Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/323830343a343332633a313030303a3a2f34302d3430203d3e20323637353533.roa
File:                     323830343a343332633a313030303a3a2f34302d3430203d3e20323637353533.roa (raw, json)
Hash identifier:          4XyZ/ZAuqePWvcZt2o8+fyqngWDJcvCr6pGM5B9EJWE=
Subject key identifier:   23:F0:81:4B:EE:16:14:24:09:9D:C5:CA:BD:29:B4:43:81:04:8B:A1
Certificate issuer:       /CN=66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3
Certificate serial:       410EB63C8F555537CE9224DE8B0EFFE85C052816
Authority key identifier: 66:EC:78:F4:7E:AA:40:A6:AB:C0:E1:EE:29:D0:3B:4D:90:69:04:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/323830343a343332633a313030303a3a2f34302d3430203d3e20323637353533.roa
Signing time:             Mon 23 Oct 2023 18:25:22 +0000
ROA not before:           Mon 23 Oct 2023 18:20:22 +0000
ROA not after:            Mon 21 Oct 2024 18:25:22 +0000
asID:                     267553
IP address blocks:        2804:432c:1000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:0e:b6:3c:8f:55:55:37:ce:92:24:de:8b:0e:ff:e8:5c:05:28:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3
        Validity
            Not Before: Oct 23 18:20:22 2023 GMT
            Not After : Oct 21 18:25:22 2024 GMT
        Subject: CN=23F0814BEE161424099DC5CABD29B44381048BA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d7:8c:b7:e5:e9:15:1f:77:6c:d0:bf:2c:6e:
                    fc:dc:35:0e:5f:25:18:26:f1:a3:c3:0e:ff:bc:28:
                    af:48:eb:a8:f8:04:7a:fb:40:01:44:00:1b:07:04:
                    5d:61:92:ba:f8:c8:b3:7d:6c:7c:e0:a3:a9:56:82:
                    30:1b:3f:d0:d9:ab:ac:41:2b:aa:9c:09:05:f2:65:
                    57:3d:33:b9:21:5d:71:00:02:f2:b2:32:20:b9:d0:
                    52:72:61:e2:ed:8d:1b:e7:4b:c5:ee:66:cf:44:87:
                    eb:d5:61:66:82:11:06:67:f4:ed:dd:e8:b1:27:1f:
                    19:3f:cb:98:2a:c1:07:8e:a9:6a:3b:de:b7:3f:da:
                    8a:e5:51:c4:7a:e8:77:43:e6:69:17:6c:55:6a:f5:
                    4c:ef:c3:00:9f:ad:d4:ec:00:4a:90:a6:b2:c3:4a:
                    3e:a7:d5:af:4f:6b:21:b3:66:f9:01:1d:a1:74:c1:
                    f7:bc:7d:9a:57:c9:f7:62:a8:ef:d1:a9:eb:f6:12:
                    7e:9c:8d:de:60:f3:bc:f6:e6:ce:d0:e3:9d:3a:03:
                    83:e6:a9:3f:38:1d:0e:ad:b8:0e:e6:46:a8:40:4c:
                    dd:33:e5:b9:70:aa:d1:94:32:7d:39:9b:20:8a:83:
                    14:d5:e1:70:d0:2f:c3:36:bc:db:8a:3b:4b:90:4f:
                    e4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F0:81:4B:EE:16:14:24:09:9D:C5:CA:BD:29:B4:43:81:04:8B:A1
            X509v3 Authority Key Identifier:
                keyid:66:EC:78:F4:7E:AA:40:A6:AB:C0:E1:EE:29:D0:3B:4D:90:69:04:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/323830343a343332633a313030303a3a2f34302d3430203d3e20323637353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:432c:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         11:68:4e:4d:11:ad:64:f5:77:ba:88:c7:41:1d:95:22:f3:af:
         74:60:cb:50:79:ee:20:92:b4:07:9d:dd:29:62:6c:f0:82:d9:
         09:e1:93:13:16:6a:05:75:0c:85:65:84:e7:9b:6b:d6:5a:89:
         a3:c3:c4:d6:15:4e:52:5b:cf:e9:43:42:83:9c:81:13:12:5e:
         54:4c:7e:e5:f4:bc:d2:45:f1:5a:1c:a2:3e:98:4b:72:ea:94:
         5d:7f:ae:08:7c:60:75:ca:ab:16:1c:04:c2:a0:df:61:0d:07:
         2e:47:05:73:59:ee:19:d6:02:90:bf:a7:44:18:71:41:af:a6:
         4f:87:24:b8:4c:eb:2d:79:7f:be:fb:21:98:56:30:16:af:bc:
         f8:3e:d8:f1:59:88:dc:6d:65:56:52:cb:18:f8:86:3e:c6:64:
         e5:7d:c4:6f:23:e8:63:2b:3e:8b:6f:50:ff:4d:37:21:8e:1d:
         0d:b0:64:85:70:51:09:a7:91:da:46:0a:ae:13:37:74:29:00:
         ea:bf:2f:4c:ed:7a:ae:0b:60:be:05:ac:3e:e0:de:5a:4a:96:
         55:aa:0c:ae:38:3b:94:b2:2d:ce:99:36:d4:45:90:9d:e7:95:
         22:f3:d5:30:e1:bf:1c:f0:ba:65:b9:9e:66:2a:ce:9e:a1:bb:
         dc:07:41:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org