Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/1/323830343a376466303a3a2f33322d3438203d3e20323731353932.roa
File:                     323830343a376466303a3a2f33322d3438203d3e20323731353932.roa (raw, json)
Hash identifier:          FTeyzRwnDh9Ybd0GLo7dc7AlaS878cQR977EQLLi7Eo=
Subject key identifier:   6C:20:B0:39:19:71:56:19:7C:71:EB:D3:60:F7:92:16:C9:84:EA:A7
Certificate issuer:       /CN=69B63BF9487BCADD2E9FC37921B9F274ECFEBA7B
Certificate serial:       3940EEF55A1A879F78BDCDF86031EFF67F8D654D
Authority key identifier: 69:B6:3B:F9:48:7B:CA:DD:2E:9F:C3:79:21:B9:F2:74:EC:FE:BA:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/69B63BF9487BCADD2E9FC37921B9F274ECFEBA7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/1/323830343a376466303a3a2f33322d3438203d3e20323731353932.roa
Signing time:             Tue 16 May 2023 11:58:46 +0000
ROA not before:           Tue 16 May 2023 11:53:46 +0000
ROA not after:            Tue 14 May 2024 11:58:46 +0000
asID:                     271592
IP address blocks:        2804:7df0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:40:ee:f5:5a:1a:87:9f:78:bd:cd:f8:60:31:ef:f6:7f:8d:65:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69B63BF9487BCADD2E9FC37921B9F274ECFEBA7B
        Validity
            Not Before: May 16 11:53:46 2023 GMT
            Not After : May 14 11:58:46 2024 GMT
        Subject: CN=6C20B039197156197C71EBD360F79216C984EAA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f4:7f:8b:c2:51:45:22:77:de:32:22:2a:2d:
                    aa:3e:a3:ca:82:0a:3b:74:bd:c3:5d:13:10:fc:e4:
                    3a:4b:94:b1:f9:e4:b8:c2:2f:aa:93:38:4d:18:98:
                    a1:fd:30:b1:92:a6:05:6e:a3:2e:8c:21:f6:0e:ea:
                    1e:c6:67:21:85:ac:45:42:fc:ca:5b:43:b4:2d:6f:
                    53:0d:a3:55:48:71:4b:19:16:b5:c1:0d:43:a5:43:
                    ae:0f:0b:90:8e:98:43:ee:53:58:d6:cc:57:7b:b4:
                    7d:40:e7:94:32:91:ac:57:a8:dc:16:4d:65:ea:b7:
                    55:26:f5:12:24:2f:ee:ba:ca:dd:a5:0b:90:fc:55:
                    3d:5d:80:b0:94:2a:37:c0:46:0e:31:a0:12:2d:5f:
                    1d:31:73:41:d0:24:70:3e:6b:5d:ff:69:67:6f:32:
                    e4:29:3f:94:2f:4a:ba:ae:18:64:d8:ed:33:47:41:
                    9b:cc:10:89:c3:4c:25:6d:a3:3e:ba:e5:4d:ea:22:
                    bf:71:a9:a4:de:96:92:9a:48:82:97:d3:0a:c9:1f:
                    be:cf:85:7d:97:a0:3d:5d:5c:ca:c1:67:c5:04:f0:
                    5e:96:74:62:0f:1a:c5:23:39:c3:a1:6f:b8:91:76:
                    fb:96:a2:73:11:5d:f2:00:30:c5:2f:60:4f:56:dd:
                    b0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:20:B0:39:19:71:56:19:7C:71:EB:D3:60:F7:92:16:C9:84:EA:A7
            X509v3 Authority Key Identifier:
                keyid:69:B6:3B:F9:48:7B:CA:DD:2E:9F:C3:79:21:B9:F2:74:EC:FE:BA:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/1/69B63BF9487BCADD2E9FC37921B9F274ECFEBA7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/69B63BF9487BCADD2E9FC37921B9F274ECFEBA7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/1/323830343a376466303a3a2f33322d3438203d3e20323731353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7df0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:ed:7c:fd:32:e7:d1:25:e9:87:39:d6:a6:01:06:1c:18:37:
         91:54:b3:15:fa:57:03:4e:9b:e3:06:4f:a8:b7:c1:06:dd:a6:
         4c:e3:44:7c:ef:54:1c:3f:f1:5a:e8:3d:34:14:a9:76:82:89:
         c2:b7:d1:eb:4b:8f:9e:96:a5:d5:6a:15:2d:a7:0c:83:1e:d9:
         40:16:6b:c0:9d:5d:d8:4e:0f:34:34:dd:ea:1b:7e:42:50:eb:
         9a:da:ce:6e:da:8e:c7:f6:86:d6:8d:b5:48:b7:1d:58:02:88:
         50:c1:d0:5e:58:e7:1f:66:69:3e:ff:25:bf:02:26:5a:4d:d3:
         b1:06:c4:95:98:1e:fc:37:12:96:f4:a3:5e:e3:43:b4:94:47:
         16:fa:86:a8:2f:4d:38:99:c5:ec:af:99:4b:cc:09:01:ca:b8:
         74:4b:54:cb:b3:5d:52:71:2b:d8:2a:86:c4:80:4c:5b:14:61:
         fc:a1:07:cf:9f:1a:ec:bf:2d:4b:1d:01:ca:16:fc:dc:26:b2:
         ee:b7:4b:ae:d7:3f:66:ee:8f:48:2f:d6:f3:57:17:42:69:69:
         65:50:50:e4:13:bf:91:dc:0e:32:e9:c9:13:b3:7f:07:48:95:
         d3:92:1c:dc:de:1e:b6:32:4d:d5:55:6d:d9:0c:0f:f7:1d:91:
         ff:04:07:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org