Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HUPrqf9ipQvx8mUvq16w155EDPHws9VypFbQV3g3bD7/0/323830343a366662383a3a2f33362d3336203d3e20323730363739.roa
File:                     323830343a366662383a3a2f33362d3336203d3e20323730363739.roa (raw, json)
Hash identifier:          a9kSruN/qZbYhW/96M8cCiTtRMrz8U26otbNFRUdB5M=
Subject key identifier:   4A:69:C4:22:70:C6:DB:05:E3:94:9C:82:61:7E:5D:B9:6D:61:B9:1B
Certificate issuer:       /CN=503AEC31E5EEDC3FCEE756E9046076993A31D631
Certificate serial:       5F7140D4435C7A679E48C3DF5523DEBECCDCAC37
Authority key identifier: 50:3A:EC:31:E5:EE:DC:3F:CE:E7:56:E9:04:60:76:99:3A:31:D6:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/503AEC31E5EEDC3FCEE756E9046076993A31D631.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HUPrqf9ipQvx8mUvq16w155EDPHws9VypFbQV3g3bD7/0/323830343a366662383a3a2f33362d3336203d3e20323730363739.roa
Signing time:             Fri 08 Dec 2023 04:14:49 +0000
ROA not before:           Fri 08 Dec 2023 04:09:49 +0000
ROA not after:            Fri 06 Dec 2024 04:14:49 +0000
asID:                     270679
IP address blocks:        2804:6fb8::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:71:40:d4:43:5c:7a:67:9e:48:c3:df:55:23:de:be:cc:dc:ac:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=503AEC31E5EEDC3FCEE756E9046076993A31D631
        Validity
            Not Before: Dec  8 04:09:49 2023 GMT
            Not After : Dec  6 04:14:49 2024 GMT
        Subject: CN=4A69C42270C6DB05E3949C82617E5DB96D61B91B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a8:33:ad:39:a0:7a:71:2a:17:b7:97:bb:a3:
                    32:2e:c9:0f:0c:89:9e:21:ff:13:5a:83:49:a5:93:
                    a2:36:60:01:6a:af:30:ec:61:c5:24:df:51:c5:7a:
                    12:49:c3:70:2f:7d:4a:54:d3:9a:4d:87:b7:52:b4:
                    15:5c:4b:d8:27:03:d5:20:e4:a5:70:c1:b5:16:72:
                    45:d2:2c:61:e6:7a:15:a2:1f:ea:c1:fb:b6:e2:67:
                    48:3d:6c:99:d4:a3:30:58:7e:fa:a2:24:f4:3c:d0:
                    c0:c5:a2:f7:73:46:3d:b9:69:00:8a:6e:87:77:cc:
                    57:c5:85:e3:3f:c3:fa:f4:5d:18:ce:6c:50:bf:ae:
                    56:50:5c:f1:86:a7:b5:91:ad:0b:00:28:0c:29:99:
                    fb:dd:a5:bd:e3:a8:3d:16:34:8f:80:b4:82:d5:4d:
                    f0:94:6e:16:69:c8:6d:93:db:e0:f0:ca:26:be:ac:
                    c8:7a:bc:6b:44:ee:8f:92:4a:97:f6:d4:83:7f:99:
                    f9:76:a1:ed:52:cb:40:02:d3:9a:cc:84:20:af:54:
                    e2:85:58:4f:95:58:29:af:62:69:9d:88:9e:43:65:
                    a6:61:9b:12:c9:98:e9:7e:65:fe:bf:3f:19:4f:77:
                    d3:bb:c2:5f:35:cf:a5:76:be:a3:9c:60:e2:d4:52:
                    ef:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:69:C4:22:70:C6:DB:05:E3:94:9C:82:61:7E:5D:B9:6D:61:B9:1B
            X509v3 Authority Key Identifier:
                keyid:50:3A:EC:31:E5:EE:DC:3F:CE:E7:56:E9:04:60:76:99:3A:31:D6:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HUPrqf9ipQvx8mUvq16w155EDPHws9VypFbQV3g3bD7/0/503AEC31E5EEDC3FCEE756E9046076993A31D631.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/503AEC31E5EEDC3FCEE756E9046076993A31D631.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HUPrqf9ipQvx8mUvq16w155EDPHws9VypFbQV3g3bD7/0/323830343a366662383a3a2f33362d3336203d3e20323730363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6fb8::/36

    Signature Algorithm: sha256WithRSAEncryption
         92:7f:f1:95:33:8e:f5:df:a9:a0:4c:5b:64:5e:0d:34:33:79:
         9b:1b:46:d6:80:8b:d3:9e:45:af:02:82:80:c4:56:fc:97:02:
         8f:a7:26:48:49:84:bb:6c:e8:fe:79:91:3d:48:f2:4c:9c:dd:
         d1:48:84:04:ba:16:85:a9:8d:67:7c:dc:20:ee:21:e1:fa:4e:
         83:2a:81:c9:0e:c9:e1:b1:09:bd:a9:3f:21:8c:ea:89:fb:60:
         38:cb:4a:04:2f:c0:9c:e8:ee:f0:ed:70:ba:1b:7f:a9:49:b6:
         08:fd:6f:d8:10:cb:25:9d:99:6a:3f:66:16:0c:d9:b7:73:82:
         3c:d4:ee:54:43:1e:84:ec:f0:ee:b7:47:81:54:91:da:91:da:
         71:e7:99:38:93:c0:3b:53:c9:a9:55:a3:38:35:27:b3:4a:ea:
         0b:4b:db:13:09:a3:f1:c5:36:19:ba:cc:dc:42:f8:15:ac:c8:
         c2:58:8f:bb:0e:4e:82:96:fd:9e:80:15:72:bb:fa:17:cc:fd:
         84:f0:63:57:f8:64:ca:ea:7e:5a:f4:7c:33:51:c4:12:3c:8b:
         a2:e5:fa:5c:a7:c2:2a:a2:d4:9a:96:6b:24:39:6a:ac:92:79:
         68:98:60:97:60:5a:74:5a:61:23:24:bd:e1:a8:2c:fc:44:39:
         26:0f:ec:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org