Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/323830343a366130303a663030303a3a2f33362d3337203d3e20323730333035.roa
File:                     323830343a366130303a663030303a3a2f33362d3337203d3e20323730333035.roa (raw, json)
Hash identifier:          UpRcwwpqflc4BFmQYlUh49JrilDeiGoTSGdt6ity2SI=
Subject key identifier:   52:2A:2C:0A:AF:B7:C8:04:8E:5A:58:42:6C:C4:8E:23:2C:EB:F9:D0
Certificate issuer:       /CN=640EACF8ACF51A6F45117487C5E46912FEE6809C
Certificate serial:       6E065752AA9DCB06106C8A6673629B5455BF17F5
Authority key identifier: 64:0E:AC:F8:AC:F5:1A:6F:45:11:74:87:C5:E4:69:12:FE:E6:80:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/640EACF8ACF51A6F45117487C5E46912FEE6809C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/323830343a366130303a663030303a3a2f33362d3337203d3e20323730333035.roa
Signing time:             Wed 02 Aug 2023 18:47:40 +0000
ROA not before:           Wed 02 Aug 2023 18:42:40 +0000
ROA not after:            Wed 31 Jul 2024 18:47:40 +0000
asID:                     270305
IP address blocks:        2804:6a00:f000::/36 maxlen: 37

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:06:57:52:aa:9d:cb:06:10:6c:8a:66:73:62:9b:54:55:bf:17:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=640EACF8ACF51A6F45117487C5E46912FEE6809C
        Validity
            Not Before: Aug  2 18:42:40 2023 GMT
            Not After : Jul 31 18:47:40 2024 GMT
        Subject: CN=522A2C0AAFB7C8048E5A58426CC48E232CEBF9D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:82:30:3c:67:ea:53:1c:f7:18:a9:b7:0b:ba:
                    1b:24:a1:aa:d9:38:28:24:b3:74:32:78:d1:a9:1c:
                    cb:fa:c8:59:09:42:d2:e2:aa:81:a5:d3:83:8a:7b:
                    46:5b:d9:8b:c9:5b:0b:15:06:a1:3c:be:77:59:b0:
                    e1:c0:15:57:1b:f3:2d:9c:20:6f:e8:58:72:fe:d4:
                    41:ab:dd:19:41:49:d8:11:be:2d:fd:9d:e3:3f:82:
                    2a:56:10:4a:da:ea:7e:50:a9:19:9f:80:ea:bf:a0:
                    2a:8c:cd:bb:91:de:a5:2f:80:b1:78:2e:1a:bb:1f:
                    4e:9d:06:a5:07:ab:99:c2:4f:81:bf:01:cc:ac:ea:
                    69:d1:25:99:fd:71:c1:2a:a0:59:28:47:93:f2:da:
                    f8:64:21:62:c6:21:1b:49:f3:35:55:2f:7d:f0:fc:
                    cb:2e:12:85:83:d9:a5:5e:a5:a8:77:47:8b:d8:c5:
                    61:56:e9:bf:59:e1:60:b3:90:05:f4:ff:b2:cb:e8:
                    36:32:49:e6:4c:da:f0:a3:53:89:02:40:2b:61:c1:
                    c6:81:59:9b:a8:b2:db:bc:ae:54:b6:76:f7:6a:fc:
                    d6:92:2b:d8:b3:e3:54:49:96:62:03:25:c4:cd:c6:
                    3f:d8:82:ca:9f:c1:c1:5f:d6:00:a0:5b:16:5d:c1:
                    a3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:2A:2C:0A:AF:B7:C8:04:8E:5A:58:42:6C:C4:8E:23:2C:EB:F9:D0
            X509v3 Authority Key Identifier:
                keyid:64:0E:AC:F8:AC:F5:1A:6F:45:11:74:87:C5:E4:69:12:FE:E6:80:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/640EACF8ACF51A6F45117487C5E46912FEE6809C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/640EACF8ACF51A6F45117487C5E46912FEE6809C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/323830343a366130303a663030303a3a2f33362d3337203d3e20323730333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a00:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9c:0e:c6:d2:d1:42:50:26:09:ed:ec:0c:d0:8d:37:8f:dd:b5:
         ab:24:e0:70:21:ae:ee:55:93:62:07:58:b7:74:f0:82:5d:89:
         e6:ca:16:8a:76:a4:9d:b3:df:b3:8e:69:bd:99:8c:76:0c:e8:
         de:1a:7b:37:9e:ff:7e:87:8a:87:a7:a6:06:b4:50:23:96:d5:
         7d:91:eb:7d:f5:df:51:8a:09:e7:7c:2e:e2:2b:b1:89:01:60:
         cb:4b:d0:26:de:59:31:60:78:79:7b:e9:f6:67:c5:b2:7c:6d:
         4f:a5:19:33:98:26:78:db:0f:e6:16:72:97:93:3e:2e:09:7b:
         82:65:67:8a:72:ba:aa:a5:ec:b6:33:2a:01:cd:f2:73:08:d5:
         95:a3:64:85:40:91:c9:48:98:09:d5:0f:1b:76:3b:2f:b7:f0:
         86:af:c9:b0:2e:c4:ff:42:79:30:c4:2f:60:27:10:9b:14:bd:
         12:55:3e:c0:0a:1d:aa:d5:71:02:64:02:7b:94:a4:1f:c2:da:
         49:df:8c:bf:de:9e:06:29:4d:e5:55:75:3f:9f:bf:29:42:0d:
         85:17:de:c5:2c:18:7e:53:6f:5b:22:ff:ca:f4:0a:18:7d:ab:
         b4:a0:df:c6:da:9f:9f:3f:6b:ee:82:2b:b5:ec:e2:37:de:f2:
         9b:c9:cc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:02 2024 by rpki-client on console-ams.rpki-client.org