:0C:CD:29:EB:F6
            X509v3 Authority Key Identifier:
                keyid:2A:6A:E5:AA:7A:06:F4:F6:C2:A9:DE:EF:94:14:2D:AC:D6:00:F6:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GwFgR3HsWbcFw18xEHxDvvRi75UoJVJpD7AQqoh965et/0/2A6AE5AA7A06F4F6C2A9DEEF94142DACD600F6CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A6AE5AA7A06F4F6C2A9DEEF94142DACD600F6CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GwFgR3HsWbcFw18xEHxDvvRi75UoJVJpD7AQqoh965et/0/323830343a326437343a3a2f33322d3438203d3e20323635323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d74::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:ae:9f:41:64:31:bb:77:09:18:7c:38:45:8b:9c:48:29:88:
         ae:6d:45:0d:83:25:2e:ad:e5:3b:d5:cd:ed:59:0d:cd:a3:94:
         23:18:a6:53:d0:db:b1:50:8e:d4:96:9f:e1:d3:62:3a:b0:f1:
         26:23:78:f2:8c:cb:53:c2:03:14:8c:82:9d:2a:da:c4:5c:70:
         06:ec:f4:23:d4:dd:ef:1c:67:dd:61:cc:bc:d1:41:e1:5c:56:
         94:6e:ac:f6:8d:a2:52:bf:04:ab:77:02:e5:7c:b1:65:41:9d:
         ef:15:9e:e5:ab:d0:a1:2e:07:8d:6c:2c:9e:71:52:88:50:2b:
         b0:96:84:2a:fb:49:99:92:5b:5d:55:67:fe:a3:d6:d8:61:c0:
         89:5a:39:3e:05:f8:48:bc:3b:71:9f:14:86:c4:d2:79:c5:08:
         55:61:fa:97:a8:4a:18:fa:bc:4e:58:ee:c7:ad:60:e2:13:c7:
         81:d5:3e:7a:c6:5e:76:be:54:1f:ed:17:ab:c1:54:a0:39:44:
         e7:b5:bb:40:8d:60:2d:4a:ab:49:59:f1:2a:9b:d0:b3:fc:d5:
         5b:a4:14:66:78:0b:2e:02:45:af:22:1c:33:ac:e0:c7:a6:6c:
         55:2f:b1:42:1d:05:e7:e6:2a:b3:f3:97:46:6e:de:f0:04:61:
         0b:f4:89:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org