Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/323830343a333432343a3a2f33342d3334203d3e20323635343338.roa
File:                     323830343a333432343a3a2f33342d3334203d3e20323635343338.roa (raw, json)
Hash identifier:          IFzQGtLvq+RX7JSFY2EJBjowfd8c8FAtwsWSLIv7WWs=
Subject key identifier:   84:3A:1A:72:7F:49:DD:F4:79:A7:7A:0A:10:9F:F8:3C:18:D0:16:FF
Certificate issuer:       /CN=F195F9C596ADB608642A133DA471E40CFD879710
Certificate serial:       0D52DBDDA5BE74AD02E5EC46AE5D8018AB360AD3
Authority key identifier: F1:95:F9:C5:96:AD:B6:08:64:2A:13:3D:A4:71:E4:0C:FD:87:97:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F195F9C596ADB608642A133DA471E40CFD879710.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/323830343a333432343a3a2f33342d3334203d3e20323635343338.roa
Signing time:             Tue 21 Nov 2023 15:56:05 +0000
ROA not before:           Tue 21 Nov 2023 15:51:05 +0000
ROA not after:            Tue 19 Nov 2024 15:56:05 +0000
asID:                     265438
IP address blocks:        2804:3424::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:52:db:dd:a5:be:74:ad:02:e5:ec:46:ae:5d:80:18:ab:36:0a:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F195F9C596ADB608642A133DA471E40CFD879710
        Validity
            Not Before: Nov 21 15:51:05 2023 GMT
            Not After : Nov 19 15:56:05 2024 GMT
        Subject: CN=843A1A727F49DDF479A77A0A109FF83C18D016FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:40:df:b5:54:ab:07:e2:82:db:77:0f:1b:e9:
                    ef:d8:80:c5:81:33:2d:d8:e6:d6:c2:70:81:4c:40:
                    11:6b:3b:fe:e1:23:9a:e4:cd:a3:e1:99:97:79:d4:
                    4c:ea:75:e6:85:55:d3:79:bc:b3:40:e8:a1:e7:30:
                    9f:cb:34:7f:c2:35:6d:3b:6a:3d:66:db:e7:90:49:
                    b7:d8:07:15:33:71:e9:ff:1a:8d:f0:aa:6a:e8:17:
                    7b:61:63:eb:b6:3b:14:aa:68:bc:fd:58:3b:95:6b:
                    08:ec:9a:a0:40:20:51:35:9d:3b:05:02:b1:64:17:
                    d2:cb:02:6a:fe:15:c6:0d:99:67:73:ec:bd:e3:ba:
                    c8:05:13:d3:72:89:eb:e1:5c:b8:cd:e8:4c:ef:c5:
                    bf:bb:cf:ba:45:b7:46:43:74:67:da:99:db:0c:a2:
                    0d:50:ab:98:a4:7a:cf:31:48:93:cf:3c:06:c0:4a:
                    83:ac:ea:3c:47:45:62:16:07:bc:c1:72:e5:ff:01:
                    d3:04:02:49:2d:64:16:b5:1f:8b:29:ac:77:fe:4b:
                    a9:55:85:5e:2f:23:52:d8:fd:c6:43:53:78:5a:4e:
                    ff:2c:41:8b:37:38:c4:fe:81:54:c6:55:25:55:23:
                    07:5e:ea:4a:2c:63:74:15:f4:88:c7:bf:63:9f:96:
                    ba:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:3A:1A:72:7F:49:DD:F4:79:A7:7A:0A:10:9F:F8:3C:18:D0:16:FF
            X509v3 Authority Key Identifier:
                keyid:F1:95:F9:C5:96:AD:B6:08:64:2A:13:3D:A4:71:E4:0C:FD:87:97:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/F195F9C596ADB608642A133DA471E40CFD879710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F195F9C596ADB608642A133DA471E40CFD879710.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/323830343a333432343a3a2f33342d3334203d3e20323635343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3424::/34

    Signature Algorithm: sha256WithRSAEncryption
         25:75:df:22:98:9a:7e:17:7f:fa:db:a4:66:e8:47:2c:9f:3c:
         6a:54:01:0d:24:dc:9a:df:18:e8:f3:c9:82:2d:50:e0:2d:b3:
         1c:7f:21:9a:81:24:a5:5a:e8:05:9e:1d:a5:34:e2:98:d4:64:
         59:bb:9d:2e:58:02:81:60:01:7f:d1:b7:fa:b7:6c:e6:ac:ad:
         de:05:f8:75:d0:5c:66:8d:65:3b:71:b9:29:cb:97:3b:f1:f4:
         36:ce:3b:aa:fb:ba:94:31:be:6f:d0:4d:18:e4:48:b0:0f:90:
         d4:da:bb:2e:e3:b2:ec:a6:61:ff:dd:c5:34:2b:29:e2:2e:39:
         ad:5e:0d:3b:46:d0:c5:dc:e2:76:5d:6b:dd:87:84:2a:12:54:
         b7:3a:9b:1b:86:e6:d6:c3:d0:a6:87:af:d5:02:69:b6:08:86:
         61:ce:80:da:53:3d:b9:83:04:87:88:b3:e8:0f:d1:5b:e1:d2:
         c3:01:f7:eb:dd:b3:0b:03:39:34:7e:e9:cb:47:37:a2:5d:ed:
         2b:29:4d:6e:68:8b:32:86:dc:e8:2a:3b:65:7a:25:5b:52:30:
         9b:33:35:2e:fb:78:25:96:82:b9:fe:20:c1:16:c6:f2:c4:89:
         67:3f:22:ae:e6:6d:a8:32:e5:45:f6:7a:dc:b3:ad:6f:ee:b7:
         05:43:63:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:16 2024 by rpki-client on console-ams.rpki-client.org