Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/323830343a353365633a633030303a3a2f33342d3334203d3e20323638363136.roa
File:                     323830343a353365633a633030303a3a2f33342d3334203d3e20323638363136.roa (raw, json)
Hash identifier:          gm7bb38ewmT4vLkjYXcUL6pQfbfV5wlAcD3CWn0ok+M=
Subject key identifier:   D6:88:66:70:4F:C8:91:7E:62:FE:18:DC:B7:96:04:F4:92:07:67:41
Certificate issuer:       /CN=420734A528D0DD1EA09F6BB591E3B023EDB9EDDA
Certificate serial:       261284FE1CC5EE0CF1FC83E9AB5252253534696D
Authority key identifier: 42:07:34:A5:28:D0:DD:1E:A0:9F:6B:B5:91:E3:B0:23:ED:B9:ED:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/420734A528D0DD1EA09F6BB591E3B023EDB9EDDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/323830343a353365633a633030303a3a2f33342d3334203d3e20323638363136.roa
Signing time:             Tue 05 Sep 2023 14:04:36 +0000
ROA not before:           Tue 05 Sep 2023 13:59:36 +0000
ROA not after:            Tue 03 Sep 2024 14:04:36 +0000
asID:                     268616
IP address blocks:        2804:53ec:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:12:84:fe:1c:c5:ee:0c:f1:fc:83:e9:ab:52:52:25:35:34:69:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=420734A528D0DD1EA09F6BB591E3B023EDB9EDDA
        Validity
            Not Before: Sep  5 13:59:36 2023 GMT
            Not After : Sep  3 14:04:36 2024 GMT
        Subject: CN=D68866704FC8917E62FE18DCB79604F492076741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8d:97:a5:cf:af:72:fe:a9:02:4a:e1:2b:1e:
                    f6:6d:6c:5f:df:89:9c:21:63:19:90:2d:10:00:45:
                    2f:19:ee:4f:4a:f2:c9:94:82:4e:a7:a7:4d:84:0b:
                    29:0d:79:12:45:4a:6b:44:84:ee:67:7d:7f:83:76:
                    24:b7:b8:cd:ea:d5:01:86:40:96:56:d9:28:59:34:
                    78:f3:d5:b3:25:79:6e:64:ea:1a:1d:3d:bc:2f:59:
                    d6:ee:f5:ba:41:c4:f1:6b:a6:b4:bc:d9:2e:f6:95:
                    92:23:88:46:ce:7b:84:08:58:d6:a8:f8:13:3a:a0:
                    3a:be:99:ed:ec:e4:6e:59:91:be:a8:07:ab:25:c9:
                    8a:cd:32:3b:eb:5f:04:16:57:a1:b3:29:b0:67:cf:
                    97:22:d1:25:fb:03:b5:c0:d4:1c:5a:f9:d6:c4:3f:
                    aa:18:00:59:7f:19:c2:b9:3b:70:5b:71:78:22:cc:
                    4e:fa:c9:9f:be:5c:51:97:61:c3:58:04:de:4d:6b:
                    bd:98:6a:ab:6a:5c:ed:ae:a3:09:4b:52:89:35:58:
                    f7:bd:a7:48:b2:48:60:5a:86:dd:31:09:ae:ed:b1:
                    f8:80:db:90:c8:b4:23:bf:ee:a5:1d:91:7a:e3:9b:
                    4c:13:4f:b3:bb:e6:50:ff:4e:6e:f4:9d:36:ea:98:
                    f5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:88:66:70:4F:C8:91:7E:62:FE:18:DC:B7:96:04:F4:92:07:67:41
            X509v3 Authority Key Identifier:
                keyid:42:07:34:A5:28:D0:DD:1E:A0:9F:6B:B5:91:E3:B0:23:ED:B9:ED:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/420734A528D0DD1EA09F6BB591E3B023EDB9EDDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/420734A528D0DD1EA09F6BB591E3B023EDB9EDDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/323830343a353365633a633030303a3a2f33342d3334203d3e20323638363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:53ec:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5d:d4:1b:80:ee:8f:9f:e3:e8:f9:81:eb:b7:86:06:1f:95:49:
         26:65:b1:90:71:ed:66:a3:79:68:c7:26:83:7d:ba:dd:28:e0:
         3f:6c:b5:41:47:8c:c0:0d:1f:39:1d:3d:d6:a3:56:8f:cd:61:
         53:16:87:b2:ac:bb:ca:79:38:19:3c:01:c8:09:e7:5f:0d:bd:
         2a:2a:48:ce:50:06:20:d5:0b:1c:87:41:2d:48:21:44:cd:26:
         cf:36:82:3e:25:da:d1:7d:0e:3b:5b:bb:36:6f:f5:69:41:9c:
         78:c8:40:34:b9:27:c4:99:cd:0d:fb:21:c9:6f:20:c4:a6:29:
         3f:33:bf:cc:b6:27:20:e5:a6:14:59:03:28:38:4d:25:8c:d3:
         0b:19:bd:85:29:8f:84:8f:93:b6:a3:0b:42:e6:eb:e6:d9:ac:
         d1:30:aa:b9:6f:f8:34:7b:30:aa:5c:39:d5:33:28:50:8b:17:
         0e:49:a5:51:60:94:21:50:1f:ea:e7:db:9a:d2:6d:b4:51:7c:
         1d:7d:09:db:26:85:3c:d3:3c:96:1e:39:95:18:85:d6:32:66:
         17:d0:a4:ab:4f:9d:fb:d6:37:30:47:ff:ca:5a:49:4e:b9:78:
         f2:04:e4:fc:88:3d:85:9a:88:8a:a6:94:38:2e:d2:9e:89:f2:
         f5:fb:96:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org