Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5kVn2mnGdMKQ6nnXzhzMD1XQrtYQpSp6icQKRMddxvQ/0/323830343a383036303a3a2f33322d3438203d3e203631363036.roa
File:                     323830343a383036303a3a2f33322d3438203d3e203631363036.roa (raw, json)
Hash identifier:          UQ9cuzbdYx9AoLmTguOmWGCVdiw3sirscu2vOeaLClU=
Subject key identifier:   BA:61:A7:13:D7:14:27:BD:89:E5:D4:B5:C1:5F:41:CC:F8:2C:3E:7A
Certificate issuer:       /CN=B202DCB80486797BDD89DC1E0680FFE990B61BDA
Certificate serial:       4897899C6F99BEB5AE26107121B005B8EC67DC03
Authority key identifier: B2:02:DC:B8:04:86:79:7B:DD:89:DC:1E:06:80:FF:E9:90:B6:1B:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B202DCB80486797BDD89DC1E0680FFE990B61BDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5kVn2mnGdMKQ6nnXzhzMD1XQrtYQpSp6icQKRMddxvQ/0/323830343a383036303a3a2f33322d3438203d3e203631363036.roa
Signing time:             Wed 17 May 2023 17:28:00 +0000
ROA not before:           Wed 17 May 2023 17:23:00 +0000
ROA not after:            Wed 15 May 2024 17:28:00 +0000
asID:                     61606
IP address blocks:        2804:8060::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:97:89:9c:6f:99:be:b5:ae:26:10:71:21:b0:05:b8:ec:67:dc:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B202DCB80486797BDD89DC1E0680FFE990B61BDA
        Validity
            Not Before: May 17 17:23:00 2023 GMT
            Not After : May 15 17:28:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:36:13:1b:7c:38:dc:ea:c0:74:b0:7d:46:76:
                    00:68:66:71:39:59:a8:a1:d6:ad:67:ec:a9:f1:c3:
                    2d:0e:bb:fb:ea:1a:1c:03:19:35:71:62:3b:e5:1e:
                    fb:9e:d1:98:2b:8f:02:48:b1:6a:e6:ca:29:ae:0d:
                    61:80:2a:f3:60:03:b4:00:05:ca:b7:19:15:2d:99:
                    1b:b6:96:a4:7b:76:d9:05:4f:ad:b5:a1:be:5c:9b:
                    46:76:26:4d:21:6a:e5:70:04:fc:a6:a7:72:06:c2:
                    7f:39:64:ea:4f:c1:08:b3:c3:da:74:73:bc:a1:15:
                    df:3c:47:0c:74:35:df:f8:40:89:30:e0:17:9c:92:
                    8b:51:2a:0c:2b:b4:a0:a7:a5:1a:3b:07:1c:27:47:
                    0e:c9:e0:4c:75:39:79:8b:6c:94:9f:0c:ca:2c:c2:
                    4a:72:9d:64:5f:4c:0c:a2:66:35:49:bc:a9:c2:1b:
                    88:bd:7b:9e:80:50:86:7a:0a:27:df:19:01:77:e4:
                    4d:17:9e:f5:be:63:b9:1c:30:cc:ba:38:a1:a0:7a:
                    95:8a:8e:81:1a:d7:0b:f9:2e:b9:2d:c1:b9:73:9c:
                    17:05:1d:8a:73:87:47:63:e0:f5:e3:d1:91:42:92:
                    4b:ed:87:a9:35:8c:dc:df:9f:58:43:ab:c3:7a:0d:
                    17:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:61:A7:13:D7:14:27:BD:89:E5:D4:B5:C1:5F:41:CC:F8:2C:3E:7A
            X509v3 Authority Key Identifier:
                keyid:B2:02:DC:B8:04:86:79:7B:DD:89:DC:1E:06:80:FF:E9:90:B6:1B:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5kVn2mnGdMKQ6nnXzhzMD1XQrtYQpSp6icQKRMddxvQ/0/B202DCB80486797BDD89DC1E0680FFE990B61BDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B202DCB80486797BDD89DC1E0680FFE990B61BDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5kVn2mnGdMKQ6nnXzhzMD1XQrtYQpSp6icQKRMddxvQ/0/323830343a383036303a3a2f33322d3438203d3e203631363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8060::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:cb:b6:ff:b9:00:8b:93:73:a3:5a:ff:6a:37:aa:1c:9f:d5:
         34:da:1b:ae:2a:aa:01:bf:21:2f:40:ed:d9:9c:2f:28:b5:cc:
         c5:86:f5:66:d0:26:fa:36:81:98:4d:d7:8f:65:0e:6f:2e:77:
         f0:80:9b:f6:88:75:3f:63:80:c1:b0:47:b8:d1:5e:2f:b1:28:
         25:e1:d5:5b:15:73:7d:bb:3f:13:c8:e3:8e:3e:34:69:da:cf:
         6d:47:33:bd:17:5c:67:1d:c5:73:60:ba:21:cc:34:42:f0:84:
         50:d8:6c:3e:d0:6d:37:d8:61:86:da:5e:bc:06:b2:2e:f4:a6:
         66:44:15:b1:60:a7:53:55:2b:27:9b:47:ce:57:42:70:9f:45:
         5c:7c:7e:d6:da:36:79:b7:5c:18:fa:88:f3:13:4f:6b:79:8c:
         d3:52:3b:98:42:ae:ae:56:20:44:01:02:d3:c8:6f:9b:b2:cf:
         7a:f3:24:78:83:89:b6:11:aa:cd:b5:a5:74:8b:3d:39:1b:74:
         c6:70:c3:a0:99:59:de:ac:bb:0e:3f:6b:29:f2:20:29:be:c9:
         37:04:3f:17:3b:cd:f5:f7:de:61:b4:8b:2f:53:2c:63:e3:10:
         c5:fe:06:7c:88:d0:ac:d2:6d:c7:f6:4b:7c:45:e6:47:43:d0:
         68:84:ad:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org