Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/1/323830343a363066343a383030303a3a2f33362d3336203d3e20323639323032.roa
File:                     323830343a363066343a383030303a3a2f33362d3336203d3e20323639323032.roa (raw, json)
Hash identifier:          WdF6pJD6rLJX7lnSes8rcjClf8Y6cdR2nkFyrywXm0c=
Subject key identifier:   BC:57:DF:1C:53:7F:63:A6:AA:C8:48:74:80:56:C5:D9:BE:0F:F1:60
Certificate issuer:       /CN=211521895B0953E6883D5163D7C6562ED21685BD
Certificate serial:       19C06131476FD52290BF645313AE26E163369D6F
Authority key identifier: 21:15:21:89:5B:09:53:E6:88:3D:51:63:D7:C6:56:2E:D2:16:85:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/211521895B0953E6883D5163D7C6562ED21685BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/1/323830343a363066343a383030303a3a2f33362d3336203d3e20323639323032.roa
Signing time:             Mon 06 Feb 2023 22:17:08 +0000
ROA not before:           Mon 06 Feb 2023 22:12:08 +0000
ROA not after:            Mon 05 Feb 2024 22:17:08 +0000
asID:                     269202
IP address blocks:        2804:60f4:8000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:c0:61:31:47:6f:d5:22:90:bf:64:53:13:ae:26:e1:63:36:9d:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=211521895B0953E6883D5163D7C6562ED21685BD
        Validity
            Not Before: Feb  6 22:12:08 2023 GMT
            Not After : Feb  5 22:17:08 2024 GMT
        Subject: CN=BC57DF1C537F63A6AAC848748056C5D9BE0FF160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f4:ab:dc:7d:c8:ff:ed:f9:7e:7f:dd:a3:e1:
                    32:f5:37:48:c8:a5:00:c1:c8:d2:07:4c:4d:0d:d1:
                    ad:90:5a:cf:36:26:fb:44:67:bd:bb:4b:7d:0e:fa:
                    b6:e3:3a:3f:de:47:66:c0:b3:6f:2b:10:34:ed:4f:
                    23:28:13:ca:86:40:b4:40:33:d4:4b:dc:7d:9c:90:
                    90:49:68:9e:10:83:85:66:4a:05:75:00:45:f5:a9:
                    9b:36:b0:88:ec:be:7a:4e:f6:cd:0b:d9:fb:a7:bf:
                    b4:a3:63:c9:f6:61:a6:02:6e:51:ec:b7:74:0d:57:
                    bd:0a:4a:43:7c:33:e1:1d:1e:16:d5:2c:66:ee:82:
                    65:d8:7f:00:d0:08:af:ad:14:90:cb:75:32:8b:8d:
                    d0:a2:5d:73:3b:a6:db:d1:fa:60:71:19:57:bb:da:
                    6c:11:b1:95:01:03:b9:0c:ac:93:33:7c:cd:84:67:
                    05:0d:d3:28:ae:45:19:cf:31:6e:a1:bd:aa:10:47:
                    17:f4:61:d7:af:4c:14:3c:97:f3:0e:5a:7b:c3:97:
                    e6:d3:dd:86:0c:00:29:7d:4c:e1:7d:85:fa:66:41:
                    b9:8f:82:97:f6:f9:b8:7f:ef:a4:93:2d:59:39:05:
                    50:45:fd:f3:b1:fb:c0:51:38:18:12:7a:e7:fd:05:
                    69:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:57:DF:1C:53:7F:63:A6:AA:C8:48:74:80:56:C5:D9:BE:0F:F1:60
            X509v3 Authority Key Identifier:
                keyid:21:15:21:89:5B:09:53:E6:88:3D:51:63:D7:C6:56:2E:D2:16:85:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/1/211521895B0953E6883D5163D7C6562ED21685BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/211521895B0953E6883D5163D7C6562ED21685BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/1/323830343a363066343a383030303a3a2f33362d3336203d3e20323639323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60f4:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         93:43:56:9e:31:34:95:20:2e:a0:77:98:3c:cc:12:83:e1:c4:
         5e:eb:a5:30:ab:17:ac:4c:61:a2:cc:33:61:2c:44:80:7f:0a:
         15:6e:55:26:01:60:d7:8e:d5:8d:70:62:63:10:8d:db:3d:b7:
         c8:24:44:3e:63:bf:7a:26:5b:af:a0:ec:1d:6e:65:c1:a6:5b:
         e2:6c:8a:a4:98:38:76:88:75:f5:f8:4b:0c:4c:8f:1e:23:c6:
         90:d1:17:ff:1c:c7:2b:f1:a2:f1:d3:7b:45:cd:e1:11:bd:14:
         51:50:42:64:c6:35:94:2c:08:08:19:23:28:14:ed:15:fc:ca:
         28:8b:45:98:a9:01:5c:b0:bc:d2:a8:de:7b:25:23:55:78:5e:
         e2:cb:ee:e0:d1:36:a0:8a:d4:05:25:a6:96:7e:20:d1:34:19:
         dd:3a:cd:03:c0:75:73:d2:58:57:73:54:95:83:a1:22:57:54:
         32:1c:76:bf:45:7a:43:8c:7d:4e:b4:79:3e:13:33:01:62:03:
         2e:42:6c:a7:2c:c8:d4:0e:20:d5:e9:25:d5:6b:ff:d6:e8:6e:
         38:60:c3:52:18:1c:bb:ce:1d:59:59:d4:04:37:79:ff:f6:bd:
         20:50:cd:cc:d7:0a:c0:67:df:f6:3a:ef:ab:19:7a:42:d4:d8:
         3b:15:4b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org