Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CKgC6Thsuory4cbMEFpbF7RRxHk7RfWTCvEuP7um4Tbp/0/323830343a386334303a3a2f33322d3438203d3e20323733373931.roa
File:                     323830343a386334303a3a2f33322d3438203d3e20323733373931.roa (raw, json)
Hash identifier:          9eoU8R9tYH9UgFA+7XI5JmG1a2alV2rahSOUnF+ADnk=
Subject key identifier:   D9:DF:A7:35:3D:E3:DF:33:8A:CD:9C:14:3E:07:BB:85:FA:99:85:3A
Certificate issuer:       /CN=CB34BE4B575A976B54BC006CBC4FB9D2F46EA28D
Certificate serial:       5B730C05A76C36FAC3272D6254DD9ED3AFE22BA4
Authority key identifier: CB:34:BE:4B:57:5A:97:6B:54:BC:00:6C:BC:4F:B9:D2:F4:6E:A2:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB34BE4B575A976B54BC006CBC4FB9D2F46EA28D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKgC6Thsuory4cbMEFpbF7RRxHk7RfWTCvEuP7um4Tbp/0/323830343a386334303a3a2f33322d3438203d3e20323733373931.roa
Signing time:             Wed 12 Jul 2023 11:58:17 +0000
ROA not before:           Wed 12 Jul 2023 11:53:17 +0000
ROA not after:            Wed 10 Jul 2024 11:58:17 +0000
asID:                     273791
IP address blocks:        2804:8c40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:73:0c:05:a7:6c:36:fa:c3:27:2d:62:54:dd:9e:d3:af:e2:2b:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB34BE4B575A976B54BC006CBC4FB9D2F46EA28D
        Validity
            Not Before: Jul 12 11:53:17 2023 GMT
            Not After : Jul 10 11:58:17 2024 GMT
        Subject: CN=D9DFA7353DE3DF338ACD9C143E07BB85FA99853A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1c:a9:87:08:01:59:89:66:61:16:31:b8:0d:
                    b0:3f:ff:98:49:7b:88:21:a7:2d:9e:c5:5a:41:6b:
                    87:35:34:4d:b9:62:b8:55:f1:69:79:b0:47:d6:3d:
                    be:08:8e:4f:39:3c:2c:97:15:22:ce:0f:c8:bf:4e:
                    f6:8c:7b:6e:f6:b9:19:d9:5f:44:5d:c1:1f:5a:fe:
                    67:59:53:80:1f:76:02:45:19:36:3b:70:1b:5a:83:
                    32:e4:56:63:b5:30:6d:d5:78:56:c5:9e:67:9d:b6:
                    1f:df:4f:09:6b:dc:89:d9:9a:e3:2c:cd:f8:cb:9c:
                    c5:59:64:65:45:db:20:9a:38:cb:d2:e2:3a:6f:ba:
                    9e:17:d7:18:ad:64:c7:07:f1:e6:f8:ce:33:db:8f:
                    d7:b0:9a:17:41:d7:76:e4:d3:93:20:b3:56:d2:62:
                    a5:30:c1:46:9b:04:d5:a0:2b:41:e7:27:82:a8:25:
                    48:b4:34:a0:d7:0f:0c:15:1b:c4:6e:49:c6:c6:57:
                    75:ce:95:30:d0:47:13:6c:6c:dd:4d:14:82:a7:79:
                    0a:90:47:f3:95:82:fd:e3:53:62:ea:f4:49:bb:00:
                    de:8d:7f:60:df:15:01:e3:f5:11:99:89:b8:99:9c:
                    e2:e5:82:e6:2b:ea:49:67:cd:f4:41:87:de:e5:ca:
                    74:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:DF:A7:35:3D:E3:DF:33:8A:CD:9C:14:3E:07:BB:85:FA:99:85:3A
            X509v3 Authority Key Identifier:
                keyid:CB:34:BE:4B:57:5A:97:6B:54:BC:00:6C:BC:4F:B9:D2:F4:6E:A2:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKgC6Thsuory4cbMEFpbF7RRxHk7RfWTCvEuP7um4Tbp/0/CB34BE4B575A976B54BC006CBC4FB9D2F46EA28D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB34BE4B575A976B54BC006CBC4FB9D2F46EA28D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKgC6Thsuory4cbMEFpbF7RRxHk7RfWTCvEuP7um4Tbp/0/323830343a386334303a3a2f33322d3438203d3e20323733373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c40::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:2b:8e:d5:28:0b:80:f1:70:c1:1c:22:37:0f:8b:93:71:3f:
         ff:7c:98:7e:ba:a1:52:6c:98:86:39:e0:f1:34:d0:9a:35:66:
         3b:ca:bc:cd:96:8f:31:60:4f:a7:00:a1:77:77:57:6b:9e:26:
         68:bd:44:e3:d8:b3:be:d8:6d:3e:02:87:4d:3e:44:e7:bf:25:
         8d:ff:e3:f5:dd:75:0b:2d:20:23:41:a7:f0:89:d0:01:f3:34:
         f2:b6:10:f1:f2:d5:d3:08:09:33:fd:77:55:65:ec:eb:e7:ce:
         3a:35:79:c3:fd:0f:76:1b:66:e7:e2:d3:e9:12:fb:52:a5:32:
         aa:3e:5d:2a:5a:f5:92:5e:de:4b:91:2c:3b:7f:64:d7:30:a9:
         57:2b:c9:13:a7:26:34:27:8e:b8:7b:d4:04:c9:38:20:6c:3d:
         87:71:11:fa:ad:5a:54:e1:28:13:d9:84:9e:b9:64:28:00:93:
         50:4c:41:3f:24:e5:be:75:6f:da:a5:96:75:e4:64:09:c5:62:
         70:74:9e:4e:b2:ee:51:c9:00:2a:07:c4:67:4e:6b:f5:0c:3b:
         7f:b1:36:07:c9:1a:75:65:68:55:98:2b:5d:7d:b6:35:86:a6:
         a1:74:32:c9:f9:66:64:02:9d:34:63:54:15:8f:20:f6:be:aa:
         82:37:26:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org