Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/323830343a383666343a383030303a3a2f33342d3334203d3e20323732363737.roa
File:                     323830343a383666343a383030303a3a2f33342d3334203d3e20323732363737.roa (raw, json)
Hash identifier:          Y9QUKj0zNg1ftUPUhcQG1ZiTNZeAGqONklERZBnmqro=
Subject key identifier:   C1:57:96:99:47:2E:71:FC:A2:75:02:32:FF:06:35:3A:CC:1B:18:59
Certificate issuer:       /CN=0504345023EFC15C3D01D89B97881FD18D235AA8
Certificate serial:       54A08E28DBC68169F55EEDEE0147D6F316781975
Authority key identifier: 05:04:34:50:23:EF:C1:5C:3D:01:D8:9B:97:88:1F:D1:8D:23:5A:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0504345023EFC15C3D01D89B97881FD18D235AA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/323830343a383666343a383030303a3a2f33342d3334203d3e20323732363737.roa
Signing time:             Thu 22 Feb 2024 20:56:34 +0000
ROA not before:           Thu 22 Feb 2024 20:51:34 +0000
ROA not after:            Thu 20 Feb 2025 20:56:34 +0000
asID:                     272677
IP address blocks:        2804:86f4:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:a0:8e:28:db:c6:81:69:f5:5e:ed:ee:01:47:d6:f3:16:78:19:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0504345023EFC15C3D01D89B97881FD18D235AA8
        Validity
            Not Before: Feb 22 20:51:34 2024 GMT
            Not After : Feb 20 20:56:34 2025 GMT
        Subject: CN=C1579699472E71FCA2750232FF06353ACC1B1859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9b:53:17:87:77:12:a8:e6:04:08:37:67:83:
                    64:68:b1:ca:62:3a:b4:23:05:55:ac:1b:13:7c:d4:
                    1f:b9:4b:d6:4f:cf:aa:f3:79:f3:ca:a8:93:51:81:
                    51:41:f1:50:38:95:40:a1:84:71:d4:5a:79:22:78:
                    0f:9a:29:d0:4c:01:1f:fc:18:7b:00:f8:02:b4:31:
                    0f:6d:d9:6b:f7:68:ca:a9:68:bf:44:31:06:ef:23:
                    66:6d:14:12:73:30:83:22:09:e6:93:26:f1:f5:fc:
                    e4:ac:58:c5:d1:50:f7:5b:17:8c:1d:33:72:0b:e2:
                    97:dd:9b:c9:0d:01:a5:e6:b6:f2:1f:3a:56:2d:07:
                    a9:dc:2d:0d:0a:1d:f5:18:16:db:9b:ac:c8:d1:67:
                    42:25:ef:55:3e:c3:a4:42:c1:dc:bb:da:3d:f8:28:
                    9b:92:3d:ee:61:51:c8:af:c3:e8:5a:60:74:c9:cc:
                    9c:0f:2f:8b:1b:20:84:7c:da:1f:76:2e:36:06:0c:
                    ae:0a:d3:c3:ea:87:d6:4a:0b:13:9d:fa:a3:2b:9e:
                    0c:20:1c:ee:04:a6:d2:e8:5d:0e:32:5f:28:46:63:
                    40:0b:1e:a6:26:e9:d0:f8:21:75:e5:ab:77:09:57:
                    58:76:4c:db:93:4d:17:67:5b:c0:10:65:c0:bc:16:
                    5c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:57:96:99:47:2E:71:FC:A2:75:02:32:FF:06:35:3A:CC:1B:18:59
            X509v3 Authority Key Identifier:
                keyid:05:04:34:50:23:EF:C1:5C:3D:01:D8:9B:97:88:1F:D1:8D:23:5A:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/0504345023EFC15C3D01D89B97881FD18D235AA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0504345023EFC15C3D01D89B97881FD18D235AA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/323830343a383666343a383030303a3a2f33342d3334203d3e20323732363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:86f4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         9d:e2:cb:0f:fa:d2:b7:69:02:00:c1:b0:fa:25:d0:16:56:d8:
         fa:3c:6a:f9:a7:16:93:6c:2f:25:a6:1b:4d:4a:c3:ac:81:d0:
         51:9e:63:e8:35:e9:b7:94:20:11:d1:f4:ce:71:ae:66:2d:ed:
         61:66:3e:43:a8:4e:2c:6e:79:a4:52:5a:49:d4:4e:4b:fc:92:
         2d:d1:12:e9:89:bd:e8:4a:9f:28:6c:54:5f:10:b7:95:80:ea:
         e1:8d:81:6e:6f:14:c3:34:34:69:b8:03:d2:e5:07:8a:52:fb:
         de:47:12:62:5f:cc:55:92:83:49:5b:74:dc:af:2f:a6:c7:0c:
         4f:61:ae:6f:9c:3f:9b:7f:36:31:31:2e:ce:2e:a5:87:00:db:
         f5:e0:73:5e:ad:57:ce:6a:44:80:71:67:a2:1a:cb:ef:ce:3a:
         48:24:6f:c6:b0:8d:24:53:b9:26:4b:b9:73:10:44:23:2e:65:
         a1:c2:85:04:0e:4d:b1:3a:fa:dc:d2:2f:fa:4e:4a:35:e7:77:
         5c:b2:f4:68:5f:d2:20:b0:e8:80:8f:72:b3:8f:f5:b1:21:ec:
         9e:18:f2:b6:df:f0:a9:8d:2a:7a:cc:f2:c2:06:2d:2b:0d:27:
         fc:a0:a0:7b:b9:29:ef:be:f2:e3:fc:84:c3:4e:54:04:2f:2d:
         82:64:81:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org