Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/323830343a346635343a383030303a3a2f33342d3334203d3e20323638333230.roa
File:                     323830343a346635343a383030303a3a2f33342d3334203d3e20323638333230.roa (raw, json)
Hash identifier:          DIoiH+VfkcV3YCbqQNiD7LSPTcgGveDNuA/240j3sv4=
Subject key identifier:   17:E8:66:73:D5:89:25:E2:0A:3D:D3:31:58:62:D0:3D:9A:60:96:72
Certificate issuer:       /CN=D0436FEA91781D055687421CAEF481A6EC223F53
Certificate serial:       58F96E72C31757E5A621924AFE2BEF9A0BEF10A3
Authority key identifier: D0:43:6F:EA:91:78:1D:05:56:87:42:1C:AE:F4:81:A6:EC:22:3F:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0436FEA91781D055687421CAEF481A6EC223F53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/323830343a346635343a383030303a3a2f33342d3334203d3e20323638333230.roa
Signing time:             Thu 03 Aug 2023 17:02:37 +0000
ROA not before:           Thu 03 Aug 2023 16:57:37 +0000
ROA not after:            Thu 01 Aug 2024 17:02:37 +0000
asID:                     268320
IP address blocks:        2804:4f54:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:f9:6e:72:c3:17:57:e5:a6:21:92:4a:fe:2b:ef:9a:0b:ef:10:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0436FEA91781D055687421CAEF481A6EC223F53
        Validity
            Not Before: Aug  3 16:57:37 2023 GMT
            Not After : Aug  1 17:02:37 2024 GMT
        Subject: CN=17E86673D58925E20A3DD3315862D03D9A609672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a0:88:de:98:bf:fd:52:70:23:1f:0b:38:12:
                    25:95:84:9d:29:51:31:39:fe:72:70:43:dd:01:f7:
                    b6:8f:69:96:9c:2f:bd:e9:f8:96:a5:9f:25:b0:12:
                    b5:98:c0:1b:18:43:06:04:b8:c5:e9:1c:4a:a2:1a:
                    e7:fc:88:9f:8c:68:fb:86:35:f2:c4:bc:2a:4d:f8:
                    b4:bf:09:ee:a7:12:0a:f9:be:1f:24:7e:d5:0a:4d:
                    4e:eb:44:86:f9:3b:6e:d7:c2:1e:5b:95:3b:a2:f1:
                    7d:48:82:7c:1c:c8:3c:f7:5e:cf:e8:dd:33:5c:64:
                    8e:7f:f1:c9:14:2a:4b:59:03:9d:09:13:9f:14:ab:
                    47:3a:4c:9e:4f:f3:97:26:5e:94:01:a2:a1:41:fc:
                    25:0c:e1:00:1f:65:9c:c0:a7:8f:e3:bf:27:03:06:
                    ca:23:43:38:36:86:1e:3f:d3:e3:c0:66:c3:a4:10:
                    f8:3a:43:86:28:95:92:d2:2a:7b:38:42:41:41:93:
                    4a:09:38:c0:ce:79:99:29:2d:0f:b3:5c:18:c7:53:
                    32:ed:76:f1:a1:d7:f2:68:f5:5f:0f:7c:d1:75:5d:
                    ff:be:89:75:14:d0:ee:a4:79:4e:b2:bd:8f:a0:16:
                    7b:43:05:8c:1b:2e:d4:d8:da:52:2d:68:54:3b:e0:
                    9f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E8:66:73:D5:89:25:E2:0A:3D:D3:31:58:62:D0:3D:9A:60:96:72
            X509v3 Authority Key Identifier:
                keyid:D0:43:6F:EA:91:78:1D:05:56:87:42:1C:AE:F4:81:A6:EC:22:3F:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/D0436FEA91781D055687421CAEF481A6EC223F53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0436FEA91781D055687421CAEF481A6EC223F53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/323830343a346635343a383030303a3a2f33342d3334203d3e20323638333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f54:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a1:84:b5:53:1a:4a:77:3e:92:5b:8c:96:67:17:3c:fd:a1:63:
         39:6a:d9:82:15:50:ca:e6:c6:cf:b4:3a:9e:c4:1c:f2:92:96:
         dd:7b:08:29:18:f4:d2:7f:ac:2e:6c:af:7a:57:29:e9:8a:df:
         9a:e1:51:8d:9d:8c:29:57:52:3e:15:59:91:e9:ab:44:c6:e4:
         b8:e2:10:d0:b8:29:68:95:f6:3f:ab:0f:89:51:e1:7d:5e:67:
         30:4c:08:d1:8d:da:fe:ff:f3:c4:87:c1:27:6e:76:04:33:32:
         0b:0b:da:8f:e1:7c:78:c5:25:95:3b:ed:2b:d6:06:f2:f2:de:
         a5:6f:f4:34:4b:91:06:7d:b2:4b:e7:b9:ff:b1:8c:fd:87:a5:
         c6:eb:5c:76:87:3c:53:96:36:09:a3:a4:46:98:3a:93:7a:f5:
         10:5a:e4:d6:32:3d:5b:4e:c0:c5:a1:59:1a:e4:e5:48:9e:66:
         73:2d:0a:42:c5:06:41:f5:7e:34:06:88:f1:f1:8e:2a:79:ab:
         4e:a4:cf:f7:15:bd:44:06:ba:5a:ff:e9:b8:68:9a:27:bc:c8:
         0b:df:cf:5e:49:70:d2:0a:d9:e8:b3:2d:16:15:b1:0a:46:74:
         84:d7:c8:55:32:50:20:48:38:ab:0e:59:b2:be:6e:3c:36:c2:
         3b:53:71:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org