Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/1/323830343a3261633a3a2f33322d3634203d3e203238333030.roa
File:                     323830343a3261633a3a2f33322d3634203d3e203238333030.roa (raw, json)
Hash identifier:          pFK58ZepeRqIPod5CyRy/yzgNnzIdmCSUI4YPIOZqGs=
Subject key identifier:   A6:10:94:50:76:03:91:A8:47:FF:F1:9C:AD:6C:9A:BE:7C:63:1B:57
Certificate issuer:       /CN=34BD768B65C97BD03F40D833E018BBE743046FE2
Certificate serial:       60DE8CD3CACD5AE4D202134A938D5DB7C34B2E68
Authority key identifier: 34:BD:76:8B:65:C9:7B:D0:3F:40:D8:33:E0:18:BB:E7:43:04:6F:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34BD768B65C97BD03F40D833E018BBE743046FE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/1/323830343a3261633a3a2f33322d3634203d3e203238333030.roa
Signing time:             Fri 05 Apr 2024 01:11:06 +0000
ROA not before:           Fri 05 Apr 2024 01:06:06 +0000
ROA not after:            Fri 04 Apr 2025 01:11:06 +0000
asID:                     28300
IP address blocks:        2804:2ac::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:de:8c:d3:ca:cd:5a:e4:d2:02:13:4a:93:8d:5d:b7:c3:4b:2e:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34BD768B65C97BD03F40D833E018BBE743046FE2
        Validity
            Not Before: Apr  5 01:06:06 2024 GMT
            Not After : Apr  4 01:11:06 2025 GMT
        Subject: CN=A6109450760391A847FFF19CAD6C9ABE7C631B57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b7:38:5e:8b:44:1f:32:3b:b9:21:ec:b1:52:
                    1c:07:40:c0:7e:b4:10:a2:47:89:86:85:d2:d0:3d:
                    03:c2:4b:81:50:72:96:95:4f:b7:d9:32:5b:52:99:
                    dc:5b:99:df:de:f5:e4:0e:24:96:6d:ab:a7:7b:bc:
                    c6:e2:f9:d1:9e:aa:d8:4b:60:18:ab:d6:58:18:64:
                    72:fd:df:47:73:88:76:e6:01:02:7a:82:f9:03:d6:
                    c9:cb:da:9a:92:e2:e8:4f:0c:80:ed:53:7e:f9:48:
                    ea:6f:f2:00:1e:70:b3:15:c2:9f:5f:a3:e1:e4:ad:
                    27:f6:d4:30:0f:7a:aa:88:d7:39:8f:11:8e:41:cd:
                    a2:79:f2:0f:4c:89:21:1c:4c:aa:11:29:e2:8e:ed:
                    e7:ca:39:ef:2f:70:09:fa:00:c6:6f:80:ed:48:b9:
                    18:44:a1:1b:29:fd:21:66:27:11:1e:23:cd:a0:f3:
                    df:d8:c3:4c:cf:1c:af:db:af:1d:57:2a:2b:73:1a:
                    30:0e:da:cd:c5:53:27:f7:a4:f2:51:0d:20:59:80:
                    d1:aa:13:6e:30:43:e2:9f:2c:97:b6:d1:b4:40:9b:
                    38:5f:39:54:3c:d4:7d:b1:a0:68:fa:fd:52:a3:25:
                    bb:98:8f:27:d7:a6:ef:45:61:b5:97:5e:af:b4:f4:
                    59:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:10:94:50:76:03:91:A8:47:FF:F1:9C:AD:6C:9A:BE:7C:63:1B:57
            X509v3 Authority Key Identifier:
                keyid:34:BD:76:8B:65:C9:7B:D0:3F:40:D8:33:E0:18:BB:E7:43:04:6F:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/1/34BD768B65C97BD03F40D833E018BBE743046FE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34BD768B65C97BD03F40D833E018BBE743046FE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/1/323830343a3261633a3a2f33322d3634203d3e203238333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:9e:20:03:27:67:e8:8f:48:e2:20:8a:28:09:d1:87:a0:8c:
         33:45:76:0b:f0:79:85:a7:3d:47:19:1a:fd:cc:4b:92:60:72:
         9b:7f:a4:07:c2:70:04:c0:13:e5:f6:df:93:5d:26:cc:db:dd:
         42:ec:08:af:2b:0b:8b:c8:14:59:63:2c:b6:33:85:ab:5b:cc:
         3f:a2:d1:16:ad:93:e5:0b:22:9d:9a:33:d6:39:6e:a6:b8:ac:
         58:e6:a1:98:0e:0c:9b:bb:08:a0:cc:fa:3d:7d:5c:7b:64:20:
         9b:24:cc:51:c3:34:3c:12:ce:b8:ea:41:b4:44:2f:aa:3b:db:
         94:18:93:33:64:c8:4e:c7:d4:bc:32:7d:6c:a9:77:d4:8c:ce:
         fd:90:0c:ee:30:4c:7d:3c:1e:fa:0e:79:70:5e:2b:a1:7c:14:
         6d:b4:d5:b5:a4:19:83:3c:91:b3:14:67:f9:2d:e2:49:34:ba:
         97:1d:98:8b:cc:c1:99:fe:a6:2e:eb:1b:1c:18:b5:71:27:34:
         55:81:09:92:1e:4f:47:af:f9:c7:da:34:8b:99:37:f3:4a:eb:
         4f:ed:bf:66:4f:fd:f9:22:10:48:a9:71:17:ca:82:01:78:bc:
         d8:91:03:5b:90:c8:27:72:9e:ae:ac:6d:3b:9b:cb:fd:4e:19:
         ea:5b:cd:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org