Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/1/323830343a363066343a3a2f33332d3333203d3e20323639323032.roa
File:                     323830343a363066343a3a2f33332d3333203d3e20323639323032.roa (raw, json)
Hash identifier:          SIxMDjHdZgAC7qYUGIE5yT6BW4nRWscCqWt3BLvMENw=
Subject key identifier:   9D:A3:DD:FF:74:A0:79:F6:0D:B0:7B:CE:75:05:B7:5A:C5:DE:F1:A6
Certificate issuer:       /CN=211521895B0953E6883D5163D7C6562ED21685BD
Certificate serial:       74BDEDF2335C28B88D2BA9AFEB2F8022623FF546
Authority key identifier: 21:15:21:89:5B:09:53:E6:88:3D:51:63:D7:C6:56:2E:D2:16:85:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/211521895B0953E6883D5163D7C6562ED21685BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/1/323830343a363066343a3a2f33332d3333203d3e20323639323032.roa
Signing time:             Mon 06 Feb 2023 22:16:21 +0000
ROA not before:           Mon 06 Feb 2023 22:11:21 +0000
ROA not after:            Mon 05 Feb 2024 22:16:21 +0000
asID:                     269202
IP address blocks:        2804:60f4::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:bd:ed:f2:33:5c:28:b8:8d:2b:a9:af:eb:2f:80:22:62:3f:f5:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=211521895B0953E6883D5163D7C6562ED21685BD
        Validity
            Not Before: Feb  6 22:11:21 2023 GMT
            Not After : Feb  5 22:16:21 2024 GMT
        Subject: CN=9DA3DDFF74A079F60DB07BCE7505B75AC5DEF1A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:33:b3:3a:47:8a:7f:3e:8e:c3:28:db:0a:2e:
                    eb:03:27:39:91:d2:78:05:20:f1:49:8b:ab:3e:b8:
                    d9:75:e3:84:1a:80:e0:4f:1e:b5:64:79:01:11:7b:
                    b4:33:78:9b:5b:ae:bc:5b:d7:1e:f7:14:40:7b:b3:
                    9b:58:f3:5e:02:a9:e2:2c:9f:64:58:4f:68:47:d1:
                    9e:0b:92:82:20:46:f5:e7:fc:53:fe:95:52:c8:25:
                    31:d3:2e:a5:81:0f:da:ee:89:7b:50:02:b7:4d:1f:
                    9f:b7:a2:4b:6e:8d:7f:0a:d4:9c:1b:58:97:77:58:
                    10:81:0a:e2:d9:56:31:ed:d3:8f:e4:fb:8f:9c:5e:
                    9f:5b:10:fc:bf:d2:c4:b6:cb:09:66:90:aa:d3:af:
                    e8:1f:73:e0:d8:91:5d:27:e6:02:c9:53:86:40:24:
                    1e:9c:6e:33:b6:58:14:bf:10:b1:6b:26:c7:23:75:
                    15:8f:0d:13:8c:04:2e:c8:bb:6b:db:e4:4a:44:3d:
                    6a:20:49:1b:1a:77:81:e9:f8:08:86:80:61:4a:5a:
                    4f:8f:39:ad:6b:15:ca:90:8f:5b:52:22:57:23:80:
                    5c:f8:3a:b8:2e:76:a7:d9:6a:ef:97:b1:94:2b:4c:
                    2c:8e:bf:50:3d:ce:ea:49:42:45:a3:a0:2c:f3:02:
                    83:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A3:DD:FF:74:A0:79:F6:0D:B0:7B:CE:75:05:B7:5A:C5:DE:F1:A6
            X509v3 Authority Key Identifier:
                keyid:21:15:21:89:5B:09:53:E6:88:3D:51:63:D7:C6:56:2E:D2:16:85:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/1/211521895B0953E6883D5163D7C6562ED21685BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/211521895B0953E6883D5163D7C6562ED21685BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/1/323830343a363066343a3a2f33332d3333203d3e20323639323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60f4::/33

    Signature Algorithm: sha256WithRSAEncryption
         6e:13:eb:e0:13:0c:6a:c0:b8:94:1d:2e:e2:4f:93:9d:f8:a1:
         b6:31:70:d3:5c:d5:f4:d8:3f:94:59:f6:bb:ca:0d:9d:af:2d:
         10:c1:34:7b:6f:a8:89:ee:ce:e7:47:ba:3d:dc:59:68:75:85:
         ac:9b:c6:f6:77:9d:5c:7b:b2:c4:cb:73:1b:a9:b2:e1:59:4c:
         23:22:f6:8c:b5:4e:93:11:7d:21:81:54:3f:e7:36:bb:6b:4a:
         77:dd:3a:58:a5:40:8f:b5:a3:84:f0:04:76:ab:fd:d6:33:94:
         e3:60:d2:a4:70:99:95:9b:5b:10:42:05:e5:2a:24:5b:f2:64:
         63:32:30:ca:4c:6b:10:dd:01:9d:94:fb:f8:0e:d9:60:20:78:
         77:eb:42:c6:03:27:97:11:a5:87:6f:15:f1:09:2e:b0:1e:ba:
         b3:86:20:7f:1f:e0:b8:c1:38:7e:e6:9e:54:9f:60:ef:27:26:
         3e:85:52:71:f9:e2:bc:52:41:1a:fb:57:b4:70:c6:e7:9c:d2:
         c0:b3:87:13:70:dd:ab:ba:39:37:7d:41:eb:af:15:e9:f7:15:
         ec:64:da:8d:39:0a:91:85:2e:47:41:b6:30:07:6b:92:a4:29:
         a9:0e:10:5f:96:cd:06:ff:dd:aa:a2:33:d8:e7:23:86:d1:96:
         4b:0e:f0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org