Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/323830343a6663633a3a2f33342d3334203d3e20323633363034.roa
File:                     323830343a6663633a3a2f33342d3334203d3e20323633363034.roa (raw, json)
Hash identifier:          iuONPjeV51/kMvXHzoHh22NeZ1bGK2g1ynePB46Xcpw=
Subject key identifier:   13:B8:46:1D:AB:99:DB:C9:5B:E0:60:B5:68:3F:71:6C:82:E8:28:0A
Certificate issuer:       /CN=C67929131596EB65AF046524615104BDF0EDC74D
Certificate serial:       37BBC53C326E850F702C23C6EFA574854F48025F
Authority key identifier: C6:79:29:13:15:96:EB:65:AF:04:65:24:61:51:04:BD:F0:ED:C7:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C67929131596EB65AF046524615104BDF0EDC74D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/323830343a6663633a3a2f33342d3334203d3e20323633363034.roa
Signing time:             Wed 13 Sep 2023 20:23:51 +0000
ROA not before:           Wed 13 Sep 2023 20:18:51 +0000
ROA not after:            Wed 11 Sep 2024 20:23:51 +0000
asID:                     263604
IP address blocks:        2804:fcc::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:bb:c5:3c:32:6e:85:0f:70:2c:23:c6:ef:a5:74:85:4f:48:02:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67929131596EB65AF046524615104BDF0EDC74D
        Validity
            Not Before: Sep 13 20:18:51 2023 GMT
            Not After : Sep 11 20:23:51 2024 GMT
        Subject: CN=13B8461DAB99DBC95BE060B5683F716C82E8280A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ac:7a:db:56:07:bd:35:1b:40:89:6a:cf:9c:
                    f8:fd:5f:df:2d:cf:ed:b9:d1:ff:6c:da:d3:be:6f:
                    d3:53:a7:61:16:0a:82:ae:19:88:d3:ff:c0:da:37:
                    87:dd:a5:a8:97:1f:b5:e6:83:00:a8:12:f3:6c:3e:
                    16:69:00:90:8f:46:85:34:db:64:4c:12:74:31:10:
                    d8:7e:2c:6a:65:1e:24:e7:33:c1:8f:61:14:92:40:
                    a4:88:8c:85:f6:d4:32:ce:06:71:d6:4c:4f:95:24:
                    ff:a4:0c:50:99:ca:8c:c1:71:5f:c4:ec:44:7c:a0:
                    22:0f:cf:d0:be:95:40:bd:e4:f3:e3:9f:80:94:d0:
                    c6:cf:3a:cc:26:f9:71:6a:b5:2a:2a:87:c2:5a:ca:
                    99:1d:25:26:95:5e:55:b3:94:ab:08:66:c7:39:0b:
                    82:c2:2a:73:fc:ba:e0:85:99:35:ad:14:94:5e:df:
                    56:c7:47:92:1e:53:26:cf:2a:d7:16:e6:ef:3c:6d:
                    02:78:35:91:4e:e5:15:46:42:f2:9b:03:4e:29:a6:
                    de:79:48:44:fe:47:64:cd:28:c3:1e:54:c6:ff:58:
                    9d:62:a6:28:a2:3f:01:e7:ef:99:ad:b1:12:d7:08:
                    5c:34:4a:dd:56:c6:cb:be:99:9a:4d:3f:f2:a0:ed:
                    27:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B8:46:1D:AB:99:DB:C9:5B:E0:60:B5:68:3F:71:6C:82:E8:28:0A
            X509v3 Authority Key Identifier:
                keyid:C6:79:29:13:15:96:EB:65:AF:04:65:24:61:51:04:BD:F0:ED:C7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/C67929131596EB65AF046524615104BDF0EDC74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C67929131596EB65AF046524615104BDF0EDC74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/323830343a6663633a3a2f33342d3334203d3e20323633363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fcc::/34

    Signature Algorithm: sha256WithRSAEncryption
         85:31:40:04:49:55:cb:6c:2a:3a:c2:44:0b:0b:f0:0e:46:91:
         3d:e7:a5:61:03:0f:f5:70:2c:da:d7:ef:05:17:f1:3f:db:55:
         c8:e3:93:32:c6:a8:4a:85:d6:ef:93:85:5e:b8:04:1d:58:d2:
         05:9c:60:fa:e0:56:10:bb:45:5c:54:7b:a8:5f:f1:17:d9:9e:
         b9:6a:4c:9b:ed:11:46:3d:55:27:05:eb:16:18:b4:ed:07:9b:
         d8:5b:ce:c1:14:77:5b:7e:88:86:7c:59:7b:b9:54:73:57:31:
         b4:6e:a3:79:f8:9c:d1:27:10:78:4c:ba:69:f8:50:39:4d:34:
         df:83:55:5c:f6:23:e1:96:56:30:a7:cc:5b:6a:c5:20:59:43:
         d6:04:07:3e:ff:b9:3a:9b:05:19:f3:96:64:21:f3:3e:fd:e3:
         93:a6:e1:06:c8:da:9c:82:52:42:2e:48:d4:9d:8e:d0:08:64:
         7e:51:bf:bd:47:18:b7:73:55:08:ca:a6:3f:9f:6a:bb:be:af:
         a4:58:cd:69:23:e9:1c:87:e7:b0:eb:76:8c:41:98:25:0a:8f:
         d8:c2:a6:8c:38:e9:57:20:50:05:e6:24:01:1e:f4:f3:4e:3d:
         83:ae:2b:a3:a5:fa:a9:0c:6d:34:92:24:32:6b:d5:66:b1:a9:
         9f:c0:f1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org