Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/0/323830343a343166633a3a2f33322d3334203d3e20323637343730.roa
File:                     323830343a343166633a3a2f33322d3334203d3e20323637343730.roa (raw, json)
Hash identifier:          0ftxzmD9cbchtlmkx+BkT1rhz4DLF18YkfaYaKxr3Os=
Subject key identifier:   20:E8:01:3C:BA:99:8B:36:F8:40:32:C3:19:B5:0D:29:76:B3:E1:FD
Certificate issuer:       /CN=896F64699A24C2E23B5746346E4D57164325B11C
Certificate serial:       541E95FA8DE7B57C79ABC8F802C481C9BB8500AB
Authority key identifier: 89:6F:64:69:9A:24:C2:E2:3B:57:46:34:6E:4D:57:16:43:25:B1:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/896F64699A24C2E23B5746346E4D57164325B11C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/0/323830343a343166633a3a2f33322d3334203d3e20323637343730.roa
Signing time:             Sun 10 Sep 2023 19:00:00 +0000
ROA not before:           Sun 10 Sep 2023 18:55:00 +0000
ROA not after:            Sun 08 Sep 2024 19:00:00 +0000
asID:                     267470
IP address blocks:        2804:41fc::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:1e:95:fa:8d:e7:b5:7c:79:ab:c8:f8:02:c4:81:c9:bb:85:00:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=896F64699A24C2E23B5746346E4D57164325B11C
        Validity
            Not Before: Sep 10 18:55:00 2023 GMT
            Not After : Sep  8 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:58:e9:d4:a8:ae:d0:79:29:18:86:7f:d9:89:
                    cd:7b:4c:1a:b0:7e:89:1f:a9:87:04:38:8b:e8:db:
                    77:4b:09:fe:ca:fb:76:8a:8b:98:30:70:4c:7a:51:
                    b3:a8:f0:f3:8a:0c:b0:15:f2:09:99:dc:5c:e5:1c:
                    70:d0:09:e2:4f:0f:fa:c8:64:b4:96:ef:9b:72:73:
                    25:b4:bf:d9:cc:0a:d1:58:be:ec:37:db:9a:fb:f9:
                    94:80:cc:c4:39:c8:e1:68:b8:b2:41:fa:92:7b:85:
                    77:4c:18:16:e2:92:92:ed:2d:49:74:d8:91:fe:67:
                    11:67:14:11:d5:9d:d6:e4:14:8c:f9:c1:f4:9e:4f:
                    c4:68:00:15:65:b9:bb:b0:87:a9:61:16:0d:de:ac:
                    64:c1:4d:03:2c:2b:22:f8:30:fa:4e:0a:18:73:c1:
                    7c:32:48:87:f0:95:0f:60:24:7b:aa:5a:84:31:1d:
                    c7:da:12:9d:ec:31:0c:2c:f3:a0:09:63:b9:7d:56:
                    e4:13:ae:79:fb:2d:14:5a:2b:31:54:17:f7:51:03:
                    d5:a7:68:c8:09:11:55:d9:4c:14:6a:e4:55:ad:f3:
                    a4:93:51:a0:03:b2:00:bd:ca:8f:c8:0f:40:da:09:
                    87:38:6a:2d:a5:cf:6f:e5:92:19:ef:71:4a:91:38:
                    f6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E8:01:3C:BA:99:8B:36:F8:40:32:C3:19:B5:0D:29:76:B3:E1:FD
            X509v3 Authority Key Identifier:
                keyid:89:6F:64:69:9A:24:C2:E2:3B:57:46:34:6E:4D:57:16:43:25:B1:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/0/896F64699A24C2E23B5746346E4D57164325B11C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/896F64699A24C2E23B5746346E4D57164325B11C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/0/323830343a343166633a3a2f33322d3334203d3e20323637343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:9d:46:33:a5:cd:0b:f4:5a:33:27:e8:dd:ae:8e:6c:36:b2:
         35:fd:86:0d:7d:c5:15:8d:bc:07:a9:72:59:0b:a8:0c:10:e7:
         a2:fe:34:ac:a6:b9:ba:ce:f0:20:3f:31:68:0d:dc:c8:cd:19:
         b8:fd:70:40:be:bc:29:d0:87:8b:53:11:57:64:1c:7f:dd:db:
         b2:9c:07:f1:99:89:37:54:a2:be:9c:5a:c1:55:c8:54:e9:d5:
         73:46:a1:ca:8a:51:31:d8:0e:94:7e:c0:26:aa:56:e4:a7:1b:
         08:03:f2:3a:3c:03:08:da:c3:a8:9a:01:05:b9:ca:4c:2a:74:
         c9:a9:4c:5f:86:fe:45:65:89:80:05:cf:f6:a7:71:1e:fc:5b:
         38:14:7c:03:d4:1f:90:22:76:e2:95:9c:e9:d9:d5:e4:99:ef:
         de:0f:ee:fc:3e:04:e8:5a:d9:b5:1a:da:f7:72:5b:34:d4:b4:
         f0:0e:9e:76:fb:bc:12:04:40:8e:76:e0:bf:4e:f7:c2:49:05:
         ae:56:12:10:66:df:07:70:8f:81:e7:d7:35:8b:4c:71:a3:28:
         06:7e:34:5f:17:05:20:75:40:30:18:94:a5:48:65:97:ed:a3:
         95:99:36:c1:92:29:4f:f8:4d:b8:42:8f:06:7d:bc:98:53:52:
         79:40:35:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org