Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/323830343a343838633a343030303a3a2f33342d3334203d3e20323637313238.roa
File:                     323830343a343838633a343030303a3a2f33342d3334203d3e20323637313238.roa (raw, json)
Hash identifier:          iJnG7ukthgm+Or4JLCbWFaB1o8GNxscgsxe0R/1Rjg8=
Subject key identifier:   E4:B7:AA:C8:C5:DB:33:A6:6B:0B:EF:BB:7D:59:43:F5:9F:1D:8D:BC
Certificate issuer:       /CN=F53D745990071B2CCEF5F48CBFA053605498A66A
Certificate serial:       467D3C8886FB413BF06892B013B73E06A99D044C
Authority key identifier: F5:3D:74:59:90:07:1B:2C:CE:F5:F4:8C:BF:A0:53:60:54:98:A6:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F53D745990071B2CCEF5F48CBFA053605498A66A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/323830343a343838633a343030303a3a2f33342d3334203d3e20323637313238.roa
Signing time:             Tue 05 Dec 2023 14:00:01 +0000
ROA not before:           Tue 05 Dec 2023 13:55:01 +0000
ROA not after:            Tue 03 Dec 2024 14:00:01 +0000
asID:                     267128
IP address blocks:        2804:488c:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:7d:3c:88:86:fb:41:3b:f0:68:92:b0:13:b7:3e:06:a9:9d:04:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F53D745990071B2CCEF5F48CBFA053605498A66A
        Validity
            Not Before: Dec  5 13:55:01 2023 GMT
            Not After : Dec  3 14:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0b:48:d5:43:b9:c8:98:93:15:35:c0:91:af:
                    3f:dc:67:2d:f0:18:cc:a2:87:a8:b4:73:16:a2:30:
                    4b:0f:5d:ad:d0:7c:04:fe:11:51:fd:36:71:4a:9b:
                    bb:95:7b:1d:9c:41:f2:75:e4:b1:d0:6d:6c:37:28:
                    4f:2a:d3:12:3e:e8:3b:5a:9b:fb:fc:56:d6:19:60:
                    85:04:19:7a:a1:e6:92:89:9f:6b:e4:e9:73:27:2e:
                    ff:31:f4:0a:c5:e5:45:f4:45:4d:92:c8:59:89:86:
                    8a:34:a4:6a:4f:18:cf:85:29:37:a8:66:d3:c3:ad:
                    60:46:a3:66:fa:71:0c:93:d3:fc:6d:66:51:39:95:
                    7e:8b:9b:77:fd:31:69:a5:11:20:1c:2a:46:64:25:
                    13:b8:95:a6:82:cd:13:0d:71:b0:18:f5:25:be:9a:
                    1b:b6:73:13:54:27:d8:c2:90:07:42:73:a8:f3:4c:
                    51:5c:ef:8e:c3:a5:47:49:16:54:43:88:ca:2b:d6:
                    c1:a6:ea:10:24:10:d4:8c:b3:e7:c2:c7:06:bf:e4:
                    3e:67:07:6e:9b:d4:28:73:91:ad:7f:7f:13:4b:40:
                    1b:68:d4:d9:9a:56:87:c9:8f:e8:c6:90:40:28:7d:
                    81:8c:ce:8c:25:4b:f7:49:ea:ba:79:a1:a5:f8:d1:
                    e9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B7:AA:C8:C5:DB:33:A6:6B:0B:EF:BB:7D:59:43:F5:9F:1D:8D:BC
            X509v3 Authority Key Identifier:
                keyid:F5:3D:74:59:90:07:1B:2C:CE:F5:F4:8C:BF:A0:53:60:54:98:A6:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/F53D745990071B2CCEF5F48CBFA053605498A66A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F53D745990071B2CCEF5F48CBFA053605498A66A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/323830343a343838633a343030303a3a2f33342d3334203d3e20323637313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:488c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         92:61:d2:d3:0e:ad:49:66:bd:80:47:15:d6:0e:45:e5:9f:01:
         43:77:31:30:1f:5f:bc:99:e4:b4:bf:46:08:80:f4:a3:a5:85:
         e5:bc:47:09:f9:70:5d:d1:0b:e2:51:0a:1d:32:f8:26:0d:e7:
         d8:67:c1:77:ad:fc:f8:c2:33:ce:35:99:c9:51:e3:2a:78:7b:
         34:3f:99:8a:14:90:33:85:9f:46:fb:bc:27:a8:1c:05:8b:65:
         3a:40:33:35:f1:0d:f0:c0:39:f1:8f:64:3b:ba:1d:3f:45:31:
         10:5b:ae:42:67:0b:14:c0:d5:79:23:fe:69:18:93:48:55:db:
         97:f8:77:91:f7:cc:67:76:14:2e:9a:82:06:a8:64:31:bc:82:
         12:37:8d:13:5b:a3:a8:e6:f9:b0:e2:67:50:1e:a0:13:48:9f:
         5b:a9:4e:63:a0:4e:75:7d:e9:64:71:ac:e8:54:7a:fb:d1:0f:
         e8:26:00:65:ff:55:57:b9:02:68:00:09:5f:4a:a7:56:e5:2b:
         a9:c2:fb:15:3d:5d:23:69:e9:5e:89:ba:4a:63:5a:a1:1d:09:
         83:20:cc:4a:21:01:1a:8c:e8:be:0c:53:67:9c:7f:9c:4e:98:
         48:da:7d:75:56:88:1f:82:b2:f1:2a:f7:83:31:c5:a0:c9:23:
         db:b9:7c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org