Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/1/323830343a376435633a3a2f33342d3334203d3e20323731353536.roa
File:                     323830343a376435633a3a2f33342d3334203d3e20323731353536.roa (raw, json)
Hash identifier:          LsRnygsaY7S7aZfPvOkx3iamRltTwuE7JgZef3hMQoY=
Subject key identifier:   D6:70:13:0D:EA:F8:DC:E6:EF:F9:F1:40:8D:D4:7C:5F:C3:64:04:FF
Certificate issuer:       /CN=C9957CD229D4E9BB85F11780704835FC3E2E08E3
Certificate serial:       0B0B17E324B9F572A8C91EC5813060211FDC9BA9
Authority key identifier: C9:95:7C:D2:29:D4:E9:BB:85:F1:17:80:70:48:35:FC:3E:2E:08:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9957CD229D4E9BB85F11780704835FC3E2E08E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/1/323830343a376435633a3a2f33342d3334203d3e20323731353536.roa
Signing time:             Wed 03 Apr 2024 18:58:27 +0000
ROA not before:           Wed 03 Apr 2024 18:53:27 +0000
ROA not after:            Wed 02 Apr 2025 18:58:27 +0000
asID:                     271556
IP address blocks:        2804:7d5c::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:0b:17:e3:24:b9:f5:72:a8:c9:1e:c5:81:30:60:21:1f:dc:9b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9957CD229D4E9BB85F11780704835FC3E2E08E3
        Validity
            Not Before: Apr  3 18:53:27 2024 GMT
            Not After : Apr  2 18:58:27 2025 GMT
        Subject: CN=D670130DEAF8DCE6EFF9F1408DD47C5FC36404FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e0:d5:e6:ec:a7:d9:89:da:a9:29:eb:5a:29:
                    ea:4c:d1:aa:f4:e8:61:c5:8d:fa:0f:46:4d:a3:77:
                    2f:5b:76:2c:f7:71:34:63:7e:e2:3b:74:59:7f:5d:
                    5f:07:f0:fb:97:40:86:da:ce:b8:6c:05:d3:2c:f0:
                    bd:42:97:f2:f9:f5:35:7f:ae:c5:b8:21:99:47:0f:
                    d9:d7:a1:09:0c:f6:13:65:64:a5:cd:36:3e:ca:d3:
                    7e:a9:69:f4:ff:37:87:37:1a:5a:b5:3a:13:21:2e:
                    62:3a:84:5a:45:a0:4c:bd:b0:fb:7e:bc:54:84:98:
                    53:24:f4:d3:2a:56:d4:78:99:07:1a:02:43:4e:34:
                    7d:e0:ff:fd:16:58:44:58:5f:2c:92:ee:9e:d0:7c:
                    ee:fe:85:df:73:ef:af:3c:db:c7:1f:fe:ab:fd:c8:
                    3a:19:3a:1d:1d:9e:a8:51:04:a0:f2:cc:31:c6:e3:
                    2d:16:53:05:5f:a4:00:99:3e:53:dd:ec:49:35:6a:
                    df:0b:1d:a8:1e:75:3e:3b:a0:11:f8:25:3a:ec:31:
                    39:b0:3e:57:36:dc:8e:b3:eb:3b:90:71:fe:b9:1d:
                    93:ce:5f:9d:d2:42:b0:a9:31:12:ab:c3:f4:9f:87:
                    97:f0:cc:0d:fa:ad:a0:4a:d3:08:4b:cc:3f:8c:70:
                    28:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:70:13:0D:EA:F8:DC:E6:EF:F9:F1:40:8D:D4:7C:5F:C3:64:04:FF
            X509v3 Authority Key Identifier:
                keyid:C9:95:7C:D2:29:D4:E9:BB:85:F1:17:80:70:48:35:FC:3E:2E:08:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/1/C9957CD229D4E9BB85F11780704835FC3E2E08E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9957CD229D4E9BB85F11780704835FC3E2E08E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/1/323830343a376435633a3a2f33342d3334203d3e20323731353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d5c::/34

    Signature Algorithm: sha256WithRSAEncryption
         a7:77:bb:88:34:8a:c8:6c:87:8b:fd:8d:e9:51:59:70:70:95:
         db:47:43:28:cf:3e:ed:eb:d0:ff:77:55:1c:d4:70:08:2b:3a:
         d1:fc:51:65:85:15:72:a0:ad:fe:63:68:d5:be:54:81:3c:c7:
         76:79:42:00:22:aa:56:9d:6b:e0:21:92:91:c4:df:df:3f:87:
         39:32:51:22:f5:71:47:a5:08:5e:7d:5a:d8:43:dc:b3:1b:06:
         4a:12:f5:82:88:88:42:b6:c5:14:db:2f:db:e7:d5:07:e5:61:
         d7:43:ab:49:29:f0:1d:65:d7:b0:52:ca:27:57:20:30:f3:0f:
         02:80:94:4d:78:71:28:67:22:95:a3:32:08:75:ce:18:87:93:
         62:d8:a7:69:8e:d1:cc:3e:ee:90:4d:09:59:3b:22:f5:bf:a0:
         a4:11:e4:e8:68:54:ae:e3:d4:86:3a:54:a6:eb:f6:f2:08:e5:
         cc:eb:d2:64:60:80:32:c8:62:ef:16:e9:05:bf:c9:06:9b:7a:
         be:58:c1:88:f6:41:be:52:9e:d0:64:dc:e1:24:f8:31:80:e6:
         61:f4:c0:64:0b:3b:04:5c:d5:dc:ee:5e:16:9a:cc:9d:7e:b3:
         50:3f:83:c5:be:85:c2:21:de:ee:d7:6f:52:46:f0:2a:d4:5a:
         25:19:37:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:17 2024 by rpki-client on console-ams.rpki-client.org