Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/323830343a316564633a3a2f33342d3334203d3e20323634343530.roa
File:                     323830343a316564633a3a2f33342d3334203d3e20323634343530.roa (raw, json)
Hash identifier:          P/Uz/PDsYYlMpJHJp90PiUtdCurvPRB55Ua/sF9LYH8=
Subject key identifier:   3F:27:26:1F:CC:30:1D:3E:23:B5:E4:32:79:13:20:08:6B:C5:E5:C4
Certificate issuer:       /CN=C9ECAC7AB6BED4BE6B6F62B498C830B2F16D2CF8
Certificate serial:       20FD21F5F1BD7B67B04F6FEEF6C97C3B3DC68E94
Authority key identifier: C9:EC:AC:7A:B6:BE:D4:BE:6B:6F:62:B4:98:C8:30:B2:F1:6D:2C:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9ECAC7AB6BED4BE6B6F62B498C830B2F16D2CF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/323830343a316564633a3a2f33342d3334203d3e20323634343530.roa
Signing time:             Thu 03 Nov 2022 17:14:12 +0000
ROA not before:           Thu 03 Nov 2022 17:09:12 +0000
ROA not after:            Thu 02 Nov 2023 17:14:12 +0000
asID:                     264450
IP address blocks:        2804:1edc::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:fd:21:f5:f1:bd:7b:67:b0:4f:6f:ee:f6:c9:7c:3b:3d:c6:8e:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9ECAC7AB6BED4BE6B6F62B498C830B2F16D2CF8
        Validity
            Not Before: Nov  3 17:09:12 2022 GMT
            Not After : Nov  2 17:14:12 2023 GMT
        Subject: CN=3F27261FCC301D3E23B5E432791320086BC5E5C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:92:d6:da:9e:03:08:2a:d7:b7:ac:48:f6:2b:
                    e4:43:e2:62:11:c2:90:17:42:9c:02:ea:f2:a9:6d:
                    07:d0:e3:06:f6:81:b6:a7:6c:70:c2:5f:fa:24:85:
                    69:7a:5e:69:c8:aa:ef:27:5b:96:c0:b9:fa:d5:d7:
                    e0:78:d5:3f:d8:1b:c1:39:d4:77:8a:9b:0a:07:69:
                    20:a4:33:35:07:35:d2:07:4a:03:97:6a:e7:fb:1b:
                    e0:b2:d9:b9:31:21:08:5d:01:36:00:fb:17:08:77:
                    50:43:3d:e5:e7:b4:93:c8:d6:cc:21:b5:f3:77:25:
                    1d:4b:b3:6a:b6:9a:e1:8c:21:69:85:52:5c:b2:7a:
                    6a:1e:b8:b3:d4:40:3b:ba:a2:a4:d2:ff:26:83:f7:
                    54:19:e7:b0:58:b0:92:49:22:f9:eb:99:16:fd:2d:
                    74:42:c7:65:93:71:f7:e0:06:bc:01:45:09:e9:ff:
                    68:f2:2b:98:49:02:5c:33:cf:97:34:a7:3a:f2:b1:
                    b6:e3:fc:23:bb:17:22:48:df:f1:71:69:52:5e:97:
                    69:15:53:35:f9:cf:95:1f:95:04:6b:fc:3a:29:3e:
                    71:87:6f:f5:2b:db:6d:26:22:02:dc:b1:62:19:14:
                    a5:a2:56:77:e5:48:12:ed:2f:b1:72:27:b9:69:23:
                    38:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:27:26:1F:CC:30:1D:3E:23:B5:E4:32:79:13:20:08:6B:C5:E5:C4
            X509v3 Authority Key Identifier:
                keyid:C9:EC:AC:7A:B6:BE:D4:BE:6B:6F:62:B4:98:C8:30:B2:F1:6D:2C:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/C9ECAC7AB6BED4BE6B6F62B498C830B2F16D2CF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9ECAC7AB6BED4BE6B6F62B498C830B2F16D2CF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/323830343a316564633a3a2f33342d3334203d3e20323634343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1edc::/34

    Signature Algorithm: sha256WithRSAEncryption
         04:86:bf:d1:ae:dc:91:50:d2:d6:6c:27:2e:5e:e2:da:b5:c6:
         44:77:74:23:79:04:2d:4f:79:d3:ad:c8:88:ee:99:5f:7e:07:
         0e:5d:59:43:10:fd:bd:f3:32:3b:06:93:56:92:86:b9:56:3d:
         ec:8f:d1:6c:50:4c:e4:ce:54:ab:11:d3:ea:19:2f:62:64:6f:
         c0:4e:25:17:0c:58:7c:b1:c6:98:28:43:cd:c7:6e:40:5c:20:
         91:46:c4:2b:81:e3:a3:d5:a1:6d:9b:29:fe:7d:03:61:2c:b6:
         96:f5:40:43:72:07:8d:82:48:04:f1:cd:ea:53:52:4e:68:22:
         67:0e:f2:c5:ba:68:bf:92:49:57:65:ab:cd:b0:4e:7d:46:35:
         92:13:03:3d:a8:c3:29:50:97:f1:26:e2:c4:64:7b:e7:75:eb:
         b9:b2:4d:c0:6a:97:6e:b4:a3:73:21:c8:eb:02:78:48:23:8f:
         9d:b9:3a:50:04:10:8e:eb:a1:7b:f0:e0:70:79:37:da:eb:b6:
         6c:44:62:41:ee:c2:4d:65:e8:96:51:03:80:7b:31:69:db:e1:
         f3:9e:e8:ca:8e:39:6c:56:e3:a4:fc:01:be:a8:44:2d:b0:d5:
         98:81:f3:fa:01:86:ca:a0:a8:53:2c:15:f8:9d:06:72:ea:eb:
         7b:29:67:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org