Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/323830343a343365303a3a2f33362d3336203d3e20323637353936.roa
File:                     323830343a343365303a3a2f33362d3336203d3e20323637353936.roa (raw, json)
Hash identifier:          hNzKfPSLKMFcMv1JmuTdVBYKDEcg2EK0iBvDr21xh8U=
Subject key identifier:   68:64:E4:CA:A5:FB:36:4A:11:68:92:1A:3B:82:F6:36:CE:B1:43:F4
Certificate issuer:       /CN=61FAAA30490638B45CAC59240695D24F3F9F5A15
Certificate serial:       1A6F12582273DDE27C030A0B9AA677F599E1111A
Authority key identifier: 61:FA:AA:30:49:06:38:B4:5C:AC:59:24:06:95:D2:4F:3F:9F:5A:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61FAAA30490638B45CAC59240695D24F3F9F5A15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/323830343a343365303a3a2f33362d3336203d3e20323637353936.roa
Signing time:             Wed 29 Mar 2023 21:40:41 +0000
ROA not before:           Wed 29 Mar 2023 21:35:41 +0000
ROA not after:            Wed 27 Mar 2024 21:40:41 +0000
asID:                     267596
IP address blocks:        2804:43e0::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:6f:12:58:22:73:dd:e2:7c:03:0a:0b:9a:a6:77:f5:99:e1:11:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61FAAA30490638B45CAC59240695D24F3F9F5A15
        Validity
            Not Before: Mar 29 21:35:41 2023 GMT
            Not After : Mar 27 21:40:41 2024 GMT
        Subject: CN=6864E4CAA5FB364A1168921A3B82F636CEB143F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:32:e9:8e:e8:2e:fb:21:d7:c7:39:f9:d7:74:
                    8d:0f:fb:af:58:a6:37:6d:86:90:fa:d9:df:b7:1c:
                    1b:dd:a3:a8:fb:02:22:a3:e3:57:11:a8:1d:69:67:
                    ed:c8:d9:3e:90:6e:ae:2f:d3:f6:e8:a3:a7:97:08:
                    28:ec:df:86:32:09:cd:64:3e:64:8a:9f:c3:f1:08:
                    62:77:b3:1d:1f:34:7e:e3:94:17:47:b2:c8:c6:c4:
                    04:76:4e:d2:ab:28:07:1f:ca:0b:07:ab:e8:65:c0:
                    4a:bd:d0:59:a3:ef:d0:52:cc:47:d7:43:bf:c3:77:
                    c5:25:8d:a1:89:86:be:86:b0:14:60:64:19:bd:5d:
                    a3:be:15:6d:49:78:c8:84:11:e2:ac:d4:cc:9b:34:
                    06:58:fd:04:50:44:8c:b7:3e:41:9f:74:0f:d1:ce:
                    0a:67:9d:95:05:d2:ca:8d:1f:2f:86:c3:0d:25:b5:
                    e4:05:8c:50:3f:ef:ae:55:2a:3e:5b:a1:07:5a:9d:
                    9a:ce:ca:05:96:af:fc:ed:71:4d:77:3a:83:a0:d7:
                    a4:a1:0c:ac:2a:e6:88:c7:32:17:eb:60:3f:70:2d:
                    47:2e:a3:cc:49:8a:19:24:b3:ce:08:ec:02:a7:b7:
                    e6:09:28:23:f6:2a:9d:f2:f3:c7:af:5d:90:64:62:
                    9a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:64:E4:CA:A5:FB:36:4A:11:68:92:1A:3B:82:F6:36:CE:B1:43:F4
            X509v3 Authority Key Identifier:
                keyid:61:FA:AA:30:49:06:38:B4:5C:AC:59:24:06:95:D2:4F:3F:9F:5A:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/61FAAA30490638B45CAC59240695D24F3F9F5A15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61FAAA30490638B45CAC59240695D24F3F9F5A15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/323830343a343365303a3a2f33362d3336203d3e20323637353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43e0::/36

    Signature Algorithm: sha256WithRSAEncryption
         1f:3d:60:fd:05:c0:be:5d:e6:37:9a:81:eb:3a:a7:15:88:e3:
         b4:24:16:0b:58:1e:f5:3e:d3:eb:fd:9d:a8:4d:3f:d5:9a:c9:
         1c:4d:ab:d4:d3:3e:e0:60:b5:36:cd:3b:8c:92:5f:cb:6f:29:
         91:29:50:b4:34:56:4d:d9:f3:36:7d:39:8f:ec:c0:05:ba:d0:
         d7:cb:94:2b:71:f2:70:08:64:24:2c:90:97:79:2c:23:ab:d5:
         40:7f:40:c0:bf:e5:d0:55:cb:80:a5:75:28:5b:8f:e9:df:7c:
         cd:b6:bb:0b:ab:eb:3a:36:2b:85:3e:fe:35:0b:2e:5b:84:d1:
         a5:75:3f:ab:0f:c8:5c:c8:c4:92:98:1e:ae:34:47:81:d3:4d:
         9d:27:9e:05:5d:d0:78:1d:10:d0:00:87:16:74:73:71:56:24:
         12:38:05:ca:53:e0:5d:9a:0b:57:6b:b2:aa:f9:06:58:cc:4f:
         f5:11:0a:d1:80:0e:b7:1a:56:8f:5d:00:2b:c9:a8:6c:38:83:
         d3:a3:0c:d8:c1:00:d6:b5:76:ae:03:a3:d9:d6:1b:fc:80:26:
         54:85:ec:ce:00:8b:f7:37:cd:bb:8b:92:1b:ed:07:0e:20:45:
         e2:6a:83:ec:a8:31:90:3a:ff:fe:df:87:68:bb:2c:32:a9:7f:
         ee:f7:3b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org