Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/323830343a333062303a343030303a3a2f33342d3334203d3e20323634393639.roa
File:                     323830343a333062303a343030303a3a2f33342d3334203d3e20323634393639.roa (raw, json)
Hash identifier:          6eOi8yFPKeQMVgCBrU4gJMDbMu6iHwz/X9EaHzX02uo=
Subject key identifier:   06:6D:C3:E8:94:3B:F1:EA:BD:60:DD:4C:2C:38:75:BF:42:51:70:D5
Certificate issuer:       /CN=533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0
Certificate serial:       214919BD3F1359EAF6CF072C002AFA7DB3C83CB4
Authority key identifier: 53:3B:B6:1C:76:F4:3E:E8:E0:6A:E3:8A:7D:86:8E:45:B5:E9:F3:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/323830343a333062303a343030303a3a2f33342d3334203d3e20323634393639.roa
Signing time:             Tue 31 Oct 2023 16:06:01 +0000
ROA not before:           Tue 31 Oct 2023 16:01:01 +0000
ROA not after:            Tue 29 Oct 2024 16:06:01 +0000
asID:                     264969
IP address blocks:        2804:30b0:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:49:19:bd:3f:13:59:ea:f6:cf:07:2c:00:2a:fa:7d:b3:c8:3c:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0
        Validity
            Not Before: Oct 31 16:01:01 2023 GMT
            Not After : Oct 29 16:06:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:09:2a:e0:ee:3d:57:5d:5e:69:1c:13:06:9a:
                    90:a6:a2:0b:1a:85:58:3d:b5:07:b3:e7:29:1a:69:
                    ae:d0:c5:6a:5a:00:77:fb:53:b7:00:f8:e4:1e:12:
                    6e:83:c9:39:9f:b7:2d:ca:89:99:c0:bc:1f:b9:87:
                    37:db:94:be:c1:3b:be:f4:c7:08:7a:18:e8:a5:a2:
                    09:9a:81:26:73:3b:0b:0d:bb:0c:f8:ea:05:9e:c4:
                    f9:67:6e:89:55:44:3f:0e:64:e7:98:7f:c2:f4:f6:
                    6d:96:07:e7:6d:6b:78:b9:0b:24:1d:7d:9a:e7:e4:
                    62:e4:1c:e1:6b:41:07:6e:ba:98:8f:81:aa:8e:73:
                    e9:79:e8:2e:b0:3e:d0:77:7c:49:c2:a9:c9:c1:79:
                    14:52:59:4b:55:d4:91:11:95:9a:e0:6f:95:2e:05:
                    57:52:88:cd:20:fa:13:37:63:dd:56:72:0a:7d:98:
                    bf:6a:57:2a:e0:ca:5c:bb:02:51:07:38:94:54:9f:
                    64:6d:b3:f4:e8:66:04:bb:54:88:42:e5:55:7d:46:
                    40:04:0e:bd:13:49:c5:db:b1:af:d7:7c:8f:47:97:
                    ba:f1:6a:1b:1c:18:8c:19:a6:9e:4c:f9:ff:6f:14:
                    46:22:a4:89:c1:cb:3a:19:6b:1b:e6:4d:38:dd:e9:
                    ed:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6D:C3:E8:94:3B:F1:EA:BD:60:DD:4C:2C:38:75:BF:42:51:70:D5
            X509v3 Authority Key Identifier:
                keyid:53:3B:B6:1C:76:F4:3E:E8:E0:6A:E3:8A:7D:86:8E:45:B5:E9:F3:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/323830343a333062303a343030303a3a2f33342d3334203d3e20323634393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:30b0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4b:da:6f:05:88:88:c4:fc:6b:da:16:ae:0c:2d:46:1d:a1:f4:
         39:d3:fe:c2:2c:cb:1e:28:b4:dd:e9:c2:48:5f:16:b4:29:10:
         5b:54:77:22:6e:f6:f8:21:4a:4a:48:d9:34:5c:b7:35:42:94:
         0e:86:23:48:13:cc:f0:3d:e1:f6:b9:f8:27:a4:d0:41:6a:1e:
         4c:2e:2e:e4:de:75:48:b6:d1:77:e6:b0:7f:31:99:7b:e6:61:
         08:a3:48:88:ca:87:1c:61:41:c5:78:f9:c9:50:d3:cd:84:4b:
         0f:39:db:01:a0:2e:ca:87:0d:6c:36:71:13:41:ce:b8:39:7f:
         d8:ca:8a:13:84:e0:3c:c9:e1:a8:18:4d:ee:2b:fe:52:61:d7:
         3b:93:89:6e:78:3f:1c:12:84:1e:fa:6c:a1:d2:c0:88:71:f5:
         da:ed:71:df:27:41:b5:b5:8f:77:f3:5c:09:d8:fc:d4:a6:db:
         a1:a5:9f:0b:55:d1:67:93:ee:41:53:62:8b:50:13:ad:48:b1:
         77:f4:51:6f:4f:cb:8a:bd:74:31:d7:4a:57:18:c0:a8:82:f4:
         78:48:e7:04:c4:8d:e4:5d:56:ad:0b:7d:e0:38:61:44:3e:08:
         bc:72:d8:99:8d:17:45:56:4b:da:60:53:10:7b:e6:cd:b7:4d:
         da:cf:b2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org