Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/323830343a6663633a633030303a3a2f33342d3334203d3e20323633363034.roa
File:                     323830343a6663633a633030303a3a2f33342d3334203d3e20323633363034.roa (raw, json)
Hash identifier:          SgtGBkpomYBBHehvqp9s6gZbQr/zNQPFojGZM4GQ8co=
Subject key identifier:   43:B9:38:EA:19:85:38:6C:10:3F:F7:ED:FB:7B:AA:FB:E2:EF:3F:2E
Certificate issuer:       /CN=C67929131596EB65AF046524615104BDF0EDC74D
Certificate serial:       5712BD904D86BAA55EB4725DE65AF366A623AD50
Authority key identifier: C6:79:29:13:15:96:EB:65:AF:04:65:24:61:51:04:BD:F0:ED:C7:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C67929131596EB65AF046524615104BDF0EDC74D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/323830343a6663633a633030303a3a2f33342d3334203d3e20323633363034.roa
Signing time:             Wed 13 Sep 2023 20:24:02 +0000
ROA not before:           Wed 13 Sep 2023 20:19:02 +0000
ROA not after:            Wed 11 Sep 2024 20:24:02 +0000
asID:                     263604
IP address blocks:        2804:fcc:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:12:bd:90:4d:86:ba:a5:5e:b4:72:5d:e6:5a:f3:66:a6:23:ad:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67929131596EB65AF046524615104BDF0EDC74D
        Validity
            Not Before: Sep 13 20:19:02 2023 GMT
            Not After : Sep 11 20:24:02 2024 GMT
        Subject: CN=43B938EA1985386C103FF7EDFB7BAAFBE2EF3F2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6b:12:a0:42:e2:12:0e:d5:fe:d3:2d:98:01:
                    a2:09:20:d6:e2:5f:79:d6:46:da:0d:b4:d2:0c:0c:
                    e3:a1:38:5e:fe:0f:e7:b9:ad:09:03:6f:c8:d8:1b:
                    3e:6f:5e:b8:20:c0:62:37:ec:c0:1a:4c:14:6e:86:
                    8f:87:9d:e4:10:08:4e:49:ec:cc:62:b0:7f:57:24:
                    33:44:b6:32:94:6f:3d:95:60:fd:2a:64:cb:6c:31:
                    3b:eb:3c:c4:09:37:3c:f0:0c:c9:24:54:99:b8:33:
                    02:e4:62:27:ed:87:d6:37:03:57:9a:28:cd:8f:5c:
                    d7:76:9e:81:86:01:a2:5e:b3:55:84:8a:a1:60:f3:
                    07:c9:ae:14:7b:8f:47:5f:ce:9d:31:4a:39:13:5a:
                    89:84:e3:4c:a9:d3:44:21:c6:f5:f9:b7:f1:48:d9:
                    c3:60:87:19:4b:b0:20:d3:a7:56:03:63:8b:84:a4:
                    ce:92:ae:37:68:e3:de:9f:37:bc:ec:73:4e:95:f1:
                    0d:4b:a7:c6:8a:ba:a2:db:13:bf:f0:c6:6e:a9:04:
                    70:e0:1e:1c:92:e3:44:5f:52:3e:95:85:54:6d:61:
                    0c:0f:61:c2:3b:02:93:b0:ed:74:ec:0c:23:da:12:
                    a2:6a:44:55:92:e0:35:52:57:59:a5:ee:0a:ce:e0:
                    88:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B9:38:EA:19:85:38:6C:10:3F:F7:ED:FB:7B:AA:FB:E2:EF:3F:2E
            X509v3 Authority Key Identifier:
                keyid:C6:79:29:13:15:96:EB:65:AF:04:65:24:61:51:04:BD:F0:ED:C7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/C67929131596EB65AF046524615104BDF0EDC74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C67929131596EB65AF046524615104BDF0EDC74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/323830343a6663633a633030303a3a2f33342d3334203d3e20323633363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fcc:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         85:14:fe:50:74:91:da:bc:35:51:63:90:c4:ae:df:2d:e4:58:
         fd:e6:cd:5d:64:fe:c3:9a:9a:d1:fd:4c:0d:9e:c6:76:a1:8f:
         22:10:80:60:e5:21:ff:c5:f8:77:5e:3f:49:e9:36:2c:e1:c5:
         33:2d:ed:a1:d8:ed:e8:1d:d2:b1:c2:04:68:58:e2:bc:68:f7:
         86:13:0b:e2:74:56:df:dc:de:40:81:ff:e8:d5:b3:1c:26:32:
         f5:25:3b:66:80:0a:62:98:27:6a:84:fc:2f:72:8f:26:1c:30:
         ff:e0:45:ef:db:27:fa:ca:43:f6:41:83:8e:76:43:37:8a:21:
         d6:63:3e:5a:5c:10:63:4d:29:62:01:9d:27:0a:fa:50:32:b7:
         2d:72:b7:a9:0c:0e:58:86:d0:e1:9e:79:da:83:d2:04:96:72:
         29:7d:56:50:21:2b:f2:d3:12:97:df:0e:5d:8f:ea:c6:d6:5b:
         5a:ce:2d:8f:ab:15:22:88:f9:11:fe:aa:bb:a0:6a:fe:7a:b9:
         fb:e1:13:96:aa:59:62:3c:55:9d:d8:1f:24:b7:2c:34:fb:a7:
         d7:aa:81:de:0d:5e:2b:54:a6:b0:fb:fa:c2:46:5a:0a:dd:55:
         0a:61:c6:35:ae:af:06:83:38:e5:41:d7:33:58:31:64:b2:cb:
         93:03:a9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org