Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/0/323830343a316235343a343030303a3a2f33342d3334203d3e203631373232.roa
File:                     323830343a316235343a343030303a3a2f33342d3334203d3e203631373232.roa (raw, json)
Hash identifier:          8oMhxj4qsQyWkoyskY8q+ax9qAjatSR7UPeVtw47XG0=
Subject key identifier:   0C:1A:68:7A:E3:8A:EA:24:98:35:2C:8A:D0:2B:31:E0:D4:79:0B:85
Certificate issuer:       /CN=00DB56825404ABC47D0B868AF4C0C886C672ADE9
Certificate serial:       178467CEFC3215137F62D188F2B92F9AE67D0E9C
Authority key identifier: 00:DB:56:82:54:04:AB:C4:7D:0B:86:8A:F4:C0:C8:86:C6:72:AD:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00DB56825404ABC47D0B868AF4C0C886C672ADE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/0/323830343a316235343a343030303a3a2f33342d3334203d3e203631373232.roa
Signing time:             Thu 13 Jul 2023 01:26:20 +0000
ROA not before:           Thu 13 Jul 2023 01:21:20 +0000
ROA not after:            Thu 11 Jul 2024 01:26:20 +0000
asID:                     61722
IP address blocks:        2804:1b54:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:84:67:ce:fc:32:15:13:7f:62:d1:88:f2:b9:2f:9a:e6:7d:0e:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00DB56825404ABC47D0B868AF4C0C886C672ADE9
        Validity
            Not Before: Jul 13 01:21:20 2023 GMT
            Not After : Jul 11 01:26:20 2024 GMT
        Subject: CN=0C1A687AE38AEA2498352C8AD02B31E0D4790B85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6c:10:82:12:15:84:9d:a6:85:98:3e:64:29:
                    bb:fb:0a:19:28:2b:12:1f:70:60:e3:24:93:8e:9b:
                    b2:39:00:13:44:6a:cc:22:f6:06:ee:56:5e:26:ba:
                    de:14:6e:87:a2:db:c0:ff:74:db:2f:8f:4a:c2:ec:
                    e8:b6:9d:3b:6d:7f:57:11:1e:fb:ff:37:f9:c6:e8:
                    6d:bb:b3:46:84:95:2b:6f:dd:c4:e8:25:fe:d0:7a:
                    0c:a3:7e:eb:6f:22:e5:37:25:07:e8:e3:7f:cc:05:
                    ed:f2:4a:4f:5c:c5:c7:1a:21:35:f8:6f:cc:b7:f7:
                    b3:f6:43:b8:31:c2:dc:1c:8f:bf:c5:81:50:f3:c9:
                    99:48:a5:9a:fe:49:a1:9b:6b:f9:38:de:53:6b:5f:
                    70:e3:96:d7:0e:da:34:03:b3:57:36:08:dc:5c:83:
                    64:85:27:8d:72:f4:95:11:99:8b:da:33:46:53:8b:
                    15:2d:c1:c6:92:75:a3:91:b3:80:f2:fd:f3:4e:37:
                    c6:73:e5:9f:af:c6:e4:08:db:9a:3d:eb:1d:b6:98:
                    79:b9:e2:4e:09:74:7c:a9:f9:8c:54:84:3a:2a:d8:
                    eb:91:0b:06:03:4b:bd:ff:b6:49:9c:05:fe:c5:1b:
                    e2:a3:75:cf:c5:d3:61:c3:31:c0:09:6e:6a:c3:7e:
                    41:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:1A:68:7A:E3:8A:EA:24:98:35:2C:8A:D0:2B:31:E0:D4:79:0B:85
            X509v3 Authority Key Identifier:
                keyid:00:DB:56:82:54:04:AB:C4:7D:0B:86:8A:F4:C0:C8:86:C6:72:AD:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/0/00DB56825404ABC47D0B868AF4C0C886C672ADE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00DB56825404ABC47D0B868AF4C0C886C672ADE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/0/323830343a316235343a343030303a3a2f33342d3334203d3e203631373232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b54:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         cc:d3:b3:7d:79:c4:f7:f0:6e:fa:a2:11:f2:b3:82:71:a7:1d:
         34:b7:0b:9c:16:b9:d0:87:74:6a:fe:bc:b1:9c:68:3d:69:65:
         e7:e5:1c:91:cf:7d:52:e6:f7:29:33:d9:6e:0e:45:fa:a9:7a:
         6c:ea:43:e1:2d:35:28:c2:b2:7e:1c:4a:65:cc:e0:67:cd:14:
         2c:94:ee:ce:e5:d0:76:74:08:e9:f0:14:97:dd:18:23:bd:1b:
         d5:88:ef:b2:be:b4:d9:2c:aa:f9:ba:58:89:a5:11:e4:eb:52:
         3c:fd:22:7c:98:88:8a:29:7f:a4:42:52:96:c3:2f:87:67:be:
         38:f6:5c:c6:0b:36:c7:35:4c:e9:44:d5:61:7b:3e:28:a1:4e:
         80:3f:70:d7:6b:f9:94:97:00:33:5f:66:06:54:8d:db:03:c7:
         ea:45:18:c2:b9:84:96:2d:92:c0:ee:1e:fd:73:ff:ea:61:39:
         f4:51:1f:50:14:58:29:3f:df:58:77:19:6e:32:2c:88:55:c1:
         23:8c:b8:db:cd:4a:d0:d6:2e:96:3d:43:a5:5e:3b:ea:a7:d9:
         0c:7b:47:c4:97:d0:8d:1b:70:a3:83:38:5c:3a:be:54:40:8e:
         87:40:76:8f:ce:5c:52:57:de:b7:69:bc:f0:1e:80:d7:5e:ab:
         99:69:c5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org