Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/323830343a356366633a3a2f33342d3334203d3e20323638393434.roa
File:                     323830343a356366633a3a2f33342d3334203d3e20323638393434.roa (raw, json)
Hash identifier:          bhnThkgitKhmLhtBOa3keSutnHPlskRzun4TDj6k6wo=
Subject key identifier:   FA:09:17:B6:7A:54:66:85:A5:69:49:F6:BB:F9:58:0C:47:00:76:B1
Certificate issuer:       /CN=D1DA329465F62BCE99280EB16F4260FB32AE9DED
Certificate serial:       6B961DDB1F5D1CF6112238E3D272991DD000C758
Authority key identifier: D1:DA:32:94:65:F6:2B:CE:99:28:0E:B1:6F:42:60:FB:32:AE:9D:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1DA329465F62BCE99280EB16F4260FB32AE9DED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/323830343a356366633a3a2f33342d3334203d3e20323638393434.roa
Signing time:             Mon 22 May 2023 18:45:15 +0000
ROA not before:           Mon 22 May 2023 18:40:15 +0000
ROA not after:            Mon 20 May 2024 18:45:15 +0000
asID:                     268944
IP address blocks:        2804:5cfc::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:96:1d:db:1f:5d:1c:f6:11:22:38:e3:d2:72:99:1d:d0:00:c7:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1DA329465F62BCE99280EB16F4260FB32AE9DED
        Validity
            Not Before: May 22 18:40:15 2023 GMT
            Not After : May 20 18:45:15 2024 GMT
        Subject: CN=FA0917B67A546685A56949F6BBF9580C470076B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:49:26:e3:0a:d4:e9:37:e3:a4:b7:d9:13:ec:
                    f4:cf:d3:65:b8:45:39:59:68:00:f1:4b:04:c9:cf:
                    55:6e:df:83:9a:34:68:e4:88:2b:d8:71:af:76:ce:
                    cb:6a:17:bb:e1:46:1b:c5:eb:b6:6a:e8:21:9e:54:
                    ae:b7:33:96:94:e3:61:39:af:74:8f:96:67:e4:f3:
                    7d:a8:9c:9c:9b:08:5e:c6:90:c4:83:88:1f:32:48:
                    b1:ad:e8:ce:20:44:62:75:ae:53:28:cc:52:23:15:
                    13:93:9e:4d:0f:b9:a2:3a:5d:bd:cc:c3:57:95:b5:
                    f4:c6:19:84:41:ee:63:7e:71:2f:91:cf:a2:31:1a:
                    23:07:53:36:ba:d5:f8:ce:fc:c6:4c:a8:ee:2e:f6:
                    7d:39:1a:a0:b8:eb:05:59:cb:be:21:ad:13:96:1e:
                    b0:f1:2c:ac:10:df:2f:99:27:2b:5b:cb:ea:94:78:
                    f5:7a:2e:e8:90:f7:9b:0b:26:d8:d6:16:b8:35:c6:
                    56:dd:46:60:f0:6a:04:fa:03:6f:ff:cd:a1:ad:e7:
                    68:74:93:fe:0a:56:a4:5c:6f:de:9b:1a:03:b7:9c:
                    91:c5:ce:23:bb:4c:1c:70:d6:f9:cd:d9:15:86:48:
                    7f:54:a7:50:82:fe:57:2b:bc:bd:3d:02:f6:8d:84:
                    d6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:09:17:B6:7A:54:66:85:A5:69:49:F6:BB:F9:58:0C:47:00:76:B1
            X509v3 Authority Key Identifier:
                keyid:D1:DA:32:94:65:F6:2B:CE:99:28:0E:B1:6F:42:60:FB:32:AE:9D:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/D1DA329465F62BCE99280EB16F4260FB32AE9DED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1DA329465F62BCE99280EB16F4260FB32AE9DED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/323830343a356366633a3a2f33342d3334203d3e20323638393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5cfc::/34

    Signature Algorithm: sha256WithRSAEncryption
         89:8d:ef:10:60:75:a6:92:1c:43:ba:82:b1:2b:6c:ae:2c:6b:
         5b:ec:26:06:ea:37:a6:44:e8:12:55:f5:dc:46:cb:ce:2e:20:
         e2:64:ee:f8:36:71:11:b8:da:20:e1:88:24:da:e0:51:d3:76:
         93:98:47:e3:c5:ed:53:86:92:40:d8:66:e8:bc:f8:f8:11:0a:
         9a:c5:05:24:82:02:77:12:7d:cc:51:d6:5b:a0:77:0b:22:7d:
         11:b7:6b:30:87:a0:13:bf:1f:31:2c:76:a1:9f:66:19:9e:fc:
         8d:6a:6c:20:1a:0e:a4:11:12:4f:6e:d8:9f:ea:b5:db:0b:d1:
         9a:2a:8d:aa:d3:96:3d:45:65:d3:4b:7b:f3:9a:59:b8:22:27:
         16:7f:95:43:70:4b:7d:34:ac:cb:f2:79:a5:eb:d5:bf:33:52:
         80:7f:06:e8:98:cb:35:da:5f:b5:62:7a:93:3f:3e:61:5a:7b:
         f3:d9:39:1b:9a:cd:e2:db:06:66:67:1e:69:60:39:1d:e5:93:
         60:ce:3e:38:27:e4:71:d9:d1:f5:cc:8d:fa:81:e1:8d:48:5f:
         83:f6:98:2e:40:b1:7b:05:db:3d:e4:a9:98:6e:20:d1:9d:f9:
         c0:1d:4a:6a:8b:65:2d:01:2e:a8:56:b4:a3:ff:aa:5d:20:3d:
         17:73:a6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org