Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/323830343a366530343a313030303a3a2f33362d3336203d3e20323730353730.roa
File:                     323830343a366530343a313030303a3a2f33362d3336203d3e20323730353730.roa (raw, json)
Hash identifier:          t53dy9z3uC0nNI4SeSqjL6UkZ4ipLV06JwZbTq8xPC4=
Subject key identifier:   77:0C:F6:1E:B1:31:A6:3D:43:2D:AE:1F:B0:2D:4E:BE:57:BA:EE:3C
Certificate issuer:       /CN=A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC
Certificate serial:       6656AA97DA57C8D0BA683AEA6DDAF32F780313BE
Authority key identifier: A3:C9:C0:71:6D:9C:7E:79:1D:CE:72:34:CA:4C:2D:FD:11:B8:76:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/323830343a366530343a313030303a3a2f33362d3336203d3e20323730353730.roa
Signing time:             Tue 23 May 2023 17:19:45 +0000
ROA not before:           Tue 23 May 2023 17:14:45 +0000
ROA not after:            Tue 21 May 2024 17:19:45 +0000
asID:                     270570
IP address blocks:        2804:6e04:1000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:56:aa:97:da:57:c8:d0:ba:68:3a:ea:6d:da:f3:2f:78:03:13:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC
        Validity
            Not Before: May 23 17:14:45 2023 GMT
            Not After : May 21 17:19:45 2024 GMT
        Subject: CN=770CF61EB131A63D432DAE1FB02D4EBE57BAEE3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:33:d0:fa:fd:cf:86:bf:98:c1:2d:74:54:3c:
                    9b:ec:18:c0:a3:3a:1c:4d:d5:f4:3a:bf:06:dd:4f:
                    12:9f:f6:1d:25:21:c3:99:2e:7c:79:48:65:e0:9b:
                    a1:e5:95:e6:6f:c4:82:2d:9b:e3:2d:b1:37:90:b5:
                    2c:1a:d0:ea:c6:25:98:bd:fc:8c:b5:bf:0d:97:91:
                    d5:6b:45:8c:69:d9:df:8a:65:62:ff:ca:7f:af:75:
                    63:6a:1b:bb:2c:51:86:03:2c:70:99:96:2e:8e:70:
                    c6:38:02:ea:83:61:4e:ad:cd:7d:36:ca:cd:5a:a0:
                    43:02:c3:4f:37:4e:08:38:29:c8:a8:a3:d8:67:d5:
                    ed:e1:44:92:66:e9:67:88:ee:0a:b6:8b:95:7b:aa:
                    51:34:50:47:39:a2:b8:0e:81:23:08:0b:01:00:ae:
                    84:6a:f9:95:68:b6:25:d9:b1:d0:25:e9:5d:db:94:
                    7d:46:52:81:60:98:ce:4a:00:bb:58:07:37:35:21:
                    d9:4b:d3:b1:0c:05:53:ae:7f:55:ff:6b:c1:41:e7:
                    9f:b2:97:a3:0c:99:a8:75:71:60:db:4b:64:d8:f3:
                    d7:9f:56:44:22:45:aa:95:77:91:ed:6f:eb:32:de:
                    b7:66:d5:c3:28:bf:0b:7c:6e:94:5d:bf:45:44:01:
                    6c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:0C:F6:1E:B1:31:A6:3D:43:2D:AE:1F:B0:2D:4E:BE:57:BA:EE:3C
            X509v3 Authority Key Identifier:
                keyid:A3:C9:C0:71:6D:9C:7E:79:1D:CE:72:34:CA:4C:2D:FD:11:B8:76:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/323830343a366530343a313030303a3a2f33362d3336203d3e20323730353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e04:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8f:77:06:54:a2:dc:af:7c:52:52:6f:79:f7:4c:20:5f:85:6d:
         6f:02:56:b1:2b:80:6d:a3:cf:47:4a:4f:d8:f7:40:03:90:83:
         bf:ac:af:e2:fe:68:c2:19:5f:32:33:0b:cc:fa:83:e5:a4:b5:
         ce:88:20:a2:61:8a:f0:c6:38:89:80:0b:0e:a1:ac:26:d2:a9:
         33:de:08:62:32:af:7d:9b:5c:06:78:d3:f8:1f:62:ec:02:d7:
         a2:29:c7:9f:ad:66:8c:4e:10:02:f9:9e:72:a5:2a:c9:aa:ce:
         ff:db:65:e1:88:8d:45:91:3e:39:6a:b3:fd:7d:63:98:77:63:
         b4:3f:bb:2b:08:7c:4c:02:98:a1:43:ba:86:ac:23:f8:b3:c0:
         a2:a2:a7:a0:02:cd:cd:c9:f9:23:93:30:ce:3b:a4:8b:c6:9a:
         8f:2b:5a:b1:e2:b8:65:65:a9:e4:53:28:00:01:dd:bb:60:68:
         c0:8a:b5:ee:02:98:51:12:dc:17:1d:c8:88:7b:4c:be:fd:5c:
         5b:60:87:09:1f:71:4a:d0:5c:99:88:f0:2c:32:2a:bc:54:ff:
         68:5b:85:23:62:c0:b2:ea:9d:26:b9:51:b6:32:61:4b:66:f0:
         63:b1:f1:b1:c9:cb:44:0c:be:11:bd:be:41:42:77:35:48:de:
         10:e6:2d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:44 2024 by rpki-client on console-fra.rpki-client.org