Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/323830343a333434383a633030303a3a2f33342d3334203d3e20323635343437.roa
File:                     323830343a333434383a633030303a3a2f33342d3334203d3e20323635343437.roa (raw, json)
Hash identifier:          x7Dq3BXKzTVmIVJTVy5kZvnm/c4vqEEuK3wv6NGd4wc=
Subject key identifier:   2B:B3:A0:60:06:5B:01:57:D2:44:0E:A6:E8:F6:11:BD:6D:88:A1:23
Certificate issuer:       /CN=66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3
Certificate serial:       1FDA8154EDBF97BC59D346886B58EC56B2141B69
Authority key identifier: 66:EC:78:F4:7E:AA:40:A6:AB:C0:E1:EE:29:D0:3B:4D:90:69:04:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/323830343a333434383a633030303a3a2f33342d3334203d3e20323635343437.roa
Signing time:             Mon 23 Oct 2023 18:25:22 +0000
ROA not before:           Mon 23 Oct 2023 18:20:22 +0000
ROA not after:            Mon 21 Oct 2024 18:25:22 +0000
asID:                     265447
IP address blocks:        2804:3448:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:da:81:54:ed:bf:97:bc:59:d3:46:88:6b:58:ec:56:b2:14:1b:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3
        Validity
            Not Before: Oct 23 18:20:22 2023 GMT
            Not After : Oct 21 18:25:22 2024 GMT
        Subject: CN=2BB3A060065B0157D2440EA6E8F611BD6D88A123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ed:b9:6a:1b:d2:dc:c9:7d:f4:20:c5:2f:b4:
                    e9:d3:c2:9d:91:24:8c:89:f8:34:55:b2:30:c1:bf:
                    b7:76:13:cb:50:05:66:ed:84:e7:4e:9b:31:0e:09:
                    c5:49:2d:a3:8b:36:28:d9:de:5a:f6:53:c1:b2:33:
                    8a:f4:a5:05:96:b9:7e:b0:2e:b0:a6:07:6c:da:78:
                    3e:ad:6d:d4:1f:50:50:a8:6f:f6:35:53:b3:4c:be:
                    39:c0:4a:0f:10:cb:92:54:9d:7d:3a:ad:dc:5a:0e:
                    11:4f:b7:d1:b0:e8:8a:42:3a:0e:6a:57:98:5a:8d:
                    cc:3f:f1:0d:8f:d8:21:4b:9c:14:9f:08:5e:0f:1c:
                    bf:5c:e0:b6:4d:16:dd:0f:ac:24:2c:6f:ea:3b:84:
                    a8:06:4b:89:4c:0b:ed:8a:77:36:51:4c:02:a2:86:
                    ca:e6:e6:52:e7:1f:ce:44:53:0a:fa:9e:67:40:f1:
                    27:4a:02:42:3e:10:d4:c2:49:a1:0d:f7:bd:d9:d0:
                    88:b1:e7:e3:c5:cf:52:df:61:a6:27:15:16:15:68:
                    a8:07:97:05:3b:6e:31:fd:7a:87:8b:56:89:d2:95:
                    32:ca:d8:71:55:c8:c4:b5:c1:f5:fd:a5:96:87:32:
                    29:08:ce:a2:af:ab:5d:3d:2c:49:8d:64:34:2b:14:
                    1a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B3:A0:60:06:5B:01:57:D2:44:0E:A6:E8:F6:11:BD:6D:88:A1:23
            X509v3 Authority Key Identifier:
                keyid:66:EC:78:F4:7E:AA:40:A6:AB:C0:E1:EE:29:D0:3B:4D:90:69:04:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/323830343a333434383a633030303a3a2f33342d3334203d3e20323635343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3448:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         18:42:93:59:a6:fa:03:a7:ef:a7:36:35:a3:45:db:29:d0:93:
         63:39:e4:ac:66:4c:ba:38:01:ff:14:eb:b9:20:48:92:41:cb:
         dd:8d:4f:a6:a0:e8:b3:7d:e6:0c:85:82:05:41:3a:b4:a3:7d:
         92:e4:5e:2c:10:61:1b:f1:7c:22:84:48:b0:6a:a3:02:5b:ad:
         5a:90:01:9d:74:05:3e:d8:14:d6:6c:5b:91:d4:bc:2d:d4:7d:
         47:de:6b:4a:5a:35:97:5b:49:4a:29:16:fe:9b:fd:9b:ff:0f:
         68:6b:9d:72:a1:2b:de:f7:22:12:02:ff:f9:69:8c:fa:85:b2:
         34:ca:24:2b:5f:e0:30:54:1d:34:d8:f9:54:5e:5a:e7:f6:f1:
         d8:01:b3:67:d9:a8:dd:e0:41:a2:3a:25:e5:db:4c:d8:2d:a4:
         7f:bd:cf:c1:9f:69:e4:8d:2c:c0:8f:2a:90:95:e4:e8:61:5b:
         15:67:a7:fa:05:1c:38:c3:85:1c:9e:01:b2:15:89:c6:2a:29:
         80:00:84:97:52:fb:51:fb:ef:54:87:35:17:1f:ec:04:c0:6a:
         10:f4:3a:4a:2b:43:40:af:f5:94:fd:12:60:f5:4b:00:19:27:
         37:4b:d4:22:36:4a:5f:7e:b9:ce:0b:e0:e9:19:14:95:3d:97:
         1b:fc:fc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org