Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/323830343a333062303a3a2f33322d3332203d3e20323634393639.roa
File:                     323830343a333062303a3a2f33322d3332203d3e20323634393639.roa (raw, json)
Hash identifier:          kNmsBcWzc0etYKSpDFbbZBAxT+BmYLkHdgnRwphivlk=
Subject key identifier:   AB:42:CB:56:F9:95:15:C4:1D:0A:E1:35:F8:0B:DF:B9:45:4D:DD:03
Certificate issuer:       /CN=533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0
Certificate serial:       43E801979AD1204857667A995E013EE6812387C4
Authority key identifier: 53:3B:B6:1C:76:F4:3E:E8:E0:6A:E3:8A:7D:86:8E:45:B5:E9:F3:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/323830343a333062303a3a2f33322d3332203d3e20323634393639.roa
Signing time:             Tue 31 Oct 2023 16:02:01 +0000
ROA not before:           Tue 31 Oct 2023 15:57:01 +0000
ROA not after:            Tue 29 Oct 2024 16:02:01 +0000
asID:                     264969
IP address blocks:        2804:30b0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:e8:01:97:9a:d1:20:48:57:66:7a:99:5e:01:3e:e6:81:23:87:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0
        Validity
            Not Before: Oct 31 15:57:01 2023 GMT
            Not After : Oct 29 16:02:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:63:7e:c7:1e:6b:36:4e:e3:31:9d:1a:f9:0f:
                    7b:33:67:5c:dc:07:3b:8e:8a:4f:b2:61:25:a6:3f:
                    06:2c:b6:ab:2e:fe:f1:71:2a:72:4d:39:ef:b9:10:
                    46:79:19:03:cd:51:2c:47:9f:1e:ac:5b:17:82:3c:
                    26:e7:03:1e:e9:b8:b6:8e:bd:77:a9:60:a3:4c:ee:
                    75:38:fb:07:85:58:b9:f0:70:c7:a2:3a:71:7d:30:
                    85:1c:d6:f5:d4:73:f0:4f:13:5d:0d:5c:44:1f:ea:
                    ad:3b:bf:81:01:c9:77:e7:6d:e8:5b:0b:56:70:4e:
                    a6:c4:f7:a1:1d:ac:5d:1c:3d:51:bf:ab:8b:5b:ae:
                    a9:f3:66:d5:d6:b4:b4:75:6b:32:91:a2:e7:6f:f5:
                    41:f9:ff:47:95:e9:10:33:88:6a:44:bf:53:19:31:
                    d5:62:7e:8d:2d:86:b4:a8:a5:08:57:43:2d:66:69:
                    f3:88:f9:d4:c1:e8:cf:59:f6:1e:3b:12:55:73:4a:
                    4a:e5:01:fa:04:4e:4c:81:d8:8f:e3:13:aa:81:d5:
                    b6:d7:32:b1:71:d2:74:c9:56:f8:81:d2:72:45:7b:
                    dc:f7:73:34:b0:d3:1b:b9:e9:02:0e:cf:63:5b:f5:
                    a7:8e:a6:c8:4c:ef:52:a1:b2:e3:08:6e:91:13:af:
                    92:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:42:CB:56:F9:95:15:C4:1D:0A:E1:35:F8:0B:DF:B9:45:4D:DD:03
            X509v3 Authority Key Identifier:
                keyid:53:3B:B6:1C:76:F4:3E:E8:E0:6A:E3:8A:7D:86:8E:45:B5:E9:F3:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/323830343a333062303a3a2f33322d3332203d3e20323634393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:30b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:20:33:71:ac:3c:94:66:14:88:28:b9:95:bf:ee:46:bb:40:
         9b:1d:a7:d2:be:f6:d3:5e:28:af:7e:ad:89:e1:e6:96:8b:83:
         95:0f:98:d5:17:f0:c5:27:94:a6:9e:9d:90:54:e4:ee:ff:5d:
         1e:db:cc:3f:1a:c4:dc:d0:fc:14:77:30:a3:26:9e:b4:f4:3b:
         ca:8c:22:f7:dd:40:c5:9e:51:40:9f:7d:03:6c:97:bb:84:64:
         76:07:79:dd:df:ef:67:a1:d2:cc:74:a8:64:15:d1:a8:6e:94:
         6b:3a:41:3f:9d:27:5c:1a:cf:8b:93:61:b5:9c:65:34:b2:65:
         52:de:c4:07:50:45:9a:9c:49:90:5f:63:1d:12:73:18:d1:69:
         12:d2:30:67:0b:6c:56:ad:fb:b4:dc:11:3f:e8:ab:1a:04:40:
         cf:40:d5:ed:00:e9:81:46:9c:9b:7d:b6:bd:8d:f5:f1:eb:b2:
         cf:06:e0:1c:5d:ea:f0:c1:9d:bd:81:e6:ec:62:39:b4:28:d4:
         d5:a6:ea:16:c1:11:9f:2f:f0:b1:a1:ab:5f:49:a5:9d:ac:69:
         c8:c2:de:73:b4:f2:f1:83:ec:3f:59:bd:ba:4d:6e:d9:05:8c:
         fa:ec:a9:3e:20:1e:b7:23:88:50:a3:40:d5:7b:bc:48:a6:d5:
         72:bb:b9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org