Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/0/323830343a346234303a31303a3a2f34342d3434203d3e20323637323933.roa
File:                     323830343a346234303a31303a3a2f34342d3434203d3e20323637323933.roa (raw, json)
Hash identifier:          SZCDGIkxrvSfyOab3lweT2G/pYK7DddRTiiiKTdGXew=
Subject key identifier:   3C:4B:38:04:92:4B:3E:10:D9:81:F2:FA:A3:97:22:89:DC:32:98:A1
Certificate issuer:       /CN=344BE0376B5D22DC698B7711C9094A9426B6CB0A
Certificate serial:       7849D185BA079EC1FE0F8DC3B5D16918FD7155EE
Authority key identifier: 34:4B:E0:37:6B:5D:22:DC:69:8B:77:11:C9:09:4A:94:26:B6:CB:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/344BE0376B5D22DC698B7711C9094A9426B6CB0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/0/323830343a346234303a31303a3a2f34342d3434203d3e20323637323933.roa
Signing time:             Wed 10 Aug 2022 19:58:43 +0000
ROA not before:           Wed 10 Aug 2022 19:53:43 +0000
ROA not after:            Wed 09 Aug 2023 19:58:43 +0000
asID:                     267293
IP address blocks:        2804:4b40:10::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:49:d1:85:ba:07:9e:c1:fe:0f:8d:c3:b5:d1:69:18:fd:71:55:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=344BE0376B5D22DC698B7711C9094A9426B6CB0A
        Validity
            Not Before: Aug 10 19:53:43 2022 GMT
            Not After : Aug  9 19:58:43 2023 GMT
        Subject: CN=3C4B3804924B3E10D981F2FAA3972289DC3298A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:df:40:bc:e9:d0:f6:04:00:f5:27:bd:dc:46:
                    20:94:aa:ba:c8:8b:34:3c:5f:9b:d7:09:5d:35:71:
                    a7:7f:1e:b0:48:2a:b8:e6:58:e4:5d:6c:57:79:80:
                    3b:4f:ac:83:5e:50:f4:87:31:39:24:0f:9f:dd:a7:
                    9a:57:ec:91:b1:b6:e1:80:34:eb:df:29:1a:85:d9:
                    d9:70:8c:8a:13:1d:2d:bc:9d:4f:b9:c1:8f:5a:ee:
                    c3:42:e1:bf:8c:86:bd:bd:e9:68:2d:eb:6e:d1:20:
                    35:6a:1c:5f:49:7b:08:e1:79:08:2a:39:f8:63:8b:
                    ed:d6:6a:fe:62:3d:62:9e:61:7f:c7:48:04:76:87:
                    f9:14:b3:f4:04:8b:92:d5:51:90:f8:00:22:9b:1f:
                    5e:b2:0a:7f:b0:02:1e:f6:7a:10:d3:fd:99:fc:85:
                    ba:b1:42:31:3b:8b:2f:20:6c:05:46:85:38:0b:e8:
                    65:85:e5:e0:55:ba:41:05:f0:1c:48:67:96:06:07:
                    35:3a:f1:64:94:4f:84:2a:5b:ba:10:d7:d1:75:2c:
                    fe:70:76:e4:ed:b3:f1:2f:34:88:95:63:08:99:61:
                    5b:7b:f2:12:9a:65:7c:76:cd:61:bf:74:f4:aa:57:
                    43:01:c1:7a:81:17:c9:0f:2c:b1:20:ce:72:d8:15:
                    16:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:4B:38:04:92:4B:3E:10:D9:81:F2:FA:A3:97:22:89:DC:32:98:A1
            X509v3 Authority Key Identifier:
                keyid:34:4B:E0:37:6B:5D:22:DC:69:8B:77:11:C9:09:4A:94:26:B6:CB:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/0/344BE0376B5D22DC698B7711C9094A9426B6CB0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/344BE0376B5D22DC698B7711C9094A9426B6CB0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/0/323830343a346234303a31303a3a2f34342d3434203d3e20323637323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b40:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         8e:44:ea:31:01:89:dc:77:e3:d5:45:c7:9b:89:01:b7:26:fc:
         2e:ee:65:36:af:b2:97:05:31:df:f0:87:1d:b7:c6:8c:fa:27:
         3c:f3:a4:47:41:bf:66:d8:34:40:3d:f0:0f:09:75:9a:50:76:
         d9:a7:48:a5:1d:b0:7a:9c:8d:00:9e:16:58:5a:d0:cf:04:33:
         c5:fc:22:9d:27:04:53:93:a4:80:42:82:0b:49:5a:09:0a:f2:
         95:66:69:29:b6:e0:f4:23:d0:98:9c:87:8a:a8:73:e1:74:c9:
         57:a8:88:6b:5d:aa:a3:64:c7:00:52:a9:db:b0:91:29:41:86:
         cb:48:5b:c5:b0:68:b9:9a:7d:ce:ec:04:94:ec:7b:ed:79:02:
         f0:69:8a:34:db:68:ad:df:65:a7:49:0a:ac:e9:ec:db:5f:6c:
         45:69:25:42:0b:d1:c0:2e:a8:60:b4:81:54:44:42:2d:b1:3e:
         91:69:aa:f6:f7:e6:28:65:c0:94:52:b3:ff:0e:3e:02:65:75:
         d5:19:2c:32:74:11:94:16:71:2b:e5:7a:86:4c:3d:61:e2:2f:
         90:ad:b4:3c:5f:a2:b0:f5:68:b3:36:59:43:8f:a5:d7:bc:96:
         99:e9:32:bc:9d:f8:21:55:ff:d7:e1:b5:29:a1:2c:f2:df:34:
         d2:09:5c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:09 2024 by rpki-client on console-fra.rpki-client.org