Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/1/323830343a363066343a383330303a3a2f34302d3430203d3e20323639323032.roa
File:                     323830343a363066343a383330303a3a2f34302d3430203d3e20323639323032.roa (raw, json)
Hash identifier:          LDWKsMfQHL9nwR0rOnaUWfyhkLeYvMGaEGGskzg+SAY=
Subject key identifier:   6B:E4:4E:F5:3C:11:8D:B7:89:48:A0:8E:B4:FA:83:38:5A:A6:1C:BD
Certificate issuer:       /CN=211521895B0953E6883D5163D7C6562ED21685BD
Certificate serial:       2E4FF50BB6145586C17ED571C02A79DF0A60F9E3
Authority key identifier: 21:15:21:89:5B:09:53:E6:88:3D:51:63:D7:C6:56:2E:D2:16:85:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/211521895B0953E6883D5163D7C6562ED21685BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/1/323830343a363066343a383330303a3a2f34302d3430203d3e20323639323032.roa
Signing time:             Mon 06 Feb 2023 22:18:16 +0000
ROA not before:           Mon 06 Feb 2023 22:13:16 +0000
ROA not after:            Mon 05 Feb 2024 22:18:16 +0000
asID:                     269202
IP address blocks:        2804:60f4:8300::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:4f:f5:0b:b6:14:55:86:c1:7e:d5:71:c0:2a:79:df:0a:60:f9:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=211521895B0953E6883D5163D7C6562ED21685BD
        Validity
            Not Before: Feb  6 22:13:16 2023 GMT
            Not After : Feb  5 22:18:16 2024 GMT
        Subject: CN=6BE44EF53C118DB78948A08EB4FA83385AA61CBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:59:15:e6:ab:e2:73:87:74:8e:d7:65:5d:61:
                    45:f5:69:e0:73:3a:2d:7a:69:2a:77:85:e6:7c:95:
                    5c:9d:c8:d4:3f:1e:df:0f:31:8b:d3:9f:70:3f:e6:
                    51:54:00:25:5f:46:79:15:7b:32:d5:3b:ef:6b:3a:
                    0b:98:60:ab:8e:67:92:d1:47:5d:c9:c8:51:fd:57:
                    09:10:06:d4:59:42:fe:6d:da:a9:62:99:61:21:e7:
                    35:67:e1:67:91:15:9e:41:23:0a:27:3f:ec:7e:23:
                    7c:ef:8a:17:7e:7a:7d:03:3c:a6:0c:42:ea:3d:12:
                    90:21:49:c0:2d:3c:4c:1d:87:e1:2e:ec:a1:93:e2:
                    4c:cb:84:73:3b:c7:db:d1:10:86:58:c9:99:71:3d:
                    4e:07:74:ca:d7:32:66:5d:f7:d2:6d:92:02:c7:13:
                    94:b7:1c:c4:1c:83:a9:e3:e9:5a:41:c8:ef:32:11:
                    c0:97:b5:ab:91:4a:1c:bd:61:b4:5e:48:ec:62:0e:
                    0a:37:09:b6:0c:1a:31:73:33:c0:96:7a:31:c8:e2:
                    15:9f:6a:d3:6f:0e:e1:16:de:0b:c6:a5:ef:52:55:
                    32:e8:41:28:73:e8:bf:12:f5:5d:e2:14:a3:96:a5:
                    17:5f:14:c4:d5:cb:f2:eb:6c:54:e5:41:6c:3d:79:
                    21:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E4:4E:F5:3C:11:8D:B7:89:48:A0:8E:B4:FA:83:38:5A:A6:1C:BD
            X509v3 Authority Key Identifier:
                keyid:21:15:21:89:5B:09:53:E6:88:3D:51:63:D7:C6:56:2E:D2:16:85:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/1/211521895B0953E6883D5163D7C6562ED21685BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/211521895B0953E6883D5163D7C6562ED21685BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/1/323830343a363066343a383330303a3a2f34302d3430203d3e20323639323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60f4:8300::/40

    Signature Algorithm: sha256WithRSAEncryption
         5d:3d:44:11:da:0e:75:89:39:54:7c:2e:02:4a:78:cc:12:5c:
         9d:a3:e1:ad:ad:e5:13:e1:ae:a5:72:d1:4a:6e:da:15:37:dd:
         17:3a:0d:56:ae:ab:88:e1:91:21:98:d3:7e:78:7e:dd:82:6c:
         54:1c:e2:8d:54:d9:68:2c:3e:38:46:09:c6:bf:38:8f:eb:0b:
         68:50:94:34:59:91:e9:d4:22:db:78:41:06:c4:a5:d0:6a:fd:
         dd:b4:c3:71:86:97:ff:c7:bd:85:4c:d8:fe:b1:c5:74:8a:ed:
         f8:f1:49:1c:18:5b:5f:10:82:d6:f0:29:5e:53:0c:4c:d3:51:
         e0:00:a4:09:b8:e9:98:fe:06:35:fa:01:ab:e6:8a:a2:fb:05:
         bc:54:e8:f7:9c:32:17:71:13:36:cf:29:7f:2b:31:8c:d9:31:
         ab:74:7d:a9:54:f0:97:b3:c0:69:a1:da:d0:34:7e:e5:9c:64:
         32:0d:3f:fa:6e:58:51:0f:2b:41:0b:6b:5a:85:11:9a:8d:ac:
         bc:d5:ef:6d:f2:a1:63:f2:9a:00:be:9c:06:b7:cb:81:15:5a:
         83:26:84:ff:21:15:d5:2f:1b:67:9b:cf:30:4e:2b:5d:b4:ed:
         a1:a2:c2:4d:8f:19:c2:ea:46:32:17:cc:60:42:29:61:cd:ec:
         44:02:8e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org