Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a383030303a3a2f33342d3334203d3e203631373139.roa
File:                     323830343a316235303a383030303a3a2f33342d3334203d3e203631373139.roa (raw, json)
Hash identifier:          V7qp+wbR4/SJESuzmXO7ppUR2hIugDlAv26miJ5+2G8=
Subject key identifier:   4D:23:96:FE:26:A7:D1:E8:D8:E0:F2:C0:EA:E4:17:6F:A3:B7:7E:6E
Certificate issuer:       /CN=403FC78498B4F9A70A25B59957E31D1B39C27D1F
Certificate serial:       1C527A80D73CD026BE2037000610DC87C980446E
Authority key identifier: 40:3F:C7:84:98:B4:F9:A7:0A:25:B5:99:57:E3:1D:1B:39:C2:7D:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/403FC78498B4F9A70A25B59957E31D1B39C27D1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a383030303a3a2f33342d3334203d3e203631373139.roa
Signing time:             Mon 06 Nov 2023 17:15:22 +0000
ROA not before:           Mon 06 Nov 2023 17:10:22 +0000
ROA not after:            Mon 04 Nov 2024 17:15:22 +0000
asID:                     61719
IP address blocks:        2804:1b50:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:52:7a:80:d7:3c:d0:26:be:20:37:00:06:10:dc:87:c9:80:44:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=403FC78498B4F9A70A25B59957E31D1B39C27D1F
        Validity
            Not Before: Nov  6 17:10:22 2023 GMT
            Not After : Nov  4 17:15:22 2024 GMT
        Subject: CN=4D2396FE26A7D1E8D8E0F2C0EAE4176FA3B77E6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1c:f0:09:a6:ae:f6:0e:2e:49:eb:8c:e7:c7:
                    d5:d2:df:6a:60:2c:d8:e1:8d:61:28:a4:4f:b4:6f:
                    d5:2c:ff:ef:fe:e3:f0:e0:54:f1:6f:86:3d:40:1f:
                    d6:f0:6f:d1:35:6b:db:a7:b9:56:fb:4f:e1:e1:f5:
                    bf:5e:d8:dd:55:df:06:f0:39:f1:f9:14:59:af:60:
                    fd:2f:25:70:f2:de:12:23:17:5b:2f:f9:75:e1:05:
                    2d:31:cc:19:f0:ac:9c:21:e8:48:ef:b0:b5:e3:44:
                    69:40:4d:33:cf:9a:b4:bb:2f:50:e7:e5:4d:f5:cd:
                    9f:67:fa:8e:13:ae:a9:c0:32:ad:5a:a9:2a:f0:05:
                    aa:a9:d5:d0:53:02:07:a8:76:81:ef:55:6d:ea:58:
                    c3:ca:6a:8f:57:f2:49:1a:5c:6d:94:98:55:5f:02:
                    59:95:21:e1:5e:e5:f6:78:db:71:1e:7e:b5:02:24:
                    6e:9b:05:4a:62:1a:56:ad:69:49:e0:e9:ee:60:e2:
                    62:58:ad:49:41:9e:e8:d2:e1:ea:2f:37:41:d1:6e:
                    10:9f:23:87:08:84:5d:5e:fe:b3:87:87:b7:4b:1f:
                    10:00:8f:5f:36:a9:14:16:d7:15:07:d0:f7:4a:f9:
                    32:50:aa:39:dc:0f:13:77:99:1e:22:0f:d0:d0:f0:
                    88:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:23:96:FE:26:A7:D1:E8:D8:E0:F2:C0:EA:E4:17:6F:A3:B7:7E:6E
            X509v3 Authority Key Identifier:
                keyid:40:3F:C7:84:98:B4:F9:A7:0A:25:B5:99:57:E3:1D:1B:39:C2:7D:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/403FC78498B4F9A70A25B59957E31D1B39C27D1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/403FC78498B4F9A70A25B59957E31D1B39C27D1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a383030303a3a2f33342d3334203d3e203631373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b50:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         35:57:8b:50:fc:59:a8:3e:70:fa:7e:fb:18:6c:ba:c0:53:5b:
         d9:3f:fb:17:f5:01:ea:44:a3:84:99:da:a4:01:d5:55:3b:60:
         42:a8:ca:90:48:d0:1c:de:14:43:86:e0:65:4f:ec:24:aa:dc:
         c7:b4:fc:e1:04:9e:2e:77:d6:dd:20:57:f4:27:1f:9f:31:4f:
         11:b0:6e:5c:b4:0c:2a:29:fb:37:4c:94:09:59:ce:9c:e4:d0:
         f0:8b:c8:a5:22:91:3e:18:e8:23:96:3c:bf:99:d1:98:5b:52:
         73:ae:b8:1c:73:53:b3:7b:5e:b9:b6:cf:43:61:fd:a5:a7:f6:
         16:8b:70:e2:aa:29:60:64:4c:a1:93:e2:be:47:d0:cc:c7:78:
         30:5b:81:c8:81:52:25:2a:79:9c:d8:da:11:a7:ba:af:c8:55:
         53:8a:f4:0f:89:fe:66:0f:2a:18:1e:80:c2:6e:d0:a5:d0:c1:
         ab:e1:0b:bb:8d:e0:3a:a9:d3:14:40:9f:ec:41:29:3c:cb:51:
         2b:1e:1f:f1:78:71:aa:21:0c:b7:4d:b3:ea:5f:80:c8:ed:7c:
         ee:85:89:97:92:bd:e9:7e:b9:7c:e1:be:52:e5:ca:1b:41:bc:
         5d:43:d7:44:97:7e:bc:f7:a2:d5:00:e3:69:d7:d1:65:4f:fa:
         6f:e3:86:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:34 2024 by rpki-client on console-ams.rpki-client.org