Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CD9y4WrxR5Z8ABqDAfLrTXgwN3dSnZJDtpd1nPAeAprx/0/323830343a366266633a3a2f33322d3332203d3e20323730343338.roa
File:                     323830343a366266633a3a2f33322d3332203d3e20323730343338.roa (raw, json)
Hash identifier:          M2LEQECuuev+5l+6qH01KUXxtgsDG5Ic77gYmJZLG0o=
Subject key identifier:   CB:C4:76:E6:6B:3E:27:D8:F2:58:D5:61:86:9B:F7:79:84:96:AD:4C
Certificate issuer:       /CN=555670031340B5D31FA9E93EFAB4F49D5A553B33
Certificate serial:       34AC1CDE553205449A96C814DAED467E8D8766D2
Authority key identifier: 55:56:70:03:13:40:B5:D3:1F:A9:E9:3E:FA:B4:F4:9D:5A:55:3B:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/555670031340B5D31FA9E93EFAB4F49D5A553B33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CD9y4WrxR5Z8ABqDAfLrTXgwN3dSnZJDtpd1nPAeAprx/0/323830343a366266633a3a2f33322d3332203d3e20323730343338.roa
Signing time:             Wed 01 Nov 2023 18:24:00 +0000
ROA not before:           Wed 01 Nov 2023 18:19:00 +0000
ROA not after:            Wed 30 Oct 2024 18:24:00 +0000
asID:                     270438
IP address blocks:        2804:6bfc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ac:1c:de:55:32:05:44:9a:96:c8:14:da:ed:46:7e:8d:87:66:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=555670031340B5D31FA9E93EFAB4F49D5A553B33
        Validity
            Not Before: Nov  1 18:19:00 2023 GMT
            Not After : Oct 30 18:24:00 2024 GMT
        Subject: CN=CBC476E66B3E27D8F258D561869BF7798496AD4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:84:7a:23:f4:3c:04:62:07:70:49:c2:d8:7d:
                    4e:ca:f4:a2:5d:6b:3e:9e:69:40:83:74:cc:88:90:
                    66:75:82:d2:22:f3:c8:8e:67:b1:f0:b0:22:47:ed:
                    4d:bc:6a:cf:95:61:f7:0d:8a:82:91:97:1e:41:96:
                    1e:96:52:69:69:57:75:37:55:e3:6b:9a:99:73:88:
                    e5:b5:5c:78:46:28:1a:7b:a3:fe:f2:6b:b7:fa:2f:
                    ee:3a:32:6a:77:1c:4b:bb:76:42:99:57:80:48:20:
                    6f:fa:3d:bf:78:cc:ad:26:45:17:b5:84:81:21:6b:
                    f4:2e:64:56:dd:6a:a9:28:3c:db:b9:8b:88:db:0f:
                    03:84:4c:3b:16:10:bb:7c:a0:12:04:21:db:ca:f6:
                    2c:17:dc:96:cc:dc:0e:ba:d2:6d:62:62:38:f7:98:
                    5f:aa:59:7f:6b:99:98:73:26:eb:87:1c:42:a8:7b:
                    3e:b5:98:93:e6:af:d2:be:4a:56:a2:c2:00:11:8c:
                    01:93:03:88:10:e0:9e:ee:f9:9b:0c:cd:9e:2b:5d:
                    97:92:2f:06:78:17:4d:a9:75:6a:42:6e:f0:95:21:
                    20:b5:e2:48:be:de:76:6e:05:a0:38:4e:5f:14:d6:
                    de:5c:09:d6:89:bb:9f:1c:1b:52:5a:ee:41:36:65:
                    f0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C4:76:E6:6B:3E:27:D8:F2:58:D5:61:86:9B:F7:79:84:96:AD:4C
            X509v3 Authority Key Identifier:
                keyid:55:56:70:03:13:40:B5:D3:1F:A9:E9:3E:FA:B4:F4:9D:5A:55:3B:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CD9y4WrxR5Z8ABqDAfLrTXgwN3dSnZJDtpd1nPAeAprx/0/555670031340B5D31FA9E93EFAB4F49D5A553B33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/555670031340B5D31FA9E93EFAB4F49D5A553B33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CD9y4WrxR5Z8ABqDAfLrTXgwN3dSnZJDtpd1nPAeAprx/0/323830343a366266633a3a2f33322d3332203d3e20323730343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6bfc::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:8a:4e:36:86:af:b2:41:09:31:87:1d:bf:a3:32:68:14:95:
         f0:52:6d:60:6b:01:d4:ad:8c:9b:79:89:f0:ac:3a:23:e0:15:
         b2:ba:02:aa:72:49:99:33:2d:cb:90:3c:43:21:6c:02:e7:fd:
         40:1f:81:b2:85:1e:c9:20:03:ce:7f:0c:0c:e5:60:de:53:3f:
         1e:cb:06:03:91:b3:2d:bd:80:c9:d5:3f:53:c3:c3:93:b5:78:
         ef:0e:38:f8:e2:f5:e9:e9:6f:b5:5c:65:f6:e3:d9:3e:36:e4:
         8e:d0:61:b2:4d:62:bf:a5:b1:bc:1e:8c:3c:7e:88:ef:fc:31:
         2e:3f:5b:bd:ad:a3:f7:f8:09:49:b1:cb:2a:dd:42:d5:49:91:
         49:67:3f:80:87:96:1e:0c:ac:8d:85:aa:cd:73:dc:b9:37:e0:
         39:f0:47:a8:52:67:9c:8b:85:90:24:39:75:20:4c:49:1e:cc:
         f3:52:06:a9:50:ac:0e:6b:f2:cf:2e:76:e3:e0:21:8d:8a:aa:
         85:90:18:98:f5:0c:05:28:22:10:f7:5b:50:60:02:e8:9b:f9:
         18:e7:9f:c0:cd:e0:bf:c5:c5:74:d2:6f:fa:30:09:1d:7d:52:
         76:0d:55:ca:66:56:66:69:bc:64:90:25:04:12:74:90:ff:d3:
         15:a8:6a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org