Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/0/323830343a323930633a3a2f33362d3336203d3e20323633393934.roa
File:                     323830343a323930633a3a2f33362d3336203d3e20323633393934.roa (raw, json)
Hash identifier:          wA2PWFH6So+keyoiIZ8Tinnczq5KSwLXT2Yq2O1cHQk=
Subject key identifier:   30:87:44:26:60:91:F2:AC:31:37:DE:BA:26:A1:24:0A:AB:62:46:90
Certificate issuer:       /CN=CD6EDF715445E2743F6376C193BA5C67D9812DE8
Certificate serial:       5F0E431B247F8E0909993AD91CE6183F35B3696E
Authority key identifier: CD:6E:DF:71:54:45:E2:74:3F:63:76:C1:93:BA:5C:67:D9:81:2D:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6EDF715445E2743F6376C193BA5C67D9812DE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/0/323830343a323930633a3a2f33362d3336203d3e20323633393934.roa
Signing time:             Wed 06 Dec 2023 00:00:00 +0000
ROA not before:           Tue 05 Dec 2023 23:55:00 +0000
ROA not after:            Wed 04 Dec 2024 00:00:00 +0000
asID:                     263994
IP address blocks:        2804:290c::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:0e:43:1b:24:7f:8e:09:09:99:3a:d9:1c:e6:18:3f:35:b3:69:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6EDF715445E2743F6376C193BA5C67D9812DE8
        Validity
            Not Before: Dec  5 23:55:00 2023 GMT
            Not After : Dec  4 00:00:00 2024 GMT
        Subject: CN=308744266091F2AC3137DEBA26A1240AAB624690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:81:e8:70:cd:ee:6e:52:f4:04:fa:24:a2:27:
                    e1:3a:42:f8:37:10:20:b7:8d:d0:b7:28:54:7d:52:
                    5a:bf:71:52:da:25:09:40:7f:84:3e:5d:1a:80:46:
                    ee:dd:d1:5d:58:6d:c1:34:ec:73:df:fc:69:fb:61:
                    a4:5d:a6:b4:49:1d:a9:d1:20:94:75:b1:62:74:6c:
                    58:d0:d0:16:f8:bc:3a:f9:00:df:c2:ed:d2:bb:48:
                    bc:05:18:c2:21:f4:b0:4f:c4:92:64:7c:6e:df:07:
                    16:71:44:59:45:ce:47:a7:27:09:66:7f:4e:92:6c:
                    7b:be:9e:eb:dc:aa:07:ad:46:33:83:04:11:8b:be:
                    51:1f:60:57:10:f8:25:7a:bc:0e:04:13:cb:e5:cb:
                    04:2a:0b:ef:f7:2c:bf:f8:3f:08:31:99:77:94:2d:
                    86:c6:74:78:2e:5f:be:64:d7:ec:25:23:a3:e9:36:
                    c8:86:c3:85:b1:bd:81:a2:e8:21:88:8b:9a:d0:a1:
                    63:da:67:ed:43:13:69:b9:61:9e:50:87:86:33:ec:
                    9e:46:44:a2:86:a9:4f:6b:80:11:24:86:9f:8e:24:
                    9f:06:5d:1c:00:67:fe:8b:88:9a:bb:51:47:49:7c:
                    39:b9:3f:92:9d:d5:94:58:49:59:c6:9c:b7:5b:2a:
                    42:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:87:44:26:60:91:F2:AC:31:37:DE:BA:26:A1:24:0A:AB:62:46:90
            X509v3 Authority Key Identifier:
                keyid:CD:6E:DF:71:54:45:E2:74:3F:63:76:C1:93:BA:5C:67:D9:81:2D:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/0/CD6EDF715445E2743F6376C193BA5C67D9812DE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6EDF715445E2743F6376C193BA5C67D9812DE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/0/323830343a323930633a3a2f33362d3336203d3e20323633393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:290c::/36

    Signature Algorithm: sha256WithRSAEncryption
         67:df:ef:55:c6:bc:0d:f0:1a:fc:5b:7e:f7:93:a1:4f:37:2c:
         5b:20:0d:94:c2:c8:ef:5d:a7:f0:8e:d3:3a:74:0f:35:67:62:
         98:cf:d3:85:98:94:c8:d8:78:fa:a8:a4:38:dd:33:0c:fd:62:
         20:71:2b:29:66:63:3c:4c:c7:6a:d7:bf:bd:fa:b3:2a:65:64:
         d8:77:46:b1:cb:af:9d:cd:3a:1f:95:cb:20:9f:76:cf:77:24:
         a2:ee:fe:bb:5a:04:6e:77:00:67:76:65:ee:a5:2e:2e:f9:c6:
         54:d0:64:4e:39:97:00:95:80:f1:8d:1b:13:a6:33:bf:2c:36:
         ba:62:a6:24:5b:de:e6:b1:01:86:19:93:79:89:10:f2:04:c3:
         34:46:f3:61:67:bd:67:e1:9a:de:02:d9:a5:f8:c4:1f:d4:08:
         17:1f:53:65:b9:d0:91:3e:ac:08:92:8c:53:b5:92:31:14:95:
         b7:ea:c5:6e:81:b1:2f:ac:32:ab:6d:3d:b8:ae:4a:79:1d:1a:
         05:7c:3e:86:89:07:19:35:71:16:33:99:58:5c:8a:0b:55:c2:
         af:31:09:94:65:f6:0e:98:bb:ed:a6:0e:97:59:b5:c2:d9:85:
         c5:94:28:25:10:74:91:8d:0e:99:28:ad:e2:2a:18:29:1b:a5:
         56:db:b5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org