Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/1/323830343a363933303a3a2f33322d313238203d3e20323730323534.roa
File:                     323830343a363933303a3a2f33322d313238203d3e20323730323534.roa (raw, json)
Hash identifier:          Q7cDh/GVEIBpY6uTyO67czHQMQ/nzlcpHylzxGR1FOY=
Subject key identifier:   D0:47:25:C5:DE:BB:2B:E2:0E:1A:BE:01:7A:0C:67:48:62:1B:BB:5C
Certificate issuer:       /CN=02A652AC86BFFF5E3B321D94C1C14F5AF80CE1B3
Certificate serial:       0CF358B93436722E323FD39F4EBB6671C9D6D736
Authority key identifier: 02:A6:52:AC:86:BF:FF:5E:3B:32:1D:94:C1:C1:4F:5A:F8:0C:E1:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/02A652AC86BFFF5E3B321D94C1C14F5AF80CE1B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/1/323830343a363933303a3a2f33322d313238203d3e20323730323534.roa
Signing time:             Tue 21 Nov 2023 03:21:06 +0000
ROA not before:           Tue 21 Nov 2023 03:16:06 +0000
ROA not after:            Tue 19 Nov 2024 03:21:06 +0000
asID:                     270254
IP address blocks:        2804:6930::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f3:58:b9:34:36:72:2e:32:3f:d3:9f:4e:bb:66:71:c9:d6:d7:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02A652AC86BFFF5E3B321D94C1C14F5AF80CE1B3
        Validity
            Not Before: Nov 21 03:16:06 2023 GMT
            Not After : Nov 19 03:21:06 2024 GMT
        Subject: CN=D04725C5DEBB2BE20E1ABE017A0C6748621BBB5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e8:2a:98:6c:dc:46:99:3b:9b:dd:00:5a:d8:
                    82:54:25:f2:1e:69:95:bd:ba:59:57:ca:bf:01:5c:
                    3a:8f:21:8f:60:05:47:e6:f5:33:4a:6a:d0:e2:5e:
                    26:e0:06:11:eb:d9:2d:0c:c5:c7:cb:25:dd:92:80:
                    a7:bd:a2:54:e4:48:9c:37:7d:2a:02:7f:0e:dd:57:
                    3a:ed:cf:db:1a:1f:b7:ab:b0:c4:b4:3c:e9:44:c4:
                    c8:f0:12:ec:36:e3:0c:ec:d0:2d:81:68:9c:2d:b6:
                    85:e8:3a:f8:77:28:0d:38:ff:45:78:a1:14:e2:fe:
                    88:30:6e:2c:c5:d1:5f:b4:6f:31:69:8e:8a:0f:6e:
                    37:15:8c:7b:bb:ad:cf:d5:1f:d9:10:42:28:21:bf:
                    91:2d:a9:ed:f4:a7:a0:5b:3a:a2:41:5b:77:78:24:
                    d4:18:ad:7b:f7:48:e1:b8:27:32:e0:cb:8d:79:59:
                    1e:c5:8d:6a:f6:e8:28:23:12:f7:82:66:48:dd:e7:
                    61:c4:b0:60:28:63:c7:0c:d1:ea:cd:c2:3c:55:78:
                    ec:0d:2e:6a:19:d7:c2:ac:ce:d0:6e:61:51:dd:5e:
                    72:4b:ef:25:6c:a0:ee:16:00:1f:dd:d5:96:52:24:
                    fd:6b:23:50:cf:ec:d6:49:c8:36:a1:1a:71:e3:82:
                    0a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:47:25:C5:DE:BB:2B:E2:0E:1A:BE:01:7A:0C:67:48:62:1B:BB:5C
            X509v3 Authority Key Identifier:
                keyid:02:A6:52:AC:86:BF:FF:5E:3B:32:1D:94:C1:C1:4F:5A:F8:0C:E1:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/1/02A652AC86BFFF5E3B321D94C1C14F5AF80CE1B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/02A652AC86BFFF5E3B321D94C1C14F5AF80CE1B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/1/323830343a363933303a3a2f33322d313238203d3e20323730323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6930::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:2e:d8:8a:62:46:0a:39:36:ad:c6:87:aa:f8:4a:43:65:28:
         bd:94:c6:88:58:34:3b:cf:e3:d1:d3:ff:5b:18:cc:96:13:5f:
         8e:12:1d:c4:45:19:b0:78:ec:13:c5:93:b6:c8:85:4c:56:6e:
         c3:31:23:04:a1:be:32:81:24:c0:00:fb:22:41:05:18:43:51:
         82:90:6d:44:20:6c:22:28:64:ad:39:95:63:75:2b:b2:3d:e4:
         46:3a:4f:34:8d:b3:be:f2:e6:e4:bf:a6:ef:bd:8d:8f:f1:07:
         52:f0:3c:05:9b:25:84:5e:90:d1:e4:4e:04:0d:2f:0d:bf:e0:
         64:fe:f4:39:48:d1:bc:02:e5:98:27:f7:1d:78:4c:ac:67:8c:
         ec:78:c2:5c:85:ce:35:d2:70:46:81:ec:b0:4a:a1:ce:72:b4:
         7d:08:17:b4:67:36:ed:58:6e:c8:a3:85:8e:e4:97:cf:36:0b:
         c9:92:ce:d4:3f:22:c1:c6:de:98:3e:b7:4b:78:35:7c:57:ae:
         a5:9e:b5:a3:15:36:b9:85:6f:42:a3:95:75:b8:54:76:5b:f9:
         31:9a:a8:db:a8:c1:a6:bf:0c:a1:7d:ec:96:8d:dd:54:af:ff:
         2e:2c:08:19:32:01:1b:0a:a5:19:c4:43:9f:4f:b2:15:5c:15:
         45:7e:59:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:57 2024 by rpki-client on console-ams.rpki-client.org