Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a3a2f33342d3334203d3e203631363738.roa
File:                     323830343a316364343a3a2f33342d3334203d3e203631363738.roa (raw, json)
Hash identifier:          CQ/QBAsHz3Q10QVpQedwqZAK3ZS1XbCKYAcAg1kYoSM=
Subject key identifier:   F3:25:35:EA:C4:B8:D2:E7:52:1D:CD:DB:7F:2F:3A:2B:27:0C:5E:69
Certificate issuer:       /CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
Certificate serial:       68E6226AA4F4AA568CF3595E775A5DD7CDDD35E0
Authority key identifier: 5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a3a2f33342d3334203d3e203631363738.roa
Signing time:             Tue 24 Oct 2023 12:43:14 +0000
ROA not before:           Tue 24 Oct 2023 12:38:14 +0000
ROA not after:            Tue 22 Oct 2024 12:43:14 +0000
asID:                     61678
IP address blocks:        2804:1cd4::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:e6:22:6a:a4:f4:aa:56:8c:f3:59:5e:77:5a:5d:d7:cd:dd:35:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
        Validity
            Not Before: Oct 24 12:38:14 2023 GMT
            Not After : Oct 22 12:43:14 2024 GMT
        Subject: CN=F32535EAC4B8D2E7521DCDDB7F2F3A2B270C5E69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:82:4f:89:f4:87:db:e0:8c:4e:23:29:ab:d3:
                    54:98:96:d3:2c:30:1d:36:8a:bd:39:d4:d9:42:a1:
                    ef:66:e9:93:6e:a5:2e:f7:76:6d:09:62:e7:62:0f:
                    77:ec:79:9b:30:7d:fa:3c:72:a7:d9:92:1c:06:5e:
                    04:5b:18:10:d1:e3:e2:59:25:55:e6:28:a6:ed:0a:
                    3e:9b:ff:d9:31:d3:b1:cb:e9:e6:bb:e3:91:fa:f1:
                    8a:fd:d4:64:e8:e7:66:6c:29:da:66:f9:83:0b:5e:
                    6b:c6:b1:ea:5e:75:73:48:10:92:c2:6a:8b:a2:39:
                    05:76:ee:a0:4e:c6:1a:55:ac:14:1e:98:19:9d:45:
                    d5:24:5a:a3:4a:de:f4:39:10:64:f8:20:78:e5:49:
                    6c:af:24:77:65:e9:5f:11:e9:d8:30:33:74:f5:9a:
                    a3:d3:be:7c:26:f6:83:45:d5:e0:e9:52:b0:59:67:
                    f7:50:7f:46:d2:fd:5a:03:12:31:de:7c:3b:d5:32:
                    6d:69:40:bf:66:79:ee:41:7d:f5:a2:b8:aa:42:8c:
                    75:dd:4b:f8:6b:95:ac:0c:e5:dd:59:d7:7f:8e:d3:
                    84:c3:a1:57:4c:8f:90:08:e8:5e:10:19:25:ca:4f:
                    c2:7c:82:98:3e:a8:95:93:f8:90:94:70:2d:23:a2:
                    97:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:25:35:EA:C4:B8:D2:E7:52:1D:CD:DB:7F:2F:3A:2B:27:0C:5E:69
            X509v3 Authority Key Identifier:
                keyid:5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a3a2f33342d3334203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cd4::/34

    Signature Algorithm: sha256WithRSAEncryption
         16:66:92:7a:7d:36:25:74:c7:6b:0f:e4:e7:72:2a:9b:3e:71:
         05:fd:c4:72:43:e0:ed:1d:d7:c3:59:c5:b3:ac:96:af:fa:6c:
         c9:ce:ae:78:2a:36:e4:76:91:7f:70:24:20:2f:b5:01:ea:a1:
         88:7f:ca:20:9c:39:44:d1:89:97:0c:92:a1:ac:9a:9e:1e:d2:
         26:6b:d1:26:b1:23:44:71:41:fa:b6:95:e5:14:5f:84:47:a9:
         68:40:5b:6e:db:a4:99:7c:c1:2c:bc:56:b0:38:38:18:0a:b6:
         d4:ae:60:c3:4a:53:e7:45:58:a9:a8:d2:c4:0b:7c:f0:9b:eb:
         3b:63:5d:18:31:d9:6b:e2:0a:f4:4f:f1:80:7a:ee:89:60:f0:
         f4:cb:92:68:a1:62:ee:88:6b:de:e0:3b:85:11:25:1a:02:db:
         c9:53:cb:b5:66:be:cc:64:e2:88:98:9a:f8:7d:f8:d0:f7:9d:
         c1:a9:14:2b:d1:e1:80:c2:02:12:13:35:ac:88:66:cb:88:9b:
         c6:ff:6d:e8:b0:c3:0d:96:72:09:63:84:bc:0a:c4:68:1d:10:
         9f:84:fc:09:aa:fd:d9:20:db:1b:e6:3e:c3:87:b9:1e:e1:c0:
         41:6d:8f:48:38:8f:ee:97:2f:a0:c6:c8:31:e0:bc:4c:52:92:
         70:75:e7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org