Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/1/323830343a376435633a343030303a3a2f33342d3334203d3e20323731353536.roa
File:                     323830343a376435633a343030303a3a2f33342d3334203d3e20323731353536.roa (raw, json)
Hash identifier:          XwJTsnLiuchIlYgAK77tuh/lWR4IL9f1xhTm8SBut0E=
Subject key identifier:   18:83:56:04:AC:EB:EE:2E:E6:84:CB:E3:5C:AE:B0:27:4A:4A:A6:CD
Certificate issuer:       /CN=C9957CD229D4E9BB85F11780704835FC3E2E08E3
Certificate serial:       2CF35CEDEDA5404924C247AD6546F5AFB5434644
Authority key identifier: C9:95:7C:D2:29:D4:E9:BB:85:F1:17:80:70:48:35:FC:3E:2E:08:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9957CD229D4E9BB85F11780704835FC3E2E08E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/1/323830343a376435633a343030303a3a2f33342d3334203d3e20323731353536.roa
Signing time:             Wed 03 Apr 2024 18:58:27 +0000
ROA not before:           Wed 03 Apr 2024 18:53:27 +0000
ROA not after:            Wed 02 Apr 2025 18:58:27 +0000
asID:                     271556
IP address blocks:        2804:7d5c:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:f3:5c:ed:ed:a5:40:49:24:c2:47:ad:65:46:f5:af:b5:43:46:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9957CD229D4E9BB85F11780704835FC3E2E08E3
        Validity
            Not Before: Apr  3 18:53:27 2024 GMT
            Not After : Apr  2 18:58:27 2025 GMT
        Subject: CN=18835604ACEBEE2EE684CBE35CAEB0274A4AA6CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:56:3b:aa:59:b9:06:6f:4c:47:c4:e1:5c:7b:
                    9c:fa:6d:5e:2e:be:bb:c6:50:bb:dc:ba:86:06:a5:
                    fb:46:45:bf:c2:2b:fe:e8:17:46:51:c2:44:81:2f:
                    5a:c9:f3:87:a3:3c:95:47:49:4d:56:73:f3:98:5e:
                    79:4d:53:42:10:14:55:20:9b:34:9d:74:15:b0:ee:
                    57:fe:24:6f:9c:aa:06:6e:00:8f:db:1c:6d:0d:30:
                    a6:e2:19:85:48:e9:bb:cc:1a:4b:b1:b2:3c:9a:fe:
                    28:b1:f2:dc:65:40:19:86:40:83:c8:7f:56:3b:10:
                    2f:07:b6:27:a1:e0:e0:5b:eb:48:a5:63:f1:d4:2b:
                    7b:74:94:16:fd:ed:2f:c1:f3:69:a7:0d:12:7c:ef:
                    73:8e:87:a1:32:63:58:5f:12:aa:c1:cd:8e:0a:7e:
                    63:73:ab:cd:a0:93:79:6f:6b:73:7e:01:25:92:63:
                    ac:61:ee:eb:2a:f7:99:a3:1d:91:67:1e:36:af:a6:
                    24:af:b8:79:b6:77:d1:fe:6e:fb:25:53:95:76:c4:
                    61:4b:de:91:06:40:01:33:fd:dc:ba:42:54:a1:65:
                    85:60:36:47:0c:a7:82:1a:5f:80:d1:b0:21:c9:62:
                    bb:0c:1d:ec:a6:ef:45:74:ff:82:66:fb:df:df:d2:
                    56:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:83:56:04:AC:EB:EE:2E:E6:84:CB:E3:5C:AE:B0:27:4A:4A:A6:CD
            X509v3 Authority Key Identifier:
                keyid:C9:95:7C:D2:29:D4:E9:BB:85:F1:17:80:70:48:35:FC:3E:2E:08:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/1/C9957CD229D4E9BB85F11780704835FC3E2E08E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9957CD229D4E9BB85F11780704835FC3E2E08E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/1/323830343a376435633a343030303a3a2f33342d3334203d3e20323731353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d5c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6d:48:c2:e2:fd:b1:8b:ad:f3:1b:ee:04:cf:c2:27:74:ad:88:
         9c:92:04:55:17:f3:f6:36:14:15:39:fd:73:57:f1:15:48:04:
         ff:48:38:38:37:b2:72:dd:7b:bf:dd:1c:1a:5b:35:9e:b0:a5:
         8d:7f:b5:0d:73:2e:a4:c0:8e:d5:3c:79:42:d0:c7:2a:e8:3c:
         c7:23:6f:9c:df:74:63:56:fc:4c:4d:ca:8a:b4:79:ec:68:0b:
         12:a1:4c:14:46:4f:8b:96:77:b8:3f:3b:c5:7e:c5:c1:f2:2b:
         dc:31:ae:0d:36:1d:23:bd:89:f8:42:de:b7:d9:20:31:18:36:
         bd:03:e9:69:91:5d:da:d8:6a:12:95:dd:86:8b:1d:5c:57:5e:
         fc:0e:dc:ac:46:74:6e:0f:f5:17:77:2e:7a:58:37:12:04:fb:
         47:00:39:b2:bf:28:29:4a:da:37:54:2d:8e:bf:cc:5d:49:75:
         ec:fb:88:67:7f:de:ea:1c:57:90:92:89:fb:54:87:00:7f:3e:
         9c:b8:74:29:9e:a7:ea:63:28:a3:97:e3:70:7d:16:20:32:a3:
         5c:33:47:70:dd:08:42:e2:13:8e:17:6d:0a:91:52:ef:97:26:
         b4:de:5d:60:8a:77:1d:ef:e5:95:12:fc:29:77:db:5d:29:26:
         ef:a1:18:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:17 2024 by rpki-client on console-ams.rpki-client.org