Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a353662303a3a2f33342d3334203d3e20323638303138.roa
File:                     323830343a353662303a3a2f33342d3334203d3e20323638303138.roa (raw, json)
Hash identifier:          JMdiEPEqnvQItyqDBYdvTyyQEaE+vPBa5+TbTW9zziU=
Subject key identifier:   97:45:F7:21:03:18:05:E4:78:C8:3F:37:45:1A:EC:23:67:D0:FC:32
Certificate issuer:       /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial:       4E32C5CE06CFA09DC5BF0DBAE85DF16CC82043DC
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a353662303a3a2f33342d3334203d3e20323638303138.roa
Signing time:             Thu 05 Oct 2023 17:51:48 +0000
ROA not before:           Thu 05 Oct 2023 17:46:48 +0000
ROA not after:            Thu 03 Oct 2024 17:51:48 +0000
asID:                     268018
IP address blocks:        2804:56b0::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:32:c5:ce:06:cf:a0:9d:c5:bf:0d:ba:e8:5d:f1:6c:c8:20:43:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
        Validity
            Not Before: Oct  5 17:46:48 2023 GMT
            Not After : Oct  3 17:51:48 2024 GMT
        Subject: CN=9745F721031805E478C83F37451AEC2367D0FC32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:7a:b2:b8:b9:7c:d8:5b:9f:4d:fe:8a:7a:d9:
                    ac:a1:8d:20:91:41:e7:08:36:1b:98:97:8e:af:1b:
                    ba:44:2d:06:77:ad:4a:bf:5d:ac:0f:71:bb:ec:a6:
                    4c:43:6e:5c:fa:19:89:c8:d7:11:52:1d:85:62:28:
                    c5:63:e2:db:26:5a:05:46:f3:8c:8e:02:3b:00:ce:
                    6e:7c:a3:b3:97:8f:54:5a:aa:c6:0e:aa:da:01:88:
                    f4:ee:84:f5:45:8e:ac:2e:63:55:34:11:07:03:38:
                    ad:a1:cf:b6:73:20:5d:15:70:b5:b1:c2:6b:4f:71:
                    0a:a7:aa:b7:51:a3:3e:ba:09:64:4a:52:0d:db:f3:
                    d5:d1:ec:ce:99:39:15:ce:c7:a1:14:16:8a:3c:6d:
                    3d:25:ce:87:93:49:71:23:fc:c8:42:09:96:d9:00:
                    1e:10:27:ba:2b:1b:d9:fa:85:8a:de:bf:80:9d:d3:
                    ea:82:95:d6:78:07:09:1a:6a:c8:4e:8c:44:92:e9:
                    1f:0b:a5:c0:b6:fd:cd:fb:fe:f5:ff:9a:6b:67:ee:
                    56:4a:8f:19:a8:4a:8d:b9:87:a0:26:3b:aa:d0:a5:
                    a8:b6:36:b8:8c:51:0d:8f:df:8c:f6:4e:9d:38:ed:
                    26:29:9e:48:90:d2:48:3a:01:19:c1:1a:9a:61:63:
                    e0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:45:F7:21:03:18:05:E4:78:C8:3F:37:45:1A:EC:23:67:D0:FC:32
            X509v3 Authority Key Identifier:
                keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a353662303a3a2f33342d3334203d3e20323638303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56b0::/34

    Signature Algorithm: sha256WithRSAEncryption
         7a:90:3a:a5:33:94:14:7d:98:b3:67:10:6a:b4:88:07:12:9b:
         74:7c:7d:4d:d0:6a:43:bd:31:01:e2:44:51:a9:da:8c:8b:5c:
         30:6b:13:2a:3a:33:39:32:cd:c6:35:f5:18:f6:9a:1b:04:ec:
         9a:82:2b:94:29:ad:82:db:52:48:49:84:7c:d1:86:be:4f:7d:
         0e:4b:85:5f:f7:4e:6c:61:58:e5:b4:6c:44:d8:71:55:3f:59:
         6d:5e:0f:f5:28:94:a4:ea:9b:a2:c2:17:70:d2:62:1a:62:92:
         48:79:52:0a:22:84:bb:ae:39:6d:77:ff:c5:69:15:3a:f1:67:
         ef:f3:ea:a1:a7:a8:e0:5c:e6:6d:57:1c:bf:12:26:33:d2:8b:
         0f:d9:29:b8:dd:ee:7d:71:73:80:78:b7:e1:2d:c2:45:6e:1f:
         3e:8b:29:7e:ac:92:31:56:93:eb:61:e5:30:64:41:e5:34:87:
         5b:e0:64:91:88:85:ae:d5:f3:7e:6a:70:f0:91:93:ed:f8:9d:
         21:92:19:a4:d5:9f:2c:4d:e5:e6:f7:3b:a5:ac:6f:b5:10:05:
         62:b0:20:ef:e6:ee:be:04:49:2e:5b:54:db:88:e7:a9:a0:66:
         5b:2f:af:ec:90:4b:98:64:81:f5:4a:ec:94:8e:57:63:41:bc:
         2a:14:97:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:05 2024 by rpki-client on console-ams.rpki-client.org