Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/323830343a363962633a633030303a3a2f33342d3334203d3e20323730323838.roa
File:                     323830343a363962633a633030303a3a2f33342d3334203d3e20323730323838.roa (raw, json)
Hash identifier:          1KCSkWGyB37FCK1gzU5QX6mx8sLbPOocLIGJ6sBvKZE=
Subject key identifier:   1F:B6:7A:F6:97:D3:A5:53:FB:77:3F:AB:04:1E:72:F3:8C:D8:6F:5E
Certificate issuer:       /CN=3A6A1DCBE326CBF42017E013F8135C8F6BE3BB72
Certificate serial:       4FC4A0C9A84C785D400EE3679578AC3B662C640F
Authority key identifier: 3A:6A:1D:CB:E3:26:CB:F4:20:17:E0:13:F8:13:5C:8F:6B:E3:BB:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3A6A1DCBE326CBF42017E013F8135C8F6BE3BB72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/323830343a363962633a633030303a3a2f33342d3334203d3e20323730323838.roa
Signing time:             Thu 12 Oct 2023 19:36:01 +0000
ROA not before:           Thu 12 Oct 2023 19:31:01 +0000
ROA not after:            Thu 10 Oct 2024 19:36:01 +0000
asID:                     270288
IP address blocks:        2804:69bc:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:c4:a0:c9:a8:4c:78:5d:40:0e:e3:67:95:78:ac:3b:66:2c:64:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A6A1DCBE326CBF42017E013F8135C8F6BE3BB72
        Validity
            Not Before: Oct 12 19:31:01 2023 GMT
            Not After : Oct 10 19:36:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b3:89:8c:b9:8e:86:85:f1:0f:f8:d8:23:33:
                    6a:d4:c8:1f:ad:32:72:54:d5:07:65:04:28:74:3f:
                    97:cf:20:7f:33:74:9d:9a:9f:c8:20:41:11:01:94:
                    93:c1:57:bb:e1:04:47:37:83:05:ce:80:2d:f1:89:
                    b6:09:e2:a5:0f:8a:36:38:b1:06:b7:20:92:c0:d8:
                    02:73:56:f7:e7:87:bc:d9:d6:9f:14:9b:b6:74:61:
                    9a:95:1e:ae:83:cf:37:21:0a:2f:db:5b:83:0b:23:
                    1a:e0:2d:db:6f:28:01:57:8e:29:e7:f2:08:29:ad:
                    f0:c0:22:f4:da:47:53:5c:6a:f7:59:b8:8d:78:80:
                    6e:f7:aa:6f:56:31:82:7a:55:97:01:8b:92:99:19:
                    cd:90:55:c1:92:6b:f8:a1:87:df:7f:e0:8a:55:6c:
                    9b:c6:85:1a:92:e3:6e:5b:93:e6:d4:f6:26:7c:07:
                    2a:0b:6d:f5:17:5c:46:d0:93:c1:0c:01:72:b7:cb:
                    1e:fd:12:8e:87:31:ff:fa:54:ec:c6:14:02:6c:f1:
                    b8:4e:de:01:9c:b1:45:5b:5d:e9:0a:08:5e:7e:5f:
                    89:b0:4d:cc:03:a0:c7:2d:b3:4d:f6:a6:49:fb:b8:
                    92:7f:14:e4:da:cc:b4:31:e0:b7:89:00:3e:74:9a:
                    4c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B6:7A:F6:97:D3:A5:53:FB:77:3F:AB:04:1E:72:F3:8C:D8:6F:5E
            X509v3 Authority Key Identifier:
                keyid:3A:6A:1D:CB:E3:26:CB:F4:20:17:E0:13:F8:13:5C:8F:6B:E3:BB:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/3A6A1DCBE326CBF42017E013F8135C8F6BE3BB72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3A6A1DCBE326CBF42017E013F8135C8F6BE3BB72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/323830343a363962633a633030303a3a2f33342d3334203d3e20323730323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:69bc:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         11:e5:c1:6f:6d:c3:2b:be:41:01:2f:44:6b:d7:18:09:09:a8:
         d6:01:e1:56:9c:0f:89:f7:45:39:e1:ee:6d:c8:4f:1e:4f:46:
         93:95:94:1d:0f:c4:98:8c:a0:7e:2a:b6:8d:8f:3d:50:3a:34:
         53:44:d3:4a:a8:dc:bd:41:5c:92:da:c5:49:b1:3a:d8:d2:d7:
         73:7b:cc:2a:76:c4:18:9c:6a:d4:4f:bb:eb:a9:54:09:04:a0:
         59:de:57:32:1e:04:0c:a9:b3:b4:a1:a8:6f:dd:6d:08:6f:9a:
         68:b0:0b:8a:aa:80:b6:fa:1b:d9:8d:94:c6:9b:4e:2a:b2:20:
         8d:c7:02:6e:61:3f:b2:1b:e8:51:51:4c:4c:6e:22:a9:d1:fd:
         70:72:25:59:b7:fa:c4:5d:26:4d:05:86:1f:b3:28:47:3c:82:
         c9:76:aa:97:88:56:84:d9:db:6c:63:c1:01:f6:f1:27:67:8b:
         0c:b5:c3:2a:9d:6d:ba:40:81:9d:c9:cb:5e:6a:94:84:96:fd:
         7c:cf:4b:51:59:2d:4d:e3:7a:75:b0:63:9e:7e:9e:fd:4e:b8:
         64:5b:fa:f5:cc:da:e9:04:2b:60:9b:20:b7:60:9e:21:e9:b5:
         5e:98:9e:64:a4:6c:9d:4c:63:f8:e0:42:5c:2b:09:0f:f3:d4:
         5b:77:4b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:11 2024 by rpki-client on console-fra.rpki-client.org