Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/0/323830343a313863303a313730303a3a2f34302d3430203d3e203631393531.roa
File:                     323830343a313863303a313730303a3a2f34302d3430203d3e203631393531.roa (raw, json)
Hash identifier:          fOfwnE/ZW+qcYlZOsLBPha6IDlNcAZsNmS14PWWcxLs=
Subject key identifier:   3B:FE:A1:B6:5F:5D:E6:93:D1:E1:E4:79:B8:94:30:4C:0B:9A:2F:E0
Certificate issuer:       /CN=AD11323C0E6BB3E7C20013E38E3719626E213855
Certificate serial:       4DFEF3BDF99C70B40952E500D5B67E4CB752C15C
Authority key identifier: AD:11:32:3C:0E:6B:B3:E7:C2:00:13:E3:8E:37:19:62:6E:21:38:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD11323C0E6BB3E7C20013E38E3719626E213855.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/0/323830343a313863303a313730303a3a2f34302d3430203d3e203631393531.roa
Signing time:             Mon 11 Jul 2022 14:21:28 +0000
ROA not before:           Mon 11 Jul 2022 14:16:28 +0000
ROA not after:            Mon 10 Jul 2023 14:21:28 +0000
asID:                     61951
IP address blocks:        2804:18c0:1700::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:fe:f3:bd:f9:9c:70:b4:09:52:e5:00:d5:b6:7e:4c:b7:52:c1:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD11323C0E6BB3E7C20013E38E3719626E213855
        Validity
            Not Before: Jul 11 14:16:28 2022 GMT
            Not After : Jul 10 14:21:28 2023 GMT
        Subject: CN=3BFEA1B65F5DE693D1E1E479B894304C0B9A2FE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:94:79:9b:51:af:23:ff:7f:03:e2:3f:db:33:
                    f3:cb:f5:e1:10:c8:20:13:37:57:19:0f:4a:67:a3:
                    38:77:da:f3:d1:10:76:80:74:d3:97:72:d8:ac:68:
                    bc:54:20:42:24:67:e7:79:61:c7:71:42:51:69:0a:
                    76:81:54:1a:1d:5b:5e:f1:c6:f4:91:f5:7e:32:1c:
                    17:d9:55:ab:5b:b3:ec:02:4a:e5:25:90:96:6b:d7:
                    f7:28:0a:26:ef:cd:48:29:85:d0:01:0a:ba:8b:35:
                    3f:3c:08:04:21:d0:ae:ed:0a:c3:0c:53:5f:a7:77:
                    cd:b4:96:ea:6a:e2:52:f6:ae:4b:80:ef:5e:18:0a:
                    2f:d8:88:8d:c3:d6:3c:d0:5d:1c:db:18:4a:30:3b:
                    9d:ac:d3:89:af:80:eb:75:03:e4:e1:a6:d0:b8:5d:
                    7e:eb:c1:d7:5c:c6:ce:79:65:90:39:3c:c1:09:03:
                    1f:65:10:c2:f8:95:6a:79:d6:b0:25:98:3b:35:66:
                    72:fe:c8:81:38:8f:fc:10:19:b4:ca:ec:dc:b2:c1:
                    cd:57:f6:80:41:ed:72:73:e5:68:5d:60:15:bc:be:
                    83:40:ce:1c:e3:6c:f2:7c:02:4a:8b:43:04:f3:61:
                    b9:c1:71:eb:4d:a6:70:fb:10:cc:1a:27:5a:85:c2:
                    2f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:FE:A1:B6:5F:5D:E6:93:D1:E1:E4:79:B8:94:30:4C:0B:9A:2F:E0
            X509v3 Authority Key Identifier:
                keyid:AD:11:32:3C:0E:6B:B3:E7:C2:00:13:E3:8E:37:19:62:6E:21:38:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/0/AD11323C0E6BB3E7C20013E38E3719626E213855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD11323C0E6BB3E7C20013E38E3719626E213855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/0/323830343a313863303a313730303a3a2f34302d3430203d3e203631393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:18c0:1700::/40

    Signature Algorithm: sha256WithRSAEncryption
         3a:33:61:a6:f2:90:53:e2:fa:81:b8:47:1f:2a:2e:84:4c:c5:
         c7:36:81:45:93:90:41:28:e2:61:93:b6:e0:57:8f:d1:a3:b5:
         40:01:90:21:55:4f:26:a6:5d:cf:0e:31:b0:ad:c0:5d:57:8d:
         0b:c1:fb:04:cc:63:d6:14:c9:c5:8c:c9:da:9f:e3:e1:2a:91:
         26:4c:4f:99:8c:40:68:b5:56:08:0c:17:db:24:67:3e:7f:c5:
         f4:38:10:a2:0a:1b:75:df:d5:f0:a3:dd:69:05:b8:c2:5e:b2:
         c4:c3:a3:07:cf:a5:15:8f:35:4a:f4:29:96:b0:6e:2f:b6:19:
         37:24:1b:c0:0a:cb:09:72:2f:20:54:68:1b:77:65:71:60:cc:
         ab:14:15:ae:8a:88:8b:d6:ed:7d:3a:fe:f8:44:e0:6c:d5:f5:
         1b:e1:23:4d:44:58:4a:21:b6:8e:e4:a5:68:e1:fc:0b:99:5f:
         b3:d4:c3:97:23:e1:f8:28:48:57:17:4c:4d:1c:43:7f:a3:ba:
         30:3e:e2:c1:b0:2b:f6:79:1f:2c:2a:0a:17:74:76:7b:3c:11:
         14:9b:34:33:30:cd:db:ad:31:7d:0a:8f:7c:63:1d:cf:94:6f:
         99:85:6e:f9:30:1b:14:0c:3d:96:27:9b:1f:c6:ea:5b:7d:1d:
         1e:fc:45:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org