Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/323830343a343134343a633030303a3a2f33342d3334203d3e20323637343234.roa
File:                     323830343a343134343a633030303a3a2f33342d3334203d3e20323637343234.roa (raw, json)
Hash identifier:          54yfo1Op0+roXHmxuAGX3tc42KD1eZL2Cph4pfit73I=
Subject key identifier:   36:00:62:44:15:51:15:71:48:62:21:0D:AF:99:98:74:FE:D5:D8:1E
Certificate issuer:       /CN=A7D1E69F57807C1ED02CA45971AD14EDA3931F2E
Certificate serial:       697F26EDD342BD4E165FF299EF5ED313B299176E
Authority key identifier: A7:D1:E6:9F:57:80:7C:1E:D0:2C:A4:59:71:AD:14:ED:A3:93:1F:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/323830343a343134343a633030303a3a2f33342d3334203d3e20323637343234.roa
Signing time:             Mon 25 Sep 2023 21:44:00 +0000
ROA not before:           Mon 25 Sep 2023 21:39:00 +0000
ROA not after:            Mon 23 Sep 2024 21:44:00 +0000
asID:                     267424
IP address blocks:        2804:4144:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:7f:26:ed:d3:42:bd:4e:16:5f:f2:99:ef:5e:d3:13:b2:99:17:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7D1E69F57807C1ED02CA45971AD14EDA3931F2E
        Validity
            Not Before: Sep 25 21:39:00 2023 GMT
            Not After : Sep 23 21:44:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6c:ee:65:97:59:28:cd:19:43:51:25:ed:cb:
                    66:2e:80:9d:27:d0:af:23:3d:c1:ac:c9:57:44:31:
                    48:ae:bf:1c:ef:2e:0f:3e:a3:73:40:83:b7:3e:c1:
                    6b:90:5c:d7:c2:c8:74:c5:b7:d1:d1:47:18:96:81:
                    8d:8b:16:80:43:bd:f7:2f:a7:a4:df:fe:6f:c3:03:
                    a1:44:a7:55:0e:5a:81:cb:41:0e:30:9a:21:c7:58:
                    c0:97:a8:ab:5b:99:82:3a:68:b0:cc:a3:9a:68:5c:
                    24:dd:aa:b5:1e:98:d8:bf:1a:0f:fc:9f:12:e1:9b:
                    45:66:d3:bd:b2:62:05:5d:9f:83:5d:02:97:61:cf:
                    1c:1b:bf:d0:c7:8c:ab:74:9f:a6:78:75:38:70:75:
                    01:95:5b:7f:23:ca:f0:02:f5:07:1e:9a:71:b1:65:
                    f8:fa:d7:0c:75:3e:4f:12:63:d7:91:09:23:cc:17:
                    f6:41:aa:2b:9d:89:f0:76:74:e2:89:8c:77:d9:15:
                    c5:27:b1:52:78:fb:a7:a2:69:4e:33:47:9b:58:cb:
                    07:b1:0f:00:c1:34:15:18:78:9c:e7:bb:84:19:c0:
                    bc:2c:0d:66:44:d2:d0:c8:75:5b:fb:06:e9:22:2b:
                    65:6b:f2:4f:1d:42:dc:0f:c2:62:32:a4:9f:23:ce:
                    e6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:00:62:44:15:51:15:71:48:62:21:0D:AF:99:98:74:FE:D5:D8:1E
            X509v3 Authority Key Identifier:
                keyid:A7:D1:E6:9F:57:80:7C:1E:D0:2C:A4:59:71:AD:14:ED:A3:93:1F:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/323830343a343134343a633030303a3a2f33342d3334203d3e20323637343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4144:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         87:e6:1b:08:9e:3e:b8:4e:55:11:c7:99:aa:28:a2:c3:2d:74:
         79:d3:81:4d:ee:e3:27:5d:8d:f9:32:5d:d1:6c:1e:8c:ee:11:
         15:3f:4c:15:6a:11:2a:55:44:16:3e:f0:43:53:84:9d:2e:65:
         57:72:87:6c:5f:42:b9:0b:35:de:f1:6b:10:d6:df:cc:f5:dc:
         14:89:5f:27:4e:d9:a8:c6:c4:ac:86:a1:e2:4d:bc:a7:c0:d4:
         e1:1b:8f:da:34:c9:39:33:1f:12:b7:ea:02:de:56:52:11:d3:
         b3:05:9e:13:0a:94:8e:2c:fa:e0:b7:bd:bb:cd:f5:46:c4:67:
         73:7e:19:b7:14:5e:fb:53:d7:01:11:fe:69:a4:bc:73:fd:24:
         e3:a7:18:27:59:50:05:7f:ec:20:af:3e:4b:eb:04:b0:54:14:
         a9:44:82:8b:06:e6:47:7e:85:11:47:a6:1d:31:63:67:a9:c7:
         1d:3a:18:02:f5:89:09:eb:23:72:9c:e4:d6:eb:6e:12:ca:f1:
         6d:e8:72:1a:b6:77:86:8a:f2:9b:80:27:0e:ab:7e:97:a7:e2:
         90:ab:ee:18:fe:3a:2a:ed:3d:4e:f4:92:8d:07:9e:ab:48:9c:
         b9:c9:f3:67:b7:e1:ca:8a:be:10:d0:aa:3f:51:77:96:be:d6:
         fc:79:30:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org