Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/2/323830343a356636343a3a2f33322d313236203d3e20323639303936.roa
File:                     323830343a356636343a3a2f33322d313236203d3e20323639303936.roa (raw, json)
Hash identifier:          KIN5J8Aas8sJWfAnyPVC0egw3YnYbDbv2DBkVIA8PJs=
Subject key identifier:   35:B8:B5:91:5D:9A:83:26:1C:E6:43:2A:3F:F4:EA:DE:1A:29:39:3C
Certificate issuer:       /CN=C1242EF4879B322A13C9D9D398E3937FA62B255E
Certificate serial:       35ABB94BF3C2A038522E21A4EBE2ED68415EB17F
Authority key identifier: C1:24:2E:F4:87:9B:32:2A:13:C9:D9:D3:98:E3:93:7F:A6:2B:25:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1242EF4879B322A13C9D9D398E3937FA62B255E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/2/323830343a356636343a3a2f33322d313236203d3e20323639303936.roa
Signing time:             Thu 04 Apr 2024 07:18:49 +0000
ROA not before:           Thu 04 Apr 2024 07:13:49 +0000
ROA not after:            Thu 03 Apr 2025 07:18:49 +0000
asID:                     269096
IP address blocks:        2804:5f64::/32 maxlen: 126

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ab:b9:4b:f3:c2:a0:38:52:2e:21:a4:eb:e2:ed:68:41:5e:b1:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1242EF4879B322A13C9D9D398E3937FA62B255E
        Validity
            Not Before: Apr  4 07:13:49 2024 GMT
            Not After : Apr  3 07:18:49 2025 GMT
        Subject: CN=35B8B5915D9A83261CE6432A3FF4EADE1A29393C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2d:79:4d:b3:bb:ca:ba:b4:75:6d:a0:46:2e:
                    b8:71:24:f0:5c:ac:42:6e:c7:8b:a2:23:b1:75:59:
                    8f:09:9f:ca:3d:02:20:ac:18:9e:07:19:2a:90:7d:
                    a9:89:17:3c:78:1e:a4:d8:45:ef:c9:ad:eb:f4:15:
                    ea:f6:78:f0:de:8d:17:d6:cc:cd:fa:5d:07:ed:6d:
                    85:4f:e1:ae:2a:65:62:3b:2d:ba:20:09:17:3c:f0:
                    24:b4:11:d3:d0:d8:b9:de:2a:11:f1:28:ca:dd:b7:
                    24:7c:0d:d5:22:fc:87:17:c5:32:07:2f:ee:42:b2:
                    f3:af:46:f5:47:c9:51:5a:8c:de:fe:80:f0:80:b1:
                    f8:6f:87:87:18:d7:1f:9f:a4:65:72:ba:9f:2a:d9:
                    b5:11:f3:a9:ff:8f:25:a6:ef:2a:cf:06:43:14:37:
                    4c:bc:76:27:22:70:f8:1e:77:ed:ad:f2:93:15:41:
                    8b:21:7f:ef:4b:63:e2:0e:de:7b:7c:36:8b:8b:3e:
                    73:52:e7:31:51:80:3f:00:da:fc:7a:aa:1e:07:39:
                    d9:7a:89:91:14:23:f4:2d:09:98:ae:0e:a9:2f:f2:
                    4b:1d:7c:28:ec:b8:43:a0:7a:86:9b:b1:2e:d0:fa:
                    c1:9e:10:d5:32:4b:a7:24:1d:ab:f4:54:8b:33:06:
                    32:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B8:B5:91:5D:9A:83:26:1C:E6:43:2A:3F:F4:EA:DE:1A:29:39:3C
            X509v3 Authority Key Identifier:
                keyid:C1:24:2E:F4:87:9B:32:2A:13:C9:D9:D3:98:E3:93:7F:A6:2B:25:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/2/C1242EF4879B322A13C9D9D398E3937FA62B255E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1242EF4879B322A13C9D9D398E3937FA62B255E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/2/323830343a356636343a3a2f33322d313236203d3e20323639303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f64::/32

    Signature Algorithm: sha256WithRSAEncryption
         cd:f5:6e:c8:52:8a:8f:26:0a:fe:da:e8:56:f8:96:a4:98:66:
         c1:bd:b6:e7:a2:e3:f9:7e:59:c5:84:fc:6f:d1:63:62:85:63:
         64:b4:54:b0:60:e7:7a:21:d1:57:1b:45:82:9d:14:02:4f:8f:
         b7:30:b3:a8:1e:54:98:ff:01:87:ea:18:31:ae:50:e4:a4:3c:
         2d:4f:b0:de:78:9a:95:a9:ac:bd:81:92:0b:56:20:25:bd:7e:
         e1:80:6b:74:cc:6b:56:84:29:38:44:6e:55:81:08:87:27:f7:
         e8:04:0b:21:bf:1b:b0:9f:d3:28:cd:ff:48:94:33:f6:4e:6f:
         e9:eb:b3:a3:19:43:54:52:c6:8f:38:99:a4:83:66:68:41:45:
         fc:8b:ac:43:16:74:96:2f:0e:40:d7:00:4e:2b:d4:58:1a:1e:
         cb:95:a3:b6:76:a8:68:17:b8:21:11:f0:dd:be:f9:38:c1:84:
         8f:cc:fb:bb:b0:e3:ac:b3:72:45:2c:b8:b9:b1:41:ae:47:7d:
         b3:92:d5:ff:ec:66:92:6d:44:0c:40:82:c6:fb:72:54:fb:77:
         12:d4:03:b3:b0:dc:5e:28:b7:01:60:06:61:04:8e:84:a4:c4:
         54:cf:67:04:7b:25:ca:d9:89:44:98:44:ee:dc:89:41:dc:26:
         71:6a:37:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:36 2024 by rpki-client on console-ams.rpki-client.org