Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/323830343a363462383a633030303a3a2f33342d3334203d3e20323639343434.roa
File:                     323830343a363462383a633030303a3a2f33342d3334203d3e20323639343434.roa (raw, json)
Hash identifier:          lRaWUMI7i36FTJt8n4aeQa8hoE6k7v4qyVxM8lFb9Co=
Subject key identifier:   63:2A:1B:47:7C:81:0B:0F:C9:1B:5F:22:8C:AD:92:61:42:CB:BB:57
Certificate issuer:       /CN=23DD08B01CB87C4A59C18D3779D05E4941011A7B
Certificate serial:       28B6ADEAF2FFF65DDDE6E3B1AC3E0FCF07FA84D0
Authority key identifier: 23:DD:08:B0:1C:B8:7C:4A:59:C1:8D:37:79:D0:5E:49:41:01:1A:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/23DD08B01CB87C4A59C18D3779D05E4941011A7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/323830343a363462383a633030303a3a2f33342d3334203d3e20323639343434.roa
Signing time:             Wed 20 Dec 2023 17:34:20 +0000
ROA not before:           Wed 20 Dec 2023 17:29:20 +0000
ROA not after:            Wed 18 Dec 2024 17:34:20 +0000
asID:                     269444
IP address blocks:        2804:64b8:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:b6:ad:ea:f2:ff:f6:5d:dd:e6:e3:b1:ac:3e:0f:cf:07:fa:84:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23DD08B01CB87C4A59C18D3779D05E4941011A7B
        Validity
            Not Before: Dec 20 17:29:20 2023 GMT
            Not After : Dec 18 17:34:20 2024 GMT
        Subject: CN=632A1B477C810B0FC91B5F228CAD926142CBBB57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c6:33:df:e1:65:db:0a:16:66:56:ac:4c:4f:
                    59:18:4e:63:7c:6d:c0:ec:c6:2e:0c:c1:31:81:b8:
                    31:63:6f:62:75:f6:3e:25:2c:d2:83:65:d8:ab:60:
                    ee:95:33:f4:4b:81:c1:f4:f4:bd:9e:0c:f0:d8:6e:
                    99:35:43:83:12:ed:01:19:7c:9c:85:25:ba:df:a1:
                    58:dc:e9:2f:e5:dd:f8:fc:71:08:c5:bd:d0:18:2a:
                    14:ea:1e:f8:98:17:2d:12:17:30:90:93:a2:2b:bc:
                    6f:eb:1f:39:fa:c9:de:e1:fb:06:0c:49:39:73:49:
                    da:1e:b3:f8:65:6e:bf:38:8a:b3:ab:1f:18:47:d0:
                    97:df:5b:ef:ff:d6:4f:73:a3:36:44:e7:21:46:42:
                    6c:47:f2:fe:a3:48:1f:fc:7b:73:51:59:b7:c9:6d:
                    cf:3d:b1:91:36:10:bc:ab:ea:f2:66:c3:ea:d2:ab:
                    9b:65:53:45:fb:d3:78:15:92:a9:3d:1a:d4:67:9c:
                    21:f1:06:9a:48:fa:31:46:6c:7c:1f:65:a9:92:75:
                    80:c7:8c:b6:bc:b3:3a:15:2d:00:d1:a0:d3:a4:37:
                    d0:57:17:19:e8:6d:4e:79:58:51:fc:3e:e6:f4:1b:
                    4d:01:7d:27:b6:45:10:1f:3a:fd:b6:bb:db:2d:32:
                    85:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2A:1B:47:7C:81:0B:0F:C9:1B:5F:22:8C:AD:92:61:42:CB:BB:57
            X509v3 Authority Key Identifier:
                keyid:23:DD:08:B0:1C:B8:7C:4A:59:C1:8D:37:79:D0:5E:49:41:01:1A:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/23DD08B01CB87C4A59C18D3779D05E4941011A7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/23DD08B01CB87C4A59C18D3779D05E4941011A7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/323830343a363462383a633030303a3a2f33342d3334203d3e20323639343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:64b8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         47:90:86:51:e2:50:8c:e2:27:63:64:34:91:dc:ff:c1:43:bf:
         bd:a4:e8:f8:b9:8b:42:e7:60:cf:29:cc:13:a8:0b:ff:8f:c3:
         41:07:95:a7:be:52:2e:72:6d:22:36:ff:85:44:ce:98:ca:29:
         18:1f:30:29:cc:dd:3b:9d:8d:a0:a7:08:b8:28:a8:01:e8:5f:
         ad:4d:92:d3:b8:ed:f5:e4:96:d4:02:87:4c:4d:a1:99:fa:da:
         38:27:8c:13:0f:b0:33:34:02:30:5b:59:5a:a1:ad:e1:33:21:
         71:5d:ff:34:30:b7:86:63:4f:d2:6e:2d:8e:0d:37:c2:d6:9e:
         d8:24:ba:c1:1c:f4:ee:25:3b:ec:cd:dc:74:9d:e8:49:f5:a9:
         bb:90:d5:92:90:dc:f2:59:dc:ac:fb:26:4d:77:05:37:5c:a7:
         de:52:54:e3:10:70:99:cf:a2:11:43:5c:d3:93:40:65:b6:0b:
         4f:52:6f:c9:37:bc:42:e6:e3:2e:93:d5:e4:e7:60:31:b5:3f:
         6c:36:2d:20:1f:38:ad:43:d7:c8:e6:86:16:ec:ea:0e:6a:ad:
         c9:9b:ab:9c:c6:75:f9:2f:3a:10:ea:da:ea:0e:1a:98:22:89:
         b9:b3:2f:f3:e4:79:d6:67:f6:6b:ae:c3:a0:10:51:08:70:5f:
         73:c7:ae:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:34 2024 by rpki-client on console-ams.rpki-client.org