Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/323830343a363462383a653030303a3a2f33352d3335203d3e20323639343434.roa
File:                     323830343a363462383a653030303a3a2f33352d3335203d3e20323639343434.roa (raw, json)
Hash identifier:          bmumhkVJqfEo2r5TKRK1VS8eSeZ6aAkEAGsiKfIYm4g=
Subject key identifier:   AE:78:95:27:2E:31:28:DA:44:CB:E1:D1:8A:73:C1:80:99:2C:1B:50
Certificate issuer:       /CN=23DD08B01CB87C4A59C18D3779D05E4941011A7B
Certificate serial:       74382B10EEAF2A4E94BB76382F4D35ED61F1AF46
Authority key identifier: 23:DD:08:B0:1C:B8:7C:4A:59:C1:8D:37:79:D0:5E:49:41:01:1A:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/23DD08B01CB87C4A59C18D3779D05E4941011A7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/323830343a363462383a653030303a3a2f33352d3335203d3e20323639343434.roa
Signing time:             Wed 20 Dec 2023 17:34:22 +0000
ROA not before:           Wed 20 Dec 2023 17:29:22 +0000
ROA not after:            Wed 18 Dec 2024 17:34:22 +0000
asID:                     269444
IP address blocks:        2804:64b8:e000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:38:2b:10:ee:af:2a:4e:94:bb:76:38:2f:4d:35:ed:61:f1:af:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23DD08B01CB87C4A59C18D3779D05E4941011A7B
        Validity
            Not Before: Dec 20 17:29:22 2023 GMT
            Not After : Dec 18 17:34:22 2024 GMT
        Subject: CN=AE7895272E3128DA44CBE1D18A73C180992C1B50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:20:13:ff:3b:a9:64:4a:52:34:cb:e4:07:65:
                    c3:06:8f:10:e5:51:4e:4a:67:69:5d:79:03:39:6f:
                    72:f9:ef:ea:94:ac:1e:5f:08:29:22:cf:76:c4:39:
                    30:0a:e7:4b:be:3d:9f:20:36:fa:ee:54:4b:75:55:
                    3e:cb:c6:5a:41:a8:bc:94:78:64:91:27:29:66:ee:
                    68:64:4d:5a:1b:22:3e:d3:94:e8:c3:28:c8:34:f7:
                    50:2b:18:11:2d:9a:b5:73:e0:dd:3e:36:a4:02:5a:
                    2a:ca:13:eb:5e:33:c3:ba:96:71:55:7c:27:33:77:
                    94:6d:bb:b1:60:22:9a:a9:2a:09:00:f9:25:c2:c8:
                    ca:2a:3b:82:6a:89:f2:ec:a8:8b:15:cd:83:3d:8b:
                    12:0f:60:69:df:79:f0:97:af:18:66:99:de:86:56:
                    df:ff:47:87:cd:a0:e3:f9:44:23:c9:96:72:3f:60:
                    b7:27:03:92:11:16:b4:88:3d:22:b3:19:20:c9:85:
                    2c:0a:77:d9:88:44:55:d0:28:c0:96:b6:31:c3:30:
                    84:aa:2c:92:f9:35:c8:0c:28:49:1c:72:ef:e6:a9:
                    f3:a0:75:d4:be:83:bb:81:64:ca:54:c7:d6:c6:03:
                    94:42:0b:cf:68:c1:be:f6:bc:7b:1e:cc:30:fd:ce:
                    87:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:78:95:27:2E:31:28:DA:44:CB:E1:D1:8A:73:C1:80:99:2C:1B:50
            X509v3 Authority Key Identifier:
                keyid:23:DD:08:B0:1C:B8:7C:4A:59:C1:8D:37:79:D0:5E:49:41:01:1A:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/23DD08B01CB87C4A59C18D3779D05E4941011A7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/23DD08B01CB87C4A59C18D3779D05E4941011A7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/323830343a363462383a653030303a3a2f33352d3335203d3e20323639343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:64b8:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         01:ef:4c:be:fb:31:8b:5d:8c:a3:02:f8:8d:6c:79:56:e1:5d:
         bd:0c:f1:9e:eb:16:ee:3b:02:42:01:fb:48:e8:f7:b7:f3:c4:
         ba:1e:03:c3:50:f3:bc:9a:68:55:2c:37:0f:cc:f7:e9:bd:43:
         1c:49:2f:33:49:c6:72:c3:7b:ea:e0:b4:6d:3b:2c:4d:ba:bd:
         86:27:48:30:27:f8:bc:bb:31:b9:4b:35:20:38:b3:2d:67:b6:
         15:21:ff:63:cb:e1:97:6c:47:a1:29:75:8c:43:c4:94:f6:95:
         39:79:87:7c:ef:d2:5d:c3:3b:e7:8f:07:6a:51:90:b8:e3:b0:
         3f:73:29:7e:f9:87:55:f2:a1:17:fb:62:41:85:d6:e4:c2:65:
         21:66:ce:4a:73:a3:f9:7e:90:b7:fd:e6:e1:57:9a:de:85:97:
         16:bb:9f:42:04:4b:da:f2:13:5b:11:bd:14:b1:23:d4:d1:c2:
         6b:aa:8d:8f:39:2e:9f:1d:8a:a9:db:3d:cf:55:7b:fd:4d:e5:
         73:0c:36:09:39:b1:0d:d8:11:c1:94:eb:3f:ea:1e:9f:cf:96:
         b4:da:cb:76:6b:57:ac:bb:4f:6e:3c:a6:a4:91:26:fe:b1:58:
         6a:21:7e:c8:89:3b:de:fd:0c:c8:43:48:2f:9d:47:37:44:1b:
         74:d9:0d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org