Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/323830343a343533343a633030303a3a2f33342d3334203d3e20323636393131.roa
File:                     323830343a343533343a633030303a3a2f33342d3334203d3e20323636393131.roa (raw, json)
Hash identifier:          TB2JZDhUybogwgBWQ5Rv0gaxQWC1A6exwOyVPgCs7b8=
Subject key identifier:   AE:70:88:00:52:C8:5E:60:5B:F2:43:64:B4:91:8A:E9:BB:30:D9:43
Certificate issuer:       /CN=2970A36B0D430502A569554FE4F85E73508EA7CF
Certificate serial:       4BD5C7785CD15EC646C3E9170BA2496A30B54697
Authority key identifier: 29:70:A3:6B:0D:43:05:02:A5:69:55:4F:E4:F8:5E:73:50:8E:A7:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2970A36B0D430502A569554FE4F85E73508EA7CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/323830343a343533343a633030303a3a2f33342d3334203d3e20323636393131.roa
Signing time:             Wed 16 Aug 2023 13:51:45 +0000
ROA not before:           Wed 16 Aug 2023 13:46:45 +0000
ROA not after:            Wed 14 Aug 2024 13:51:45 +0000
asID:                     266911
IP address blocks:        2804:4534:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:d5:c7:78:5c:d1:5e:c6:46:c3:e9:17:0b:a2:49:6a:30:b5:46:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2970A36B0D430502A569554FE4F85E73508EA7CF
        Validity
            Not Before: Aug 16 13:46:45 2023 GMT
            Not After : Aug 14 13:51:45 2024 GMT
        Subject: CN=AE70880052C85E605BF24364B4918AE9BB30D943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5f:6d:79:42:87:e6:2d:20:e7:df:3d:aa:66:
                    39:d4:af:f7:a3:e9:8a:f0:99:d7:f3:2f:7f:f7:be:
                    6c:2a:ef:33:b2:80:52:ff:e2:14:ec:ca:98:d1:2d:
                    96:f5:34:02:74:e6:68:dd:f5:90:e5:1b:19:94:f1:
                    fd:e5:52:79:d8:b7:ce:f8:13:a0:4f:4b:5f:40:8d:
                    35:c8:50:40:ea:3c:bc:af:80:f6:f6:03:42:40:56:
                    69:cc:82:02:79:8b:08:bc:39:fa:c4:01:18:b7:37:
                    0b:ea:df:05:7c:b0:2a:f8:b2:c8:57:fc:bd:19:63:
                    34:16:ac:25:20:bd:37:37:1f:62:da:47:b6:22:3e:
                    56:82:56:ec:f5:56:e1:38:e9:f0:cf:1f:d4:7e:d7:
                    89:75:11:f2:85:ad:85:92:9d:34:46:3f:eb:34:36:
                    2f:6a:2d:06:9e:b7:27:cd:7b:97:f1:93:0a:9e:ac:
                    da:67:da:c0:18:59:09:0e:1f:74:41:35:52:35:af:
                    67:2b:ad:fe:a3:7d:cb:eb:33:ab:15:c1:e3:af:c6:
                    64:7b:f6:6e:49:bb:72:7b:0b:57:5c:0d:29:69:d2:
                    52:27:7d:04:ad:e0:2c:b3:a5:cf:4b:b3:4d:0a:c7:
                    49:4f:d2:0d:c6:80:19:a6:e5:e1:b3:8d:5f:b7:81:
                    78:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:70:88:00:52:C8:5E:60:5B:F2:43:64:B4:91:8A:E9:BB:30:D9:43
            X509v3 Authority Key Identifier:
                keyid:29:70:A3:6B:0D:43:05:02:A5:69:55:4F:E4:F8:5E:73:50:8E:A7:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/2970A36B0D430502A569554FE4F85E73508EA7CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2970A36B0D430502A569554FE4F85E73508EA7CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/323830343a343533343a633030303a3a2f33342d3334203d3e20323636393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4534:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         66:3b:dc:c2:92:73:b2:2b:5e:27:68:32:2a:e4:4d:2b:8f:50:
         77:e3:c6:00:a3:d5:5e:de:ed:18:cc:3a:6b:5f:8a:60:09:55:
         64:e7:dd:b9:e7:7f:62:3d:5a:11:8f:2f:4e:fd:04:5c:ca:c2:
         83:b5:11:a3:f1:6a:c8:bb:47:8e:8f:aa:be:d6:cc:a4:b7:7d:
         62:a8:f6:bb:34:43:50:13:62:eb:33:29:d8:a3:28:bd:b4:3e:
         36:30:17:9e:ae:6d:b9:c5:6f:4c:6e:2a:81:d0:bb:91:e8:fc:
         ef:93:50:b1:29:44:03:19:72:ce:1e:41:f8:85:2f:b4:a8:73:
         e1:91:f3:2a:41:af:a5:05:6d:6e:8d:90:72:82:5f:92:75:90:
         5a:25:9b:16:5e:b0:71:9a:5f:14:48:49:5c:ec:a0:4e:dd:e6:
         17:8a:78:c6:58:b5:78:5a:96:6f:e2:e2:df:b6:7c:3d:c7:28:
         3d:97:01:52:f6:22:2a:0b:14:66:dd:24:15:1d:00:a8:43:6f:
         e7:0a:22:28:8f:db:e6:05:a0:cd:cf:ed:e6:a1:72:a9:6d:62:
         4b:9f:44:b9:59:8d:c4:24:af:54:6d:2f:85:4a:41:78:63:02:
         e8:1f:8a:9c:98:71:91:2f:0b:7d:0f:78:ec:e4:a5:32:13:c7:
         80:1d:53:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org