Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/323830343a376135383a3a2f33322d3332203d3e20323731333631.roa
File:                     323830343a376135383a3a2f33322d3332203d3e20323731333631.roa (raw, json)
Hash identifier:          YqkKGS37YCCX/W4MBsKRTZsccW0UmD7ma742SDIu4HI=
Subject key identifier:   69:ED:0A:B6:C3:87:5F:04:19:B2:24:12:10:89:D4:1A:A6:D9:E6:50
Certificate issuer:       /CN=DCF693E982F7DF6B9FDD355A47A4EC82DF7ACC37
Certificate serial:       143B6ED73EFC1361FFD910C9D4F9B40404CE3E40
Authority key identifier: DC:F6:93:E9:82:F7:DF:6B:9F:DD:35:5A:47:A4:EC:82:DF:7A:CC:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCF693E982F7DF6B9FDD355A47A4EC82DF7ACC37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/323830343a376135383a3a2f33322d3332203d3e20323731333631.roa
Signing time:             Mon 04 Mar 2024 13:33:51 +0000
ROA not before:           Mon 04 Mar 2024 13:28:51 +0000
ROA not after:            Mon 03 Mar 2025 13:33:51 +0000
asID:                     271361
IP address blocks:        2804:7a58::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:3b:6e:d7:3e:fc:13:61:ff:d9:10:c9:d4:f9:b4:04:04:ce:3e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCF693E982F7DF6B9FDD355A47A4EC82DF7ACC37
        Validity
            Not Before: Mar  4 13:28:51 2024 GMT
            Not After : Mar  3 13:33:51 2025 GMT
        Subject: CN=69ED0AB6C3875F0419B224121089D41AA6D9E650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:03:96:2e:27:cf:1b:44:dc:c2:f9:30:78:dd:
                    71:02:50:4c:77:c2:8e:65:63:8c:b0:48:85:11:05:
                    ca:7c:af:d3:f8:e2:01:20:92:b8:82:b5:d3:0d:aa:
                    1d:bc:7a:81:6b:d6:71:6b:0c:2b:6f:43:8c:cb:85:
                    a0:b4:e0:22:a9:a6:d8:76:a3:1c:55:26:ae:86:c2:
                    30:86:a4:92:d1:7b:19:66:4b:18:99:82:d4:1e:6b:
                    6b:34:5b:68:9b:ec:9a:39:ab:52:29:14:c9:a6:28:
                    ac:31:94:88:93:97:f1:a9:1d:4a:67:91:99:b3:cc:
                    7e:18:32:6e:09:5f:ae:5f:92:c7:8d:ea:4a:02:5f:
                    00:b1:5c:6f:c5:32:d7:84:c2:96:ef:36:61:6e:ad:
                    61:f5:70:d2:45:29:27:64:99:45:8d:44:61:ea:e6:
                    3b:d3:f6:54:5a:c5:b2:d8:b5:14:ed:b0:30:0e:c9:
                    bf:44:c3:e0:dc:8b:a5:35:1f:a5:1b:b3:e8:2f:b1:
                    be:51:f6:fd:f2:48:d8:8b:cf:05:19:59:85:27:83:
                    c6:4c:ba:71:63:a4:fa:4b:08:ae:0b:2e:42:e4:ef:
                    a6:ab:b5:23:42:96:4a:bf:13:1e:b4:c5:f2:2c:6d:
                    3d:4c:1a:41:4c:c6:ec:49:da:fb:57:87:46:ec:01:
                    be:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:ED:0A:B6:C3:87:5F:04:19:B2:24:12:10:89:D4:1A:A6:D9:E6:50
            X509v3 Authority Key Identifier:
                keyid:DC:F6:93:E9:82:F7:DF:6B:9F:DD:35:5A:47:A4:EC:82:DF:7A:CC:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/DCF693E982F7DF6B9FDD355A47A4EC82DF7ACC37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCF693E982F7DF6B9FDD355A47A4EC82DF7ACC37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/323830343a376135383a3a2f33322d3332203d3e20323731333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a58::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:16:1f:f2:bc:92:2d:94:ee:83:43:e4:d5:6e:38:32:00:49:
         81:b2:8c:05:f3:b5:7f:d8:57:47:46:ca:81:08:d6:68:0a:79:
         03:77:4b:21:99:d3:52:e9:e7:84:47:d0:40:d1:89:42:f8:6c:
         f5:5b:f3:46:47:a9:cc:78:f1:ee:c8:75:e0:52:40:bd:87:85:
         45:28:39:be:38:a8:73:e0:63:47:5d:a0:c9:79:56:88:3c:2b:
         88:36:1e:48:9a:05:f0:e9:94:74:83:03:1f:ec:b8:24:e1:8b:
         54:66:74:1c:1c:bb:a8:1b:b9:62:67:09:59:eb:4a:fc:bd:40:
         c7:bb:a1:bf:1f:31:ed:05:a4:96:fd:f8:cd:08:46:2e:51:2a:
         2e:27:ec:7f:aa:06:77:0b:b2:16:64:3d:4d:05:5e:5d:c2:f3:
         e9:c8:1c:00:4d:09:fe:cf:9a:2d:4a:4a:8a:6a:28:32:db:a8:
         86:c6:8c:21:98:5d:09:fd:40:19:5a:c7:e4:0f:eb:b2:5e:04:
         83:30:c9:03:61:5e:4f:a7:8b:46:c8:a7:f3:7b:a9:37:19:f8:
         9c:c2:f1:74:3f:8c:78:d7:14:04:09:cd:0b:85:f8:aa:1b:77:
         51:8b:d2:ae:bd:a8:5e:4d:3c:5f:c7:50:7c:09:d6:c8:dc:af:
         70:57:06:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org