Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/323830343a333062303a383030303a3a2f33342d3334203d3e20323634393639.roa
File:                     323830343a333062303a383030303a3a2f33342d3334203d3e20323634393639.roa (raw, json)
Hash identifier:          kY0YEV01fFTn7QRi97Q3wes/5+d2FMQdiz7heGdVGXk=
Subject key identifier:   FF:97:B9:96:47:4F:28:B8:93:A0:41:4E:1F:35:F5:C8:0C:A8:04:95
Certificate issuer:       /CN=533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0
Certificate serial:       2ED17A94BB496A5566BD46305130CC1FBF8BEA34
Authority key identifier: 53:3B:B6:1C:76:F4:3E:E8:E0:6A:E3:8A:7D:86:8E:45:B5:E9:F3:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/323830343a333062303a383030303a3a2f33342d3334203d3e20323634393639.roa
Signing time:             Tue 31 Oct 2023 16:02:00 +0000
ROA not before:           Tue 31 Oct 2023 15:57:00 +0000
ROA not after:            Tue 29 Oct 2024 16:02:00 +0000
asID:                     264969
IP address blocks:        2804:30b0:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:d1:7a:94:bb:49:6a:55:66:bd:46:30:51:30:cc:1f:bf:8b:ea:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0
        Validity
            Not Before: Oct 31 15:57:00 2023 GMT
            Not After : Oct 29 16:02:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:93:9c:49:15:bc:7a:ee:e8:bd:8d:8d:c0:53:
                    4a:90:ed:69:a8:56:a4:ae:71:9a:d1:e0:db:c3:1e:
                    7f:3a:81:82:86:fb:44:3d:86:7c:0d:30:02:5e:ff:
                    72:cf:92:ad:f4:92:89:90:4c:63:ab:0f:2b:1a:b7:
                    5a:b5:e2:14:c9:38:b3:a9:06:1f:17:32:03:b1:b5:
                    7d:b7:3b:40:91:81:a2:ca:7e:ae:6b:6f:0c:1b:79:
                    49:e6:1f:64:ac:c0:5c:f5:f4:85:da:7a:ea:4e:21:
                    af:45:4f:f7:e8:56:89:bb:e0:a4:47:f6:33:7c:df:
                    6d:70:76:08:de:a3:40:c0:74:2d:23:9c:6a:e4:c3:
                    ef:a4:2f:45:2c:d9:e3:0c:56:99:c7:58:c0:e9:96:
                    06:31:3a:64:52:58:32:5f:e3:29:4c:14:ee:a1:0e:
                    64:f5:64:4b:e0:de:bb:9b:4f:50:f3:10:24:f2:3d:
                    b8:10:8a:ae:62:2e:21:1d:41:ea:6e:c0:0c:cc:b5:
                    07:4b:6b:d3:51:68:9c:c3:a5:89:a8:cd:29:d6:e6:
                    b5:95:95:2a:45:bb:97:fe:7c:9c:bf:66:2b:cb:7b:
                    bd:8a:54:27:ad:1d:33:9d:59:e3:42:7b:64:ff:2d:
                    f8:a9:bb:1d:30:31:24:ee:dd:6d:e3:a1:20:a3:41:
                    c7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:97:B9:96:47:4F:28:B8:93:A0:41:4E:1F:35:F5:C8:0C:A8:04:95
            X509v3 Authority Key Identifier:
                keyid:53:3B:B6:1C:76:F4:3E:E8:E0:6A:E3:8A:7D:86:8E:45:B5:E9:F3:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/323830343a333062303a383030303a3a2f33342d3334203d3e20323634393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:30b0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         d4:ba:86:44:75:d8:f2:3d:61:a0:eb:be:c1:77:2a:14:84:89:
         58:2d:bc:04:9e:b9:dc:62:ea:82:78:f1:c7:bc:90:a6:98:af:
         12:0e:90:bc:f9:28:a5:c1:a1:56:a6:10:e1:e1:1d:df:1b:9b:
         e3:08:62:bb:97:48:26:fa:9e:90:df:76:fd:f9:9f:37:38:2b:
         1b:74:15:a2:28:7b:b8:7f:7e:0a:b3:21:81:4e:5f:bb:a6:c2:
         4d:0c:21:30:72:05:24:9d:3d:74:7a:c3:f1:e6:60:70:0a:93:
         e4:78:15:a2:92:88:a4:8e:f0:86:f4:7b:2c:f7:34:cc:25:0f:
         16:be:64:f4:57:4c:d8:33:31:59:4b:26:23:12:c7:1d:73:83:
         68:b3:a3:4e:48:0e:b5:eb:57:ed:1c:06:6d:33:1b:15:77:a1:
         6f:e0:0c:ad:f6:87:3c:97:f0:32:1a:91:fd:85:a8:c4:de:b7:
         77:b3:73:ed:2b:14:17:e2:7c:6c:45:61:18:84:76:ec:eb:2b:
         8e:63:4f:bd:16:15:dd:d4:a1:f7:1b:fa:54:1a:fe:72:3c:cc:
         75:58:75:1d:7a:bc:3d:01:c8:fb:bf:57:c8:80:f7:bb:bf:09:
         3e:5b:cc:38:dc:87:d2:c8:7e:67:f9:42:04:d8:8a:ed:d4:72:
         b8:96:9b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org