Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6yFDuhbiPjKALtzVh9faWmcN1vZUJmj816FX16UNJva/0/323830343a366233343a633130303a3a2f34302d3430203d3e20323730333835.roa
File:                     323830343a366233343a633130303a3a2f34302d3430203d3e20323730333835.roa (raw, json)
Hash identifier:          1oe15ukpp082+x3Il0fWEpDZ0+nyTPUrGfywqVHeZ+U=
Subject key identifier:   AF:F1:7D:4A:F6:23:F5:3A:37:D1:36:1E:40:F0:5A:D7:DB:6E:2B:70
Certificate issuer:       /CN=4C34B346745A328244B786515F4AA0C97B8EFABE
Certificate serial:       6C43C15A836968942736A29FB0C53C30F946F3CA
Authority key identifier: 4C:34:B3:46:74:5A:32:82:44:B7:86:51:5F:4A:A0:C9:7B:8E:FA:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C34B346745A328244B786515F4AA0C97B8EFABE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6yFDuhbiPjKALtzVh9faWmcN1vZUJmj816FX16UNJva/0/323830343a366233343a633130303a3a2f34302d3430203d3e20323730333835.roa
Signing time:             Thu 01 Jun 2023 14:49:08 +0000
ROA not before:           Thu 01 Jun 2023 14:44:08 +0000
ROA not after:            Thu 30 May 2024 14:49:08 +0000
asID:                     270385
IP address blocks:        2804:6b34:c100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:43:c1:5a:83:69:68:94:27:36:a2:9f:b0:c5:3c:30:f9:46:f3:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C34B346745A328244B786515F4AA0C97B8EFABE
        Validity
            Not Before: Jun  1 14:44:08 2023 GMT
            Not After : May 30 14:49:08 2024 GMT
        Subject: CN=AFF17D4AF623F53A37D1361E40F05AD7DB6E2B70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:36:15:3a:21:a1:93:b6:07:39:39:ad:73:b2:
                    7b:0d:09:8e:1a:31:dd:6a:6c:1f:4b:73:dd:56:65:
                    61:2e:ff:b8:46:10:e2:70:21:07:6a:0a:3d:9b:92:
                    d0:68:61:e0:20:94:b1:42:aa:3c:98:b3:92:71:a3:
                    2b:82:d1:e5:97:69:aa:13:ba:05:df:39:90:9f:86:
                    57:bf:4a:0a:a2:10:70:c3:11:f9:38:e1:6b:a9:e5:
                    2e:41:80:01:65:6e:7a:95:a2:1b:6f:d5:b1:3d:fd:
                    1e:8a:84:06:1f:45:ea:a1:c4:d3:78:a9:1e:f8:cc:
                    0a:9a:e1:06:b3:3d:d5:85:5f:c1:71:69:f0:50:f6:
                    cc:72:e6:80:e3:c7:5d:bf:4f:fb:58:51:c1:95:0c:
                    c4:56:ae:59:b1:69:4e:40:82:1a:28:66:fc:ac:94:
                    f5:67:53:3f:ed:2b:c0:8d:f1:fc:eb:56:8c:08:c7:
                    bf:45:23:a5:ee:45:1b:94:ee:4d:8c:9b:fb:07:9f:
                    9a:8e:9f:63:39:f8:f0:1c:31:02:26:87:0e:a3:48:
                    4f:ee:15:55:de:0c:1a:61:25:e5:7f:8b:1d:88:dc:
                    b5:ee:64:18:36:02:f2:4c:6d:75:a4:96:ef:03:ef:
                    ab:72:83:27:3c:63:53:87:7a:17:8b:3b:f7:db:b1:
                    d2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F1:7D:4A:F6:23:F5:3A:37:D1:36:1E:40:F0:5A:D7:DB:6E:2B:70
            X509v3 Authority Key Identifier:
                keyid:4C:34:B3:46:74:5A:32:82:44:B7:86:51:5F:4A:A0:C9:7B:8E:FA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6yFDuhbiPjKALtzVh9faWmcN1vZUJmj816FX16UNJva/0/4C34B346745A328244B786515F4AA0C97B8EFABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C34B346745A328244B786515F4AA0C97B8EFABE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6yFDuhbiPjKALtzVh9faWmcN1vZUJmj816FX16UNJva/0/323830343a366233343a633130303a3a2f34302d3430203d3e20323730333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b34:c100::/40

    Signature Algorithm: sha256WithRSAEncryption
         85:2a:35:8f:c6:54:3f:5a:e3:12:54:64:b5:16:ea:63:91:2a:
         10:c9:1a:37:03:f1:46:62:12:d9:73:7e:a9:20:84:8a:8d:94:
         42:b7:da:4f:f7:81:5b:b7:cf:ac:e7:5f:b2:a0:f5:c9:12:df:
         1c:8b:3f:f8:e1:a9:23:23:ac:96:28:66:3c:27:1c:4f:60:75:
         4a:b9:17:20:b0:ee:e5:1a:01:9b:41:de:80:5c:9b:c4:a4:d3:
         83:58:bc:14:7f:46:e6:3d:cb:f5:84:85:57:80:38:44:49:a8:
         3a:80:dc:2b:b8:e5:e2:9a:56:97:65:e4:77:77:57:aa:ea:23:
         2e:ba:5c:ca:46:d5:cd:d7:8f:2d:d6:d5:6d:6f:cf:e3:ed:12:
         83:b1:eb:9b:b6:85:e8:8e:fd:44:fb:12:92:1c:3e:8f:7d:e0:
         e8:84:74:93:63:92:9c:b6:9b:2b:5e:3a:c6:8a:3c:f5:16:78:
         f1:a7:38:5b:ac:a5:df:26:da:fb:8e:27:58:e5:83:6f:e3:ff:
         95:19:df:d9:92:24:10:55:f6:4d:2b:fb:68:9d:f2:0c:a3:e7:
         c4:b8:bd:a2:00:8c:f1:3c:43:d9:a6:61:95:69:46:2d:81:1a:
         e2:ba:52:4c:5e:63:2f:9f:e9:4b:3a:c6:5e:e5:c9:e7:6c:ec:
         83:9c:44:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org