Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/0/323830343a366635303a343030303a3a2f33342d3334203d3e20323730363532.roa
File:                     323830343a366635303a343030303a3a2f33342d3334203d3e20323730363532.roa (raw, json)
Hash identifier:          pGtshGB23fzRd1/imTq6sWBPOsuzT8Jvqqnmm6RiypU=
Subject key identifier:   1C:08:FC:22:95:68:9A:23:2A:52:8E:54:88:30:3B:45:14:3C:45:2C
Certificate issuer:       /CN=D892296CC5D537587815493CE7B655C9469444D7
Certificate serial:       4999A12102D310DB44B6B2DB86C06E6946C591DE
Authority key identifier: D8:92:29:6C:C5:D5:37:58:78:15:49:3C:E7:B6:55:C9:46:94:44:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D892296CC5D537587815493CE7B655C9469444D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/0/323830343a366635303a343030303a3a2f33342d3334203d3e20323730363532.roa
Signing time:             Sat 16 Dec 2023 09:36:53 +0000
ROA not before:           Sat 16 Dec 2023 09:31:53 +0000
ROA not after:            Sat 14 Dec 2024 09:36:53 +0000
asID:                     270652
IP address blocks:        2804:6f50:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:99:a1:21:02:d3:10:db:44:b6:b2:db:86:c0:6e:69:46:c5:91:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D892296CC5D537587815493CE7B655C9469444D7
        Validity
            Not Before: Dec 16 09:31:53 2023 GMT
            Not After : Dec 14 09:36:53 2024 GMT
        Subject: CN=1C08FC2295689A232A528E5488303B45143C452C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5a:18:a4:63:74:ea:a2:8f:a2:00:a3:3f:70:
                    2b:89:3d:b4:9b:35:ae:f2:9c:a2:7b:f5:71:d8:24:
                    5f:71:fe:92:94:13:63:46:37:9a:70:0d:0f:60:59:
                    e9:67:09:a5:53:7b:a7:12:ec:19:db:97:96:3a:1b:
                    8e:3a:52:50:9d:5c:8a:8a:ba:ac:cf:11:c3:c5:f9:
                    c4:2b:e7:73:f2:f1:b4:32:60:fb:ee:c1:7e:35:4d:
                    90:b0:c7:43:d7:a0:af:37:78:db:f9:23:10:a1:86:
                    ea:ea:04:35:ab:88:f0:3c:d8:41:c5:b2:ed:e6:69:
                    bf:5b:8f:27:8d:c1:b8:5d:8f:fb:01:bc:ff:d6:e2:
                    24:8b:fd:2a:2d:13:9b:a5:4a:2c:2b:0c:02:d5:6c:
                    d6:42:d7:31:2e:36:32:ee:ea:f2:7f:55:e0:66:ef:
                    d5:91:ee:8d:58:fb:d2:cc:70:45:e4:73:36:4a:7b:
                    76:d5:a4:0b:a4:11:24:a6:b1:f5:24:9a:5d:cd:5f:
                    8c:1b:f9:94:80:c0:53:d1:e6:11:35:4a:c6:8e:de:
                    93:13:2c:3a:ca:6d:7d:a2:90:04:ad:25:90:b7:c9:
                    f4:07:31:ec:c5:6a:48:a8:87:f2:63:7c:9a:fc:3d:
                    60:f6:ef:9a:b9:22:38:38:8c:c8:d8:68:ff:f6:0f:
                    ae:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:08:FC:22:95:68:9A:23:2A:52:8E:54:88:30:3B:45:14:3C:45:2C
            X509v3 Authority Key Identifier:
                keyid:D8:92:29:6C:C5:D5:37:58:78:15:49:3C:E7:B6:55:C9:46:94:44:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/0/D892296CC5D537587815493CE7B655C9469444D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D892296CC5D537587815493CE7B655C9469444D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/0/323830343a366635303a343030303a3a2f33342d3334203d3e20323730363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f50:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7a:b9:c7:95:b4:5e:4c:cc:ea:00:31:cc:17:22:d8:4b:49:ec:
         0d:04:66:0a:92:ea:3a:dd:ad:59:7c:bb:84:11:04:84:78:b3:
         5d:d8:9a:e1:8d:14:64:3b:bf:26:9e:5e:64:e5:08:9a:7f:f9:
         df:4c:9a:78:26:36:39:fa:09:1f:f6:35:82:07:74:84:52:92:
         64:ab:07:4b:49:16:be:8c:c3:35:22:8c:59:99:f7:95:d1:e9:
         0a:d9:d5:af:10:e1:39:14:dd:a6:d4:e2:de:ef:b5:0e:e5:94:
         70:c0:21:d8:9e:bd:eb:9a:76:d2:79:73:6b:58:d7:83:48:e6:
         3b:41:fd:80:a0:02:b9:94:27:a8:dc:cd:85:f9:66:fc:1f:48:
         7c:15:a6:4d:34:06:6a:f2:dc:5e:9a:b5:7a:24:8d:1c:8e:17:
         8a:35:b1:b9:f6:81:92:32:6c:4d:ea:c0:d3:cd:e2:ac:4d:f4:
         04:9f:6a:fe:32:5a:d8:3b:aa:e9:3c:7e:12:14:65:5f:f8:53:
         be:9d:10:0f:e8:bc:02:31:33:ba:d9:72:ca:1d:94:e0:35:83:
         6c:54:2a:c8:c4:31:53:ba:fe:c4:43:b3:07:0d:24:79:c3:85:
         94:d9:3e:13:4c:9e:50:d6:0b:0f:2f:50:26:8a:8b:53:f2:fa:
         f4:23:ea:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:23 2024 by rpki-client on console-ams.rpki-client.org