Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/0/323830343a363066343a383030303a3a2f34302d3430203d3e20323639323032.roa
File:                     323830343a363066343a383030303a3a2f34302d3430203d3e20323639323032.roa (raw, json)
Hash identifier:          cakbW1lKdV7QIVxJZ4c1cXuT2wPvB7HqBE581SbB5L0=
Subject key identifier:   45:B4:CC:D6:F2:38:D6:1E:B9:1A:A6:C6:48:39:A2:93:66:69:34:06
Certificate issuer:       /CN=0E53B69644D25C8C2F97BD8686E0389E08280508
Certificate serial:       311EB5690066883104AF593611693B02DC880B15
Authority key identifier: 0E:53:B6:96:44:D2:5C:8C:2F:97:BD:86:86:E0:38:9E:08:28:05:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E53B69644D25C8C2F97BD8686E0389E08280508.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/0/323830343a363066343a383030303a3a2f34302d3430203d3e20323639323032.roa
Signing time:             Sun 28 May 2023 13:14:38 +0000
ROA not before:           Sun 28 May 2023 13:09:38 +0000
ROA not after:            Sun 26 May 2024 13:14:38 +0000
asID:                     269202
IP address blocks:        2804:60f4:8000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:1e:b5:69:00:66:88:31:04:af:59:36:11:69:3b:02:dc:88:0b:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E53B69644D25C8C2F97BD8686E0389E08280508
        Validity
            Not Before: May 28 13:09:38 2023 GMT
            Not After : May 26 13:14:38 2024 GMT
        Subject: CN=45B4CCD6F238D61EB91AA6C64839A29366693406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:11:95:d0:80:44:be:03:a1:2a:71:b4:30:b6:
                    a4:94:cb:63:52:d0:ba:81:bf:39:4b:c2:55:02:c8:
                    95:d2:f0:c8:64:bd:95:42:5c:6c:25:2a:5c:c8:24:
                    83:44:fd:ab:79:6c:0f:b5:4f:27:b6:4a:ab:cc:a8:
                    7a:53:cf:92:93:20:7e:ed:04:d8:59:a9:62:33:51:
                    36:e9:1f:ed:2f:5a:d4:14:7d:41:56:f1:b6:90:25:
                    1b:68:61:66:6f:b9:f1:20:fa:23:98:a7:b8:29:f7:
                    ea:fb:d4:fd:60:90:54:8f:4b:37:a3:cc:d6:4d:bb:
                    aa:78:d4:cf:56:95:53:f9:38:0f:be:43:15:e7:1b:
                    57:be:46:28:6a:62:9e:9d:9e:cf:e9:59:16:59:1a:
                    43:16:61:cf:a0:0e:d9:70:d5:46:74:cd:ec:dd:d5:
                    f1:2b:a7:2e:cb:06:57:86:48:e1:55:66:0e:c7:0a:
                    90:d5:2d:93:82:30:32:fb:3f:22:7f:e4:75:77:79:
                    f7:62:50:94:65:b2:b7:c2:86:34:06:6b:8c:6b:14:
                    3b:75:1d:46:46:ed:cd:21:f3:21:1f:67:af:f2:ba:
                    dc:48:3e:16:3d:c2:6d:d1:d8:79:87:29:d9:b9:83:
                    da:c8:38:f0:7e:00:33:b4:e3:f4:fd:f5:30:db:6c:
                    e4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B4:CC:D6:F2:38:D6:1E:B9:1A:A6:C6:48:39:A2:93:66:69:34:06
            X509v3 Authority Key Identifier:
                keyid:0E:53:B6:96:44:D2:5C:8C:2F:97:BD:86:86:E0:38:9E:08:28:05:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/0/0E53B69644D25C8C2F97BD8686E0389E08280508.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E53B69644D25C8C2F97BD8686E0389E08280508.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/0/323830343a363066343a383030303a3a2f34302d3430203d3e20323639323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60f4:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         0b:34:e9:24:d5:8f:90:c9:05:50:1a:2e:d8:83:50:7a:35:80:
         be:28:8a:d8:b2:8d:17:e7:2b:e5:23:2c:f1:43:43:3b:7a:38:
         24:fb:12:8c:e0:ae:69:bd:91:4f:2c:b7:c8:5e:01:75:58:83:
         9e:07:e3:ac:55:71:99:db:e9:51:cd:ed:bb:62:0f:fa:5b:3d:
         23:f7:8d:0f:c6:39:3d:06:bb:79:ed:1e:ed:22:0c:d7:5a:36:
         21:61:bb:35:96:c9:2d:6b:bc:2b:5f:f1:09:23:34:e2:f7:dc:
         f0:06:bf:08:46:ea:12:fc:bf:28:80:33:4f:f7:5e:32:6b:d7:
         9f:f1:7f:e9:ea:8b:2a:08:25:cd:18:bc:7e:17:dc:52:71:1b:
         b2:6d:60:62:95:1e:d1:4e:14:1a:34:70:13:f2:06:00:f6:d3:
         ce:07:22:86:cf:29:37:e2:44:27:ac:81:b0:bd:a0:a6:61:2f:
         a7:a5:e9:ad:0d:f3:24:36:fd:5d:42:cb:9a:0a:6a:ab:c8:e2:
         f2:d3:51:87:2c:78:9e:21:a7:64:45:4a:04:93:6c:e8:fc:df:
         43:a1:c8:4d:4e:74:22:6d:38:5e:17:47:c7:be:e9:92:b2:06:
         f3:22:4a:3c:58:84:92:91:57:b5:4d:e5:e3:f7:52:cb:02:ec:
         36:64:61:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org