Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/323830343a3266343a633030303a3a2f33342d3334203d3e203533313138.roa
File:                     323830343a3266343a633030303a3a2f33342d3334203d3e203533313138.roa (raw, json)
Hash identifier:          MI/nrQ8RulT6iqAh0o+sJTd9jIOu6PduET7TlsFigUs=
Subject key identifier:   40:2F:79:E9:57:D2:AC:52:B7:90:F6:C8:3E:1F:86:92:18:9C:85:3C
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       6D48F18F7EED913034960316067362E7648B7DDB
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/323830343a3266343a633030303a3a2f33342d3334203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 13:10:27 +0000
ROA not before:           Thu 27 Jul 2023 13:05:27 +0000
ROA not after:            Thu 25 Jul 2024 13:10:27 +0000
asID:                     53118
IP address blocks:        2804:2f4:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:48:f1:8f:7e:ed:91:30:34:96:03:16:06:73:62:e7:64:8b:7d:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 13:05:27 2023 GMT
            Not After : Jul 25 13:10:27 2024 GMT
        Subject: CN=402F79E957D2AC52B790F6C83E1F8692189C853C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a5:d4:32:c3:65:1f:cd:6a:ab:1b:fc:22:eb:
                    46:8b:74:66:4c:e9:62:c9:e5:f5:09:15:25:e7:f0:
                    46:51:bd:c0:d7:b4:e2:6d:36:59:2c:78:80:f0:55:
                    a8:ee:2b:2d:5e:0d:1f:25:7a:e9:55:98:95:4d:f6:
                    c2:74:4f:02:4e:75:16:fa:b4:57:41:90:8a:ab:b3:
                    2d:5b:4a:dc:1a:ef:ce:db:34:10:31:af:12:1d:17:
                    d9:4d:4a:98:0d:15:63:aa:d9:e4:c0:0e:ca:2a:92:
                    56:11:30:af:63:78:6c:33:08:2d:f6:11:c0:82:a4:
                    77:82:ab:e8:d6:95:db:fd:e9:58:71:0a:04:79:0f:
                    f1:28:94:a8:2d:4b:a6:d5:9d:24:75:ba:34:82:9b:
                    83:38:6a:bd:e2:38:1b:1f:b4:79:0d:8d:09:30:04:
                    fc:5c:a7:8f:1a:a5:be:fb:51:8e:47:1f:36:f3:0f:
                    7d:89:be:93:cd:37:58:46:b1:b3:ee:4e:40:b8:44:
                    5b:45:c7:24:19:b2:2c:66:ca:7e:f6:eb:57:03:14:
                    b4:59:da:78:f6:48:5b:6e:89:1f:38:24:41:29:ee:
                    aa:a2:9d:b5:6a:23:46:10:09:f5:8d:c2:b2:63:70:
                    a2:ed:64:73:95:ed:01:cb:55:ea:27:d7:6e:08:3f:
                    38:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:2F:79:E9:57:D2:AC:52:B7:90:F6:C8:3E:1F:86:92:18:9C:85:3C
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/323830343a3266343a633030303a3a2f33342d3334203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b6:af:f6:bd:c9:29:10:20:a0:eb:87:72:9a:67:22:0d:7d:d9:
         2d:b1:42:4b:ad:fb:5d:fe:95:cf:68:a3:f4:1a:1e:fc:0d:49:
         b7:02:5b:da:65:27:93:43:71:64:c4:af:12:39:7b:52:93:78:
         8e:0d:6e:37:73:5b:c2:e5:c4:74:bf:22:dd:77:67:d1:8a:c8:
         76:d1:ce:c5:22:52:ad:f9:74:b7:ac:40:0f:27:52:2f:0a:67:
         75:18:f2:ec:cc:32:44:0d:ef:e3:41:8e:ac:dd:06:b4:56:55:
         53:3e:47:e6:9f:22:01:11:f4:a5:ab:2d:91:b1:f5:2f:5f:93:
         f4:13:42:16:9c:15:31:20:71:b6:e0:51:bb:f3:34:1d:c6:6d:
         79:82:c9:8f:43:06:9d:34:d7:be:90:41:77:4c:ee:7a:a6:54:
         2d:c8:af:ec:14:b1:c4:7b:4d:56:13:a5:ab:ac:79:b6:e9:a7:
         d2:0a:97:a1:28:b8:e1:fc:72:39:29:95:0f:fc:2a:f9:18:31:
         85:39:62:95:25:19:fb:4a:e8:39:b8:2c:31:b7:ca:69:c9:85:
         a5:45:9d:68:b6:56:b0:cc:c6:ae:0d:0d:c1:74:96:9c:1f:f1:
         ed:bf:4d:24:04:3f:ab:45:76:e8:f5:17:b4:90:f6:3d:9c:b8:
         6a:d1:47:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org