Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/323830343a316361303a3330303a3a2f34302d3430203d3e203631363636.roa
File:                     323830343a316361303a3330303a3a2f34302d3430203d3e203631363636.roa (raw, json)
Hash identifier:          NzGV8R3PPFmhEM2gjy/POTWNh/V9TKxZnVMA8bxogDA=
Subject key identifier:   87:5A:67:9B:24:77:98:53:72:A1:00:2E:53:3C:02:17:FE:03:B5:22
Certificate issuer:       /CN=CE6ECE6859413800410D4C90D373B1EF989710AE
Certificate serial:       7879966B1EDF76533B0FB30E91CC9945256EFCB6
Authority key identifier: CE:6E:CE:68:59:41:38:00:41:0D:4C:90:D3:73:B1:EF:98:97:10:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE6ECE6859413800410D4C90D373B1EF989710AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/323830343a316361303a3330303a3a2f34302d3430203d3e203631363636.roa
Signing time:             Thu 14 Dec 2023 13:20:56 +0000
ROA not before:           Thu 14 Dec 2023 13:15:56 +0000
ROA not after:            Thu 12 Dec 2024 13:20:56 +0000
asID:                     61666
IP address blocks:        2804:1ca0:300::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:79:96:6b:1e:df:76:53:3b:0f:b3:0e:91:cc:99:45:25:6e:fc:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE6ECE6859413800410D4C90D373B1EF989710AE
        Validity
            Not Before: Dec 14 13:15:56 2023 GMT
            Not After : Dec 12 13:20:56 2024 GMT
        Subject: CN=875A679B2477985372A1002E533C0217FE03B522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6f:c3:99:8d:fb:41:bb:63:87:64:a6:a7:72:
                    34:ae:66:48:1e:cb:42:e5:37:eb:85:aa:c5:7d:86:
                    2c:dc:36:e2:c2:17:e3:ee:e2:76:c6:0b:8e:5c:e8:
                    76:5a:d7:ea:a7:be:3a:fe:00:ae:0b:92:a7:0d:ff:
                    cb:03:32:61:1b:5e:08:16:66:51:95:2c:4c:9e:8d:
                    9a:b4:5e:1f:99:73:38:bb:3c:bf:89:c1:d9:cd:9d:
                    fe:09:9c:40:98:d5:b8:ff:5a:c8:76:0f:cf:21:0a:
                    ed:2f:88:bf:01:34:b7:7a:60:55:69:c5:01:30:c6:
                    f3:99:55:24:67:80:b9:07:7a:37:e1:7b:83:37:fa:
                    32:22:0e:84:ef:b0:ff:d4:e6:81:89:4c:12:f4:0a:
                    9a:76:63:82:a6:41:46:77:99:ec:09:fe:f9:5d:8f:
                    37:d8:2c:3e:de:ec:0f:b7:ed:72:1e:d7:ca:8f:5a:
                    1c:bc:05:5e:68:83:a2:e8:29:22:32:fd:75:cd:e0:
                    c7:84:14:b1:8e:db:a7:27:01:da:3c:13:2b:6c:21:
                    ae:63:3c:bb:f7:47:42:07:f1:2c:15:49:ee:8c:29:
                    f0:f8:7b:42:23:ee:37:e7:c4:3f:42:d4:20:45:e5:
                    b8:74:29:fc:5e:2e:24:42:2c:2a:9b:b1:20:cd:b9:
                    2f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:5A:67:9B:24:77:98:53:72:A1:00:2E:53:3C:02:17:FE:03:B5:22
            X509v3 Authority Key Identifier:
                keyid:CE:6E:CE:68:59:41:38:00:41:0D:4C:90:D3:73:B1:EF:98:97:10:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/CE6ECE6859413800410D4C90D373B1EF989710AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE6ECE6859413800410D4C90D373B1EF989710AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/323830343a316361303a3330303a3a2f34302d3430203d3e203631363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ca0:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         58:fd:b8:24:f2:9b:b2:25:91:e3:df:12:e4:8e:3f:37:7b:5e:
         9b:7c:1e:2d:bc:f2:f5:fe:66:2d:93:ba:d9:39:84:e9:c8:42:
         cc:15:61:ff:27:03:89:10:2e:0f:dd:be:0c:b3:84:94:16:ed:
         17:11:f1:15:06:30:41:8f:41:26:23:b7:6b:0e:45:c2:88:29:
         0d:3b:98:89:fd:a8:17:76:d3:dc:b1:b1:40:26:4f:ca:26:c4:
         87:0c:60:e5:73:dd:8f:53:b2:80:29:99:ed:1d:00:0b:0d:c5:
         f9:9e:d3:29:46:6b:58:53:e2:c6:10:42:76:10:77:38:cb:d5:
         cd:c9:61:27:45:cb:41:d2:c4:4a:e3:e6:5a:0f:33:b9:ac:89:
         d9:db:36:97:35:48:6d:86:15:ad:b9:31:a0:35:3c:9f:86:c8:
         87:6f:78:ef:74:86:4f:88:89:32:21:b8:2b:04:1b:19:77:ba:
         11:2f:f0:0f:c1:c2:f0:38:1a:d1:e3:32:48:ab:a4:67:81:96:
         94:d8:97:4a:0a:ce:ae:71:e9:c5:54:f2:1e:f7:27:3c:e8:f2:
         02:ff:fe:ac:fe:23:67:46:13:5a:47:24:a2:a1:55:49:88:91:
         66:90:b8:40:5a:48:1e:4a:40:61:eb:cd:74:d4:f6:40:95:a3:
         82:7c:0c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org