Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/1/323830343a376435633a383030303a3a2f33342d3334203d3e20323731353536.roa
File:                     323830343a376435633a383030303a3a2f33342d3334203d3e20323731353536.roa (raw, json)
Hash identifier:          wT5TzUgUpIx5K7YYMrcUI3FwVPeRnGGCIquEm3ZyIgc=
Subject key identifier:   FF:30:97:2B:E0:D6:FE:5B:33:09:2E:6F:6B:60:61:11:C5:19:69:40
Certificate issuer:       /CN=C9957CD229D4E9BB85F11780704835FC3E2E08E3
Certificate serial:       2C025BAE65C6C6342B26B7B748F6553D37188FBF
Authority key identifier: C9:95:7C:D2:29:D4:E9:BB:85:F1:17:80:70:48:35:FC:3E:2E:08:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9957CD229D4E9BB85F11780704835FC3E2E08E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/1/323830343a376435633a383030303a3a2f33342d3334203d3e20323731353536.roa
Signing time:             Wed 03 Apr 2024 18:58:28 +0000
ROA not before:           Wed 03 Apr 2024 18:53:28 +0000
ROA not after:            Wed 02 Apr 2025 18:58:28 +0000
asID:                     271556
IP address blocks:        2804:7d5c:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:02:5b:ae:65:c6:c6:34:2b:26:b7:b7:48:f6:55:3d:37:18:8f:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9957CD229D4E9BB85F11780704835FC3E2E08E3
        Validity
            Not Before: Apr  3 18:53:28 2024 GMT
            Not After : Apr  2 18:58:28 2025 GMT
        Subject: CN=FF30972BE0D6FE5B33092E6F6B606111C5196940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:dd:16:54:4f:29:9d:24:f2:aa:2e:27:03:e5:
                    9c:c4:04:79:a2:ce:ca:80:7e:10:b7:47:e0:04:76:
                    38:7c:b0:1b:66:b7:11:84:d2:1b:62:17:46:f0:7d:
                    62:0a:b2:b9:e9:3b:25:e7:34:c5:6f:98:a4:7c:76:
                    e3:c0:05:73:0a:ed:3f:c1:ac:04:4f:3c:01:42:8a:
                    6d:90:44:ee:0e:ba:e0:81:6a:6a:d5:44:a5:10:50:
                    1e:a2:c5:4c:bc:de:7a:2e:5b:d0:c3:ea:a6:36:7d:
                    cd:ba:c3:b5:2f:7a:cd:4c:9e:b5:ca:ed:02:c1:0a:
                    07:ea:32:59:82:4c:46:ae:2b:d8:10:e7:a0:9c:39:
                    50:0a:c3:96:92:42:79:5e:aa:17:55:2f:08:05:75:
                    b8:1e:90:dd:1b:b5:82:2f:cb:6c:9e:17:0e:6c:0a:
                    3f:e3:81:39:0a:82:b6:1c:f2:45:00:45:aa:8a:83:
                    a7:4f:81:9a:e1:67:6d:58:2a:83:e3:dd:fb:07:02:
                    52:ba:c7:f3:90:77:24:51:08:1f:b4:7c:80:9c:2b:
                    96:d2:8a:8e:de:cc:6e:74:50:3f:08:d6:90:3c:7c:
                    7b:e5:8b:09:55:24:ef:04:15:a8:aa:81:2b:08:49:
                    80:80:bb:1b:52:b3:7d:48:6b:d7:c0:3b:92:d4:d4:
                    03:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:30:97:2B:E0:D6:FE:5B:33:09:2E:6F:6B:60:61:11:C5:19:69:40
            X509v3 Authority Key Identifier:
                keyid:C9:95:7C:D2:29:D4:E9:BB:85:F1:17:80:70:48:35:FC:3E:2E:08:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/1/C9957CD229D4E9BB85F11780704835FC3E2E08E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9957CD229D4E9BB85F11780704835FC3E2E08E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/1/323830343a376435633a383030303a3a2f33342d3334203d3e20323731353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d5c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         45:69:0b:91:97:a5:bf:11:e3:45:9b:48:98:fb:0f:a3:69:1e:
         b6:eb:80:9b:22:5a:f5:97:32:11:b8:dd:37:88:f4:98:fc:3f:
         23:fa:14:12:81:81:d8:58:56:38:4f:77:43:da:77:14:99:f5:
         ec:93:d1:06:ea:84:4d:a7:dd:8a:a7:f6:04:8f:9f:0f:6a:67:
         d4:fd:c3:b2:9a:e6:04:f7:3c:bd:80:3a:d9:5e:eb:f4:1f:a1:
         07:06:48:f4:ca:b3:ae:df:11:00:70:57:32:45:cb:11:e5:8f:
         d5:13:2f:de:6a:f8:0d:6c:aa:18:d8:32:80:26:ca:37:65:41:
         ef:ae:dd:a8:09:8e:1c:1b:54:96:bb:10:cf:a5:41:c2:d6:a1:
         a8:ee:e1:22:71:b2:fc:eb:3b:2e:86:55:79:ed:e1:05:a8:92:
         8e:31:8a:62:a5:ac:6d:4a:c4:df:98:19:c3:99:82:c0:e2:e6:
         81:7f:cc:b2:4c:22:c8:5a:ef:4e:fe:7b:4d:ee:63:e6:21:90:
         ce:78:f8:56:56:89:a2:3a:db:9f:28:6a:84:dc:4a:11:db:0b:
         5d:5c:35:97:1f:8a:e4:74:1c:70:b4:83:3a:29:44:e2:cd:ed:
         5d:46:59:a8:9d:41:89:63:24:9a:75:b0:25:bd:88:02:ce:63:
         86:fa:e4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org