Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/323830343a323939303a383030303a3a2f33342d3334203d3e20323634303232.roa
File:                     323830343a323939303a383030303a3a2f33342d3334203d3e20323634303232.roa (raw, json)
Hash identifier:          Fv/s5wSg7QM4pDBu7bW8tfA9+yn6/dVxjSEAswGPOgY=
Subject key identifier:   A5:0A:D7:99:87:67:DD:F4:0C:93:AC:C2:46:79:E0:D8:C7:3C:46:49
Certificate issuer:       /CN=670A20A98738BBE9772713B95005BD85F6B31348
Certificate serial:       3FFA9B4FCD16C3F51D94F54D713F9D96C36322C3
Authority key identifier: 67:0A:20:A9:87:38:BB:E9:77:27:13:B9:50:05:BD:85:F6:B3:13:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/670A20A98738BBE9772713B95005BD85F6B31348.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/323830343a323939303a383030303a3a2f33342d3334203d3e20323634303232.roa
Signing time:             Wed 03 Jan 2024 12:10:32 +0000
ROA not before:           Wed 03 Jan 2024 12:05:32 +0000
ROA not after:            Wed 01 Jan 2025 12:10:32 +0000
asID:                     264022
IP address blocks:        2804:2990:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:fa:9b:4f:cd:16:c3:f5:1d:94:f5:4d:71:3f:9d:96:c3:63:22:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=670A20A98738BBE9772713B95005BD85F6B31348
        Validity
            Not Before: Jan  3 12:05:32 2024 GMT
            Not After : Jan  1 12:10:32 2025 GMT
        Subject: CN=A50AD7998767DDF40C93ACC24679E0D8C73C4649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fe:3c:e5:2e:78:73:3c:72:58:96:43:70:23:
                    dd:74:89:8f:f9:76:37:03:d6:30:fa:6f:36:ac:6e:
                    50:91:83:76:9d:2d:62:24:6f:a3:67:5d:a3:c6:dc:
                    5f:2a:82:18:c7:e1:c5:9a:40:fc:f7:b5:f3:56:85:
                    7f:73:d6:e0:82:d7:5c:11:c4:02:fe:a9:9d:de:f1:
                    1c:35:cb:ee:18:a9:87:ff:c0:88:11:94:86:f5:41:
                    38:a8:86:06:03:7d:a1:28:d2:48:1b:d6:5a:ad:af:
                    a5:e1:1d:5c:9a:0a:97:08:19:6d:d2:17:a3:d1:30:
                    06:47:c0:2e:c1:d5:59:a8:d7:34:27:ee:f3:28:a8:
                    37:76:6a:a9:ba:1b:06:d4:ad:d8:3f:0b:e9:03:19:
                    bb:7e:07:07:3b:b7:3e:b1:c6:3c:a7:52:32:4e:b6:
                    c1:6f:83:8e:bb:17:99:d3:68:c3:a6:00:31:fd:46:
                    b7:e8:7d:57:ce:cf:d1:b4:b6:9d:76:d5:bd:30:8e:
                    52:31:a9:13:e9:5b:16:6c:93:cb:0c:8d:b6:08:25:
                    50:fe:b8:ef:0c:02:93:04:20:86:60:8f:a2:e6:0d:
                    b1:2d:42:8e:4b:f6:33:48:24:2e:a0:87:c1:a1:38:
                    be:0e:67:8f:d5:14:d3:c4:54:70:0c:37:a6:79:7b:
                    53:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:0A:D7:99:87:67:DD:F4:0C:93:AC:C2:46:79:E0:D8:C7:3C:46:49
            X509v3 Authority Key Identifier:
                keyid:67:0A:20:A9:87:38:BB:E9:77:27:13:B9:50:05:BD:85:F6:B3:13:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/670A20A98738BBE9772713B95005BD85F6B31348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/670A20A98738BBE9772713B95005BD85F6B31348.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/323830343a323939303a383030303a3a2f33342d3334203d3e20323634303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2990:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4a:f9:18:08:89:35:53:0c:87:06:fc:77:aa:11:7d:6f:1e:eb:
         2f:a0:32:8e:3c:25:35:08:d2:26:89:b8:5c:c3:f0:31:4b:d7:
         e2:56:e1:23:5d:09:fd:af:bc:e0:91:58:97:d0:ed:78:af:2b:
         9d:0e:73:65:03:bf:6c:eb:8e:f6:57:f6:11:81:28:10:98:93:
         ba:20:68:b2:be:f3:31:1a:3c:34:56:eb:1f:0c:fd:ed:b3:a3:
         31:60:fc:39:82:9d:e8:c1:86:5a:e8:6c:b1:a9:ac:19:d1:0b:
         33:5f:b3:b6:a1:5f:b4:53:e1:14:1c:97:73:94:4f:ab:18:1a:
         bc:df:9f:f7:9e:11:1d:ea:b0:aa:29:44:d0:77:1a:8f:3f:e6:
         e5:1b:d5:cc:00:2c:6f:d6:47:7c:a3:a0:80:c8:15:d5:28:99:
         b3:58:36:91:b1:d8:1c:82:32:26:25:3e:34:95:03:32:5f:15:
         35:a0:48:40:e1:01:03:af:4a:92:6a:87:cf:e1:28:e7:fe:84:
         6a:a2:07:a2:77:f0:e6:c9:ce:cd:bb:c0:40:ad:4f:9f:e4:6d:
         18:4f:b5:49:fc:a9:5c:38:ba:9f:b5:cf:db:88:ba:6c:61:9c:
         f6:7a:2a:0a:3a:14:a9:ad:b0:b6:c6:ac:b4:ee:75:f4:f9:34:
         83:b7:2c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org