Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/323830343a363036303a633030303a3a2f33342d313238203d3e20323639313633.roa
File:                     323830343a363036303a633030303a3a2f33342d313238203d3e20323639313633.roa (raw, json)
Hash identifier:          /Q/BTf97qX1WgXYx8CLgwBxk6uY69zSNmuYjAENtPeQ=
Subject key identifier:   F2:77:CD:A8:5E:16:6C:BE:43:7B:BA:35:1E:05:BB:87:95:77:09:55
Certificate issuer:       /CN=66F12A0CECEF1C562203A473D5B993BF54BBA70A
Certificate serial:       0409462641B98090C37865936B78088573438567
Authority key identifier: 66:F1:2A:0C:EC:EF:1C:56:22:03:A4:73:D5:B9:93:BF:54:BB:A7:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66F12A0CECEF1C562203A473D5B993BF54BBA70A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/323830343a363036303a633030303a3a2f33342d313238203d3e20323639313633.roa
Signing time:             Tue 05 Sep 2023 23:08:32 +0000
ROA not before:           Tue 05 Sep 2023 23:03:32 +0000
ROA not after:            Tue 03 Sep 2024 23:08:32 +0000
asID:                     269163
IP address blocks:        2804:6060:c000::/34 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:09:46:26:41:b9:80:90:c3:78:65:93:6b:78:08:85:73:43:85:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66F12A0CECEF1C562203A473D5B993BF54BBA70A
        Validity
            Not Before: Sep  5 23:03:32 2023 GMT
            Not After : Sep  3 23:08:32 2024 GMT
        Subject: CN=F277CDA85E166CBE437BBA351E05BB8795770955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8a:38:66:ce:d0:40:71:d0:4e:62:0b:1e:a8:
                    4e:73:af:8b:20:12:06:08:15:25:ab:56:97:a1:ca:
                    a5:af:d2:a1:eb:7c:cc:e9:62:4b:86:2d:08:87:ba:
                    ed:77:bc:91:77:d4:d4:69:26:82:a5:24:51:e0:6b:
                    7b:1b:6e:fb:3a:bf:67:e2:0e:55:80:d9:cc:eb:de:
                    2a:be:97:21:f5:a7:5b:54:cb:f7:a7:77:6b:47:56:
                    06:85:74:de:e2:a8:70:1c:a6:a1:cc:41:bc:d9:11:
                    e9:5e:d1:57:19:33:99:ed:0d:3f:f3:de:fb:ae:0a:
                    58:d5:8e:63:6d:8d:0e:38:f8:e0:de:45:0f:3b:4f:
                    91:8d:e7:42:39:dc:40:75:29:0d:7d:7f:8a:9d:ff:
                    a0:6c:1f:8b:b2:f5:49:32:98:f3:a9:20:b8:2f:4e:
                    a4:ba:f4:a4:f7:ec:20:a5:bb:3f:ae:a8:2a:24:e5:
                    67:aa:4e:fe:97:12:44:aa:5e:b5:b7:de:de:4b:84:
                    44:ba:5f:64:1e:26:1f:a0:3a:6c:5a:6d:6b:37:6e:
                    3d:1b:8e:31:a5:84:6d:f9:2d:1f:88:8e:b8:74:c5:
                    9e:e0:1f:f5:77:37:1e:94:b4:3f:22:a2:a2:ca:df:
                    34:66:ed:4e:37:2d:90:15:80:8a:f0:27:aa:0b:82:
                    df:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:77:CD:A8:5E:16:6C:BE:43:7B:BA:35:1E:05:BB:87:95:77:09:55
            X509v3 Authority Key Identifier:
                keyid:66:F1:2A:0C:EC:EF:1C:56:22:03:A4:73:D5:B9:93:BF:54:BB:A7:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/66F12A0CECEF1C562203A473D5B993BF54BBA70A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66F12A0CECEF1C562203A473D5B993BF54BBA70A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/323830343a363036303a633030303a3a2f33342d313238203d3e20323639313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6060:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         9c:96:4d:ed:eb:c7:17:40:02:61:6c:03:13:e8:5a:ee:d1:2a:
         34:e0:a9:18:51:b2:4f:d5:e0:99:51:aa:04:7d:7f:65:bd:6a:
         58:bf:26:61:4e:59:73:0e:ce:90:aa:8e:bb:d4:e0:8c:0c:60:
         24:b7:a2:70:1f:4f:10:74:29:a0:47:9f:6b:22:e6:71:52:5e:
         45:1b:86:f4:99:69:01:1b:ac:4a:d1:46:75:06:ed:3f:27:61:
         6c:c7:df:66:9d:10:5a:e5:5f:85:eb:14:03:2f:ea:0c:f2:7c:
         bd:8c:4a:f5:14:ce:35:c2:07:07:0c:ad:4b:e3:50:dd:df:09:
         91:af:d0:09:fc:92:56:78:28:a7:99:54:35:4d:02:d9:5f:cd:
         ec:c9:f8:f6:5e:f4:2b:84:40:00:80:35:4d:74:09:69:61:5a:
         d4:0d:4e:7f:7e:57:b5:eb:cf:99:57:78:40:4f:72:02:ad:63:
         50:4a:25:46:7f:40:92:7b:d4:bd:be:f9:4c:72:bc:9e:c8:0e:
         3b:b8:7b:40:60:ae:4f:2a:cf:46:c5:f9:d8:44:93:9a:eb:f5:
         af:42:ae:56:9e:65:03:57:67:0a:eb:d0:2a:3a:1b:a0:61:ef:
         c0:cb:4e:69:ab:19:2d:c8:53:d2:b0:52:c1:d0:ab:55:96:a0:
         c2:7e:bf:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org