Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/1/323830343a363066343a3a2f33352d3335203d3e20323639323032.roa
File:                     323830343a363066343a3a2f33352d3335203d3e20323639323032.roa (raw, json)
Hash identifier:          bXnu8EidhmMMiqf6mpVIim+FMsxC48eP5VnsExDHHCI=
Subject key identifier:   AE:50:85:D9:E0:9C:91:38:49:7F:64:8F:33:0D:DA:78:DA:12:F9:11
Certificate issuer:       /CN=211521895B0953E6883D5163D7C6562ED21685BD
Certificate serial:       6011E41988660730D43D2DE9E95276A15FE3BD21
Authority key identifier: 21:15:21:89:5B:09:53:E6:88:3D:51:63:D7:C6:56:2E:D2:16:85:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/211521895B0953E6883D5163D7C6562ED21685BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/1/323830343a363066343a3a2f33352d3335203d3e20323639323032.roa
Signing time:             Mon 06 Feb 2023 22:16:29 +0000
ROA not before:           Mon 06 Feb 2023 22:11:29 +0000
ROA not after:            Mon 05 Feb 2024 22:16:29 +0000
asID:                     269202
IP address blocks:        2804:60f4::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:11:e4:19:88:66:07:30:d4:3d:2d:e9:e9:52:76:a1:5f:e3:bd:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=211521895B0953E6883D5163D7C6562ED21685BD
        Validity
            Not Before: Feb  6 22:11:29 2023 GMT
            Not After : Feb  5 22:16:29 2024 GMT
        Subject: CN=AE5085D9E09C9138497F648F330DDA78DA12F911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:99:96:c1:a8:67:fa:eb:d2:1a:49:31:3f:25:
                    3d:bf:ec:3f:c9:42:72:0c:6e:94:e8:6f:b1:a7:2a:
                    7c:95:be:6b:8a:ff:67:53:ea:25:1e:f9:5a:99:6a:
                    97:a0:39:26:c0:7b:1f:ea:90:6f:8e:d9:d0:b5:d7:
                    53:98:15:46:a8:31:8b:cc:6c:8f:ac:74:23:a6:09:
                    7c:c7:40:19:51:d7:90:88:9e:18:6c:b9:e6:d5:95:
                    7d:0e:6c:b1:2b:b7:25:e7:0b:98:89:5b:b4:23:d4:
                    fc:c3:c9:15:8c:3c:f3:90:48:7a:b8:36:b4:56:36:
                    f3:56:13:33:46:a9:18:24:9f:2b:4a:a9:7f:0e:66:
                    61:e4:84:94:f5:1d:70:7e:92:ac:7b:14:00:2e:9a:
                    2a:d2:8b:ad:f5:58:9d:32:a9:db:ab:10:da:64:26:
                    7f:12:3a:0a:fc:f9:b9:28:0d:48:bc:ba:48:62:21:
                    33:2e:f1:b1:68:42:ec:4a:5c:0e:90:81:d7:90:db:
                    1f:7f:78:cc:df:75:8c:a8:a8:1e:6e:87:d2:cd:b9:
                    b6:ee:a6:7c:af:92:2c:ef:a0:01:54:1a:35:7b:6c:
                    d8:1e:bf:1b:af:0f:ec:34:17:a5:32:46:21:19:14:
                    20:f8:d3:1f:8f:25:e8:8a:62:af:58:68:52:f2:9a:
                    5b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:50:85:D9:E0:9C:91:38:49:7F:64:8F:33:0D:DA:78:DA:12:F9:11
            X509v3 Authority Key Identifier:
                keyid:21:15:21:89:5B:09:53:E6:88:3D:51:63:D7:C6:56:2E:D2:16:85:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/1/211521895B0953E6883D5163D7C6562ED21685BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/211521895B0953E6883D5163D7C6562ED21685BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/1/323830343a363066343a3a2f33352d3335203d3e20323639323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60f4::/35

    Signature Algorithm: sha256WithRSAEncryption
         71:1f:bf:29:ea:0c:49:ab:d3:37:59:d5:8d:6e:82:0a:a1:7b:
         43:13:b3:34:09:0e:0d:c0:6c:33:f6:b5:15:2f:79:fc:23:00:
         60:00:6a:94:f3:58:0f:09:a3:d4:19:2b:ce:bb:01:4d:25:e7:
         93:ca:59:d9:dc:17:a9:71:56:b6:97:15:28:36:95:4a:b1:49:
         29:6e:e4:a2:25:a9:2a:eb:a1:8f:17:74:d8:22:24:8b:00:be:
         e7:02:65:e2:45:c3:b5:89:11:46:ab:98:08:09:8b:a8:b9:00:
         73:31:64:3b:bf:17:32:73:dd:b5:a2:b5:67:91:c3:38:cf:e9:
         ce:2e:27:72:67:ef:fb:0e:c9:eb:d9:7e:25:95:7b:5b:39:fa:
         a2:f6:5e:8b:e4:9b:90:b8:0d:04:0d:e9:0d:ed:f4:0c:84:d5:
         3b:19:3a:5d:d8:2d:4e:80:93:a7:05:54:4e:c1:e1:62:4a:d9:
         38:44:08:58:06:56:c9:0d:d6:7f:46:5d:93:53:fc:c8:08:cb:
         e4:4d:e1:ba:b4:3c:7f:96:38:25:f7:34:53:c4:a4:a4:46:ca:
         0a:17:11:02:1e:7f:58:7a:30:6b:aa:e6:f8:bd:71:66:59:18:
         dc:19:f8:e5:ec:d5:a2:b5:06:5d:ca:d6:43:a0:47:54:80:2d:
         c4:23:b4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org