Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/323830343a333434383a383030303a3a2f33342d3334203d3e20323635343437.roa
File:                     323830343a333434383a383030303a3a2f33342d3334203d3e20323635343437.roa (raw, json)
Hash identifier:          KwIq9aHlCA5V9W2KCL3rbnJ3SVJsjXB44aFDkK0Tpis=
Subject key identifier:   6E:BC:CC:EB:05:C7:01:79:F9:24:FD:E6:40:77:17:38:88:97:85:97
Certificate issuer:       /CN=66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3
Certificate serial:       4B3D0B73E1BBB45828CDA8395EE6F0CB8D7C9603
Authority key identifier: 66:EC:78:F4:7E:AA:40:A6:AB:C0:E1:EE:29:D0:3B:4D:90:69:04:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/323830343a333434383a383030303a3a2f33342d3334203d3e20323635343437.roa
Signing time:             Mon 23 Oct 2023 18:25:22 +0000
ROA not before:           Mon 23 Oct 2023 18:20:22 +0000
ROA not after:            Mon 21 Oct 2024 18:25:22 +0000
asID:                     265447
IP address blocks:        2804:3448:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:3d:0b:73:e1:bb:b4:58:28:cd:a8:39:5e:e6:f0:cb:8d:7c:96:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3
        Validity
            Not Before: Oct 23 18:20:22 2023 GMT
            Not After : Oct 21 18:25:22 2024 GMT
        Subject: CN=6EBCCCEB05C70179F924FDE64077173888978597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bb:7b:76:47:30:a0:5b:2c:c6:9a:d4:5b:a9:
                    22:bc:a1:3a:d4:48:40:4f:17:d1:b3:09:27:f1:cc:
                    a9:24:b7:bb:f1:d9:da:67:8f:c3:3e:0a:7b:36:c6:
                    fe:56:48:06:39:48:2f:8e:33:f7:04:e0:02:fd:15:
                    30:31:e0:3d:ac:d2:ad:5c:29:54:a0:c9:2d:94:12:
                    73:44:a5:2a:ce:40:a0:d3:56:60:70:0c:2a:3e:43:
                    da:3f:81:45:75:4b:7d:19:59:6a:e3:9b:39:85:f4:
                    c9:e2:33:e9:78:99:f6:b8:b7:a0:73:e4:79:01:ec:
                    c4:91:d1:9e:1f:ec:a4:44:de:16:0d:5a:6f:65:18:
                    b7:b0:2e:bc:91:31:6f:0c:73:a2:d0:82:4d:c3:3f:
                    fb:a7:be:b9:75:50:5d:ef:c7:27:3f:7e:09:78:1e:
                    ef:82:11:5d:cb:8d:f8:db:63:f6:6d:51:c9:0f:50:
                    b2:db:2c:60:6c:52:16:23:fe:38:59:8b:6b:24:fd:
                    cf:b6:9e:f5:05:cf:b5:46:b5:8a:b2:62:91:a0:a9:
                    95:7c:2a:45:de:10:fe:43:ae:45:47:00:38:ca:bb:
                    eb:d7:23:f4:0b:9a:c1:70:1f:0d:55:f4:50:b4:d0:
                    89:5e:2a:9c:77:33:40:41:f1:c7:41:3a:ea:4d:a2:
                    5e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:BC:CC:EB:05:C7:01:79:F9:24:FD:E6:40:77:17:38:88:97:85:97
            X509v3 Authority Key Identifier:
                keyid:66:EC:78:F4:7E:AA:40:A6:AB:C0:E1:EE:29:D0:3B:4D:90:69:04:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/323830343a333434383a383030303a3a2f33342d3334203d3e20323635343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3448:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         38:4c:86:e5:ec:20:57:d5:5b:a8:3d:c2:ba:3e:20:b1:ec:5b:
         1d:8a:e3:50:24:cf:09:94:9f:51:3b:4f:46:3a:d2:85:81:29:
         71:cb:14:e1:af:39:b0:54:8b:e8:da:66:4d:eb:6a:ae:7e:06:
         84:ca:e8:cb:1d:00:9e:fa:fc:e8:5a:cf:eb:16:64:f2:e2:2b:
         8d:6b:b2:da:1c:0a:9e:68:f3:08:b2:4d:86:74:01:9c:c6:0c:
         38:8e:27:17:78:39:b6:0f:87:32:f4:dc:df:31:ef:be:28:1f:
         71:66:3d:88:7b:5d:9a:d1:d3:36:1f:64:f0:92:52:bd:47:75:
         32:67:31:f5:7b:89:b0:10:7a:b0:13:8d:7e:2a:31:c8:c3:f2:
         f1:12:9c:fd:8a:bc:48:39:fe:52:08:34:c6:f8:42:0d:b9:fc:
         dd:f2:5c:1f:5d:14:93:fd:20:a5:ea:08:d6:d0:63:ba:57:31:
         68:69:b7:f7:6f:e3:b7:00:48:d2:14:3a:ca:d9:aa:69:3a:60:
         3b:1e:31:7c:f1:7a:4a:f4:fa:79:0f:29:ba:44:f0:68:9b:d1:
         7f:67:53:e7:b8:a6:6c:af:92:ab:a6:48:b7:79:30:7d:ed:4c:
         65:34:92:65:0f:7a:33:84:f6:5b:e2:77:d1:19:3d:f5:20:03:
         73:72:43:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org