Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/1/323830343a376435633a633030303a3a2f33342d3334203d3e20323731353536.roa
File:                     323830343a376435633a633030303a3a2f33342d3334203d3e20323731353536.roa (raw, json)
Hash identifier:          G2zlHxZMSloOY68Ka2D1IPo1yhnN3TKENzlslOwhW7o=
Subject key identifier:   50:C4:8D:EE:92:2C:04:00:D7:3F:F9:5C:FF:BF:5D:FD:A6:AF:69:7D
Certificate issuer:       /CN=C9957CD229D4E9BB85F11780704835FC3E2E08E3
Certificate serial:       72FDB9CE55DB3B8940E68AA3049DB90176ABE836
Authority key identifier: C9:95:7C:D2:29:D4:E9:BB:85:F1:17:80:70:48:35:FC:3E:2E:08:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9957CD229D4E9BB85F11780704835FC3E2E08E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/1/323830343a376435633a633030303a3a2f33342d3334203d3e20323731353536.roa
Signing time:             Wed 03 Apr 2024 18:58:27 +0000
ROA not before:           Wed 03 Apr 2024 18:53:27 +0000
ROA not after:            Wed 02 Apr 2025 18:58:27 +0000
asID:                     271556
IP address blocks:        2804:7d5c:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:fd:b9:ce:55:db:3b:89:40:e6:8a:a3:04:9d:b9:01:76:ab:e8:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9957CD229D4E9BB85F11780704835FC3E2E08E3
        Validity
            Not Before: Apr  3 18:53:27 2024 GMT
            Not After : Apr  2 18:58:27 2025 GMT
        Subject: CN=50C48DEE922C0400D73FF95CFFBF5DFDA6AF697D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:90:4e:1c:01:44:e9:1d:3f:42:63:72:ee:0f:
                    0d:cf:9b:fb:28:7a:e4:a1:0e:9a:2f:6b:77:6f:d1:
                    ae:f9:f2:1d:ca:ac:3d:ba:fa:d9:a5:49:d7:71:ad:
                    da:c5:e2:29:ce:12:3f:90:bd:1f:64:50:10:0d:c6:
                    bc:52:45:67:2e:38:b7:88:b2:12:e8:fa:14:1c:20:
                    32:03:27:73:ed:7b:b0:b7:20:95:d5:29:ac:32:42:
                    b3:f2:32:88:11:89:9d:0e:fc:92:9a:35:fb:9d:89:
                    20:3f:fd:ea:2e:ae:5c:8a:e9:0b:b6:4b:45:e2:67:
                    6c:5e:59:2f:22:28:77:72:9d:ac:a1:4a:c3:f6:aa:
                    47:82:7a:b6:db:7c:e7:95:02:16:f9:1b:3d:72:4f:
                    58:44:36:f3:a3:98:cf:a5:f0:b6:13:da:7d:3a:20:
                    63:16:6a:66:12:06:38:ba:79:1f:ea:ca:4b:12:6d:
                    6b:be:6a:84:e3:38:ba:76:c7:42:64:1b:f7:6f:e3:
                    e3:02:19:3d:f7:e9:11:28:c6:42:77:d6:79:99:5e:
                    f7:4d:de:ab:f2:e2:a2:9d:85:a0:75:67:1a:c8:64:
                    fa:63:0e:cd:6d:6a:db:77:96:d7:d4:40:4e:fa:15:
                    20:e3:da:b2:0e:83:67:5b:10:d5:95:d9:26:e5:cc:
                    69:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C4:8D:EE:92:2C:04:00:D7:3F:F9:5C:FF:BF:5D:FD:A6:AF:69:7D
            X509v3 Authority Key Identifier:
                keyid:C9:95:7C:D2:29:D4:E9:BB:85:F1:17:80:70:48:35:FC:3E:2E:08:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/1/C9957CD229D4E9BB85F11780704835FC3E2E08E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9957CD229D4E9BB85F11780704835FC3E2E08E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/1/323830343a376435633a633030303a3a2f33342d3334203d3e20323731353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d5c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         41:4b:06:b9:af:b5:5f:06:b7:28:9c:7d:c8:db:93:ba:47:4c:
         43:76:dc:14:c1:03:79:61:8e:0f:91:ff:7b:dd:5b:3d:1b:f1:
         f8:9b:c6:b3:10:75:40:21:51:e4:60:53:5a:e5:6a:a1:97:16:
         5d:2f:45:d5:aa:b0:ea:e5:71:3c:49:bf:b6:81:29:01:44:df:
         11:91:51:50:50:03:14:04:b1:4e:d0:c0:47:49:cb:40:51:2d:
         67:44:a4:1d:ca:7d:2b:52:3b:87:68:a9:72:ee:4d:2d:67:ef:
         d8:76:00:7c:c9:1e:57:bb:3d:cd:ec:ac:d3:95:f6:f6:14:b1:
         d1:94:f9:65:78:4a:64:a0:c2:c5:7f:a4:25:a4:d9:7f:fc:81:
         a8:90:8d:10:f3:83:cc:ee:18:ab:b2:0c:5c:d2:3c:65:01:64:
         a6:fe:a7:65:85:15:b8:57:13:9e:e8:a0:d8:7d:ec:e6:7c:a6:
         d4:92:fc:6e:a4:13:6c:47:78:07:02:cc:c0:47:fc:51:03:a0:
         f8:13:a8:4a:ec:2d:fa:24:c0:15:a5:74:3d:71:5f:0b:a6:6e:
         5b:50:1b:4e:63:36:71:d6:4d:e9:91:6f:05:ff:d1:91:40:20:
         9e:3c:c0:27:5f:31:15:8f:4b:74:cf:33:0f:6f:f4:75:8a:8c:
         a6:da:9f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:17 2024 by rpki-client on console-ams.rpki-client.org