Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/323830343a333062303a3a2f33342d3334203d3e20323634393639.roa
File:                     323830343a333062303a3a2f33342d3334203d3e20323634393639.roa (raw, json)
Hash identifier:          lSXiifL0WRpvmr56l5kXHzzKru61Yj4Mwfkm/8F10Fo=
Subject key identifier:   09:37:36:2C:D8:A7:8D:5E:33:4C:F3:36:5C:7C:5F:AE:5B:05:5E:7B
Certificate issuer:       /CN=533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0
Certificate serial:       1F724E33474145CEF6DFFB0C9C1D0A1D7660C71F
Authority key identifier: 53:3B:B6:1C:76:F4:3E:E8:E0:6A:E3:8A:7D:86:8E:45:B5:E9:F3:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/323830343a333062303a3a2f33342d3334203d3e20323634393639.roa
Signing time:             Tue 31 Oct 2023 16:06:00 +0000
ROA not before:           Tue 31 Oct 2023 16:01:00 +0000
ROA not after:            Tue 29 Oct 2024 16:06:00 +0000
asID:                     264969
IP address blocks:        2804:30b0::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:72:4e:33:47:41:45:ce:f6:df:fb:0c:9c:1d:0a:1d:76:60:c7:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0
        Validity
            Not Before: Oct 31 16:01:00 2023 GMT
            Not After : Oct 29 16:06:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c0:27:75:26:dd:8d:37:06:de:fe:1a:ad:d1:
                    45:1d:a5:c0:cf:23:c4:91:4f:be:d3:39:1b:ef:4b:
                    2d:80:38:a9:55:1e:29:30:d6:6c:3d:e3:c1:83:ca:
                    57:c4:c7:72:5b:d1:fa:1e:39:6c:74:2d:cd:66:2e:
                    8e:95:90:14:83:49:15:28:b8:08:06:8f:55:1b:4a:
                    7f:85:27:58:b0:2d:75:ec:99:fa:34:64:2c:e6:21:
                    4a:b4:73:89:eb:63:07:0a:df:65:48:e5:c8:76:f4:
                    8f:97:54:4d:bf:29:1b:8a:8f:5b:da:ec:aa:f9:63:
                    16:3a:9e:c9:5c:4c:79:b9:57:c4:ed:12:f8:3a:48:
                    40:cc:25:16:97:3e:0b:77:49:e7:6e:8c:e7:ec:ba:
                    50:3f:f1:9e:85:b6:31:21:d0:68:db:0e:0f:7b:ad:
                    ef:ea:43:c8:52:ba:c3:93:a9:45:fa:53:6c:04:f4:
                    28:b3:0c:d0:12:d7:f7:05:2e:68:51:43:c5:9a:57:
                    3c:8e:16:38:bd:fd:ce:e2:52:73:8c:75:6a:00:77:
                    ba:53:15:d2:ce:1b:e0:76:b5:6f:f1:88:f1:cf:6a:
                    d9:43:3b:7b:4e:75:09:50:bb:20:18:e3:0c:29:db:
                    37:3d:f8:34:e3:be:e5:cd:d7:2f:e5:30:5e:89:15:
                    32:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:37:36:2C:D8:A7:8D:5E:33:4C:F3:36:5C:7C:5F:AE:5B:05:5E:7B
            X509v3 Authority Key Identifier:
                keyid:53:3B:B6:1C:76:F4:3E:E8:E0:6A:E3:8A:7D:86:8E:45:B5:E9:F3:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/323830343a333062303a3a2f33342d3334203d3e20323634393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:30b0::/34

    Signature Algorithm: sha256WithRSAEncryption
         a2:36:e4:15:58:cf:3e:f1:f2:7b:4b:a4:12:22:41:f8:e3:b0:
         8c:97:63:78:7d:8d:79:4b:f0:4d:8c:8c:df:d7:24:9e:02:cd:
         65:fa:83:89:25:01:6b:68:b9:18:59:7a:b1:b7:6a:9e:57:0b:
         90:31:57:46:08:df:7c:0a:49:a6:a8:bc:62:63:33:65:51:87:
         1a:de:f7:75:e0:89:6c:1a:57:3a:88:4b:60:dc:08:29:2c:58:
         48:b2:e5:81:22:f7:f4:68:70:10:ec:a7:05:49:55:2d:e4:4f:
         48:79:0a:60:fb:ea:fe:d4:17:90:03:66:4e:78:27:95:6b:23:
         d8:da:75:21:ec:89:e7:13:56:51:3a:20:3b:90:85:ac:7f:23:
         ce:9c:28:5e:5a:27:f8:ca:c8:a3:ae:fb:ca:4a:52:5e:dd:f6:
         4a:12:d6:fd:c3:81:0c:ea:40:15:f3:94:cd:ab:eb:ce:08:d2:
         c2:d9:c9:8e:df:3a:83:12:a3:8e:d9:c8:02:97:78:7e:d7:47:
         60:82:35:a8:92:8e:9b:22:ac:1f:b9:fe:6d:7e:e5:e2:40:a7:
         71:4d:96:21:4c:aa:b3:bb:15:47:1f:96:ea:ce:ba:2c:9c:15:
         27:6c:7d:6d:cb:5c:13:ac:d9:ac:78:26:1a:37:ee:0f:7d:eb:
         61:4b:e9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org