Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6yFDuhbiPjKALtzVh9faWmcN1vZUJmj816FX16UNJva/0/323830343a366233343a383130303a3a2f34302d3430203d3e20323730333835.roa
File:                     323830343a366233343a383130303a3a2f34302d3430203d3e20323730333835.roa (raw, json)
Hash identifier:          2h35zvUvlrysKpXf6MIIWQE7nZNVgEhoc2BNiVAw3kI=
Subject key identifier:   D5:5F:A8:F8:A6:D4:79:3D:A5:27:89:F2:E5:08:9D:A9:0F:0A:DA:80
Certificate issuer:       /CN=4C34B346745A328244B786515F4AA0C97B8EFABE
Certificate serial:       0C31B312DD1698E5A9BD038E0F03E05987A65F43
Authority key identifier: 4C:34:B3:46:74:5A:32:82:44:B7:86:51:5F:4A:A0:C9:7B:8E:FA:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C34B346745A328244B786515F4AA0C97B8EFABE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6yFDuhbiPjKALtzVh9faWmcN1vZUJmj816FX16UNJva/0/323830343a366233343a383130303a3a2f34302d3430203d3e20323730333835.roa
Signing time:             Thu 01 Jun 2023 14:35:47 +0000
ROA not before:           Thu 01 Jun 2023 14:30:47 +0000
ROA not after:            Thu 30 May 2024 14:35:47 +0000
asID:                     270385
IP address blocks:        2804:6b34:8100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:31:b3:12:dd:16:98:e5:a9:bd:03:8e:0f:03:e0:59:87:a6:5f:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C34B346745A328244B786515F4AA0C97B8EFABE
        Validity
            Not Before: Jun  1 14:30:47 2023 GMT
            Not After : May 30 14:35:47 2024 GMT
        Subject: CN=D55FA8F8A6D4793DA52789F2E5089DA90F0ADA80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4a:84:f5:c1:0e:06:36:a5:20:51:75:fa:71:
                    6c:c7:14:0c:d0:ec:7d:7c:31:92:be:b6:ce:dd:9f:
                    41:b6:b4:d7:3a:a8:3e:fe:11:51:1a:a7:d0:90:41:
                    b4:18:e1:1b:d1:fb:77:cc:fc:62:d7:e6:22:55:1d:
                    d8:84:01:aa:10:19:1d:89:42:7f:57:c5:e3:35:6d:
                    1a:00:46:ec:d5:47:c1:f7:b7:ea:dd:ed:7a:23:63:
                    3b:9c:ca:91:97:55:94:48:6d:a0:4f:61:4f:b6:d4:
                    a5:71:70:e2:66:10:63:1d:b7:ee:e7:04:99:9e:5f:
                    22:94:ac:11:a2:ff:cd:71:60:d5:41:5f:dc:36:03:
                    e8:e9:3a:35:49:f4:c6:3f:e5:ce:51:78:d9:2a:a7:
                    ac:7d:97:28:9a:9d:b0:e4:58:df:45:e6:80:31:25:
                    f5:d6:cf:7f:40:13:55:b1:65:11:b2:a7:f2:75:af:
                    31:e1:01:2b:67:9f:94:ce:34:22:98:d4:11:9b:67:
                    4e:6e:22:a4:2d:f8:8e:e7:a7:ed:c2:9a:ef:44:96:
                    db:cd:a0:f3:cd:54:f6:1b:b4:be:84:20:b0:c9:aa:
                    7f:ac:da:90:a9:62:5e:21:67:18:36:88:c2:df:69:
                    ff:b7:3e:dc:a8:dc:d9:67:16:cb:c5:b7:54:e6:ca:
                    d7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:5F:A8:F8:A6:D4:79:3D:A5:27:89:F2:E5:08:9D:A9:0F:0A:DA:80
            X509v3 Authority Key Identifier:
                keyid:4C:34:B3:46:74:5A:32:82:44:B7:86:51:5F:4A:A0:C9:7B:8E:FA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6yFDuhbiPjKALtzVh9faWmcN1vZUJmj816FX16UNJva/0/4C34B346745A328244B786515F4AA0C97B8EFABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C34B346745A328244B786515F4AA0C97B8EFABE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6yFDuhbiPjKALtzVh9faWmcN1vZUJmj816FX16UNJva/0/323830343a366233343a383130303a3a2f34302d3430203d3e20323730333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b34:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         c3:87:f2:88:3a:5e:bf:36:fb:eb:c5:8c:da:31:fa:65:71:ea:
         63:a1:2f:8a:01:7a:2f:d1:e9:f0:e5:89:1e:54:71:60:fa:72:
         04:ee:74:5f:35:28:a7:1f:c1:10:02:fe:02:3e:63:19:8a:13:
         5e:fd:7f:95:55:f7:34:7c:bd:44:3a:d7:da:bd:e3:9f:fc:be:
         0f:57:68:90:23:17:62:02:90:fd:70:17:9d:22:1d:ac:67:53:
         1c:5e:00:6c:02:3e:b0:d8:3f:06:c2:ba:07:ae:ef:ea:68:83:
         c4:7b:0f:70:14:3d:a9:7b:d5:46:25:62:2f:8f:6b:0f:99:45:
         df:19:d4:e4:ec:68:17:c0:b7:28:81:05:88:64:d3:ab:3d:c8:
         b3:9a:cc:45:7b:4b:b2:b0:d3:fe:7d:ba:7a:f8:9e:53:b3:c0:
         54:19:a1:13:1c:65:07:0d:1f:45:cb:7e:58:bc:75:ec:ed:d5:
         e3:ba:78:aa:7d:23:44:b1:ee:c3:bb:48:8b:89:98:3a:e5:af:
         f3:bd:8d:8c:2e:ba:bb:90:74:eb:75:85:f7:4d:55:d9:68:6c:
         0f:0d:44:1d:a6:28:4e:0a:2d:4e:2e:f5:f3:e1:f8:3e:d6:d1:
         30:0c:a3:70:3d:31:72:76:1d:c5:9d:a8:54:82:39:64:9f:ea:
         72:34:ea:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org