Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a633030303a3a2f33342d3334203d3e203631373139.roa
File:                     323830343a316235303a633030303a3a2f33342d3334203d3e203631373139.roa (raw, json)
Hash identifier:          /XpZ6GkHvjSrszrl8sLyE/uXi/zNA2jJQtyGCELKsQY=
Subject key identifier:   EA:A3:17:96:0F:6E:5B:B9:AC:49:B5:15:AC:5B:CB:E1:88:C7:64:3B
Certificate issuer:       /CN=403FC78498B4F9A70A25B59957E31D1B39C27D1F
Certificate serial:       2049DCD69D5B10960E2026B573EE00B16B12DC96
Authority key identifier: 40:3F:C7:84:98:B4:F9:A7:0A:25:B5:99:57:E3:1D:1B:39:C2:7D:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/403FC78498B4F9A70A25B59957E31D1B39C27D1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a633030303a3a2f33342d3334203d3e203631373139.roa
Signing time:             Mon 06 Nov 2023 17:15:22 +0000
ROA not before:           Mon 06 Nov 2023 17:10:22 +0000
ROA not after:            Mon 04 Nov 2024 17:15:22 +0000
asID:                     61719
IP address blocks:        2804:1b50:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:49:dc:d6:9d:5b:10:96:0e:20:26:b5:73:ee:00:b1:6b:12:dc:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=403FC78498B4F9A70A25B59957E31D1B39C27D1F
        Validity
            Not Before: Nov  6 17:10:22 2023 GMT
            Not After : Nov  4 17:15:22 2024 GMT
        Subject: CN=EAA317960F6E5BB9AC49B515AC5BCBE188C7643B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:47:85:ce:f1:ca:ad:b3:a6:fc:53:a2:e0:00:
                    a0:c0:d0:16:3a:4f:58:43:0c:2b:c8:f4:d5:57:24:
                    51:95:36:52:99:a0:d8:1c:04:3a:3f:79:fd:11:a7:
                    46:23:eb:9f:cd:7a:8e:e0:34:d6:54:bf:8b:f0:b2:
                    3a:e3:13:ea:87:e4:eb:67:95:09:ee:a1:43:f8:1d:
                    65:ba:8d:70:3d:cd:a3:df:19:ba:93:2a:1b:0f:0f:
                    5a:07:62:02:c7:fa:09:2b:56:c3:a1:80:68:46:b8:
                    8b:59:64:c6:4c:3f:64:1b:9c:85:a8:26:73:b5:68:
                    27:5c:4d:8c:49:42:18:e9:6a:13:84:8c:af:c2:78:
                    e3:e4:26:f6:0a:39:07:d9:1d:bf:25:ff:48:6d:af:
                    c2:79:2c:f5:e5:67:84:75:45:7c:d7:7e:40:ef:cd:
                    ff:55:62:ff:e4:d6:62:65:ea:32:93:58:be:98:50:
                    1c:70:e8:73:ce:6e:74:23:26:59:87:bb:1c:2a:77:
                    2f:8c:39:33:a3:73:cf:3a:e7:a1:37:c0:8b:e1:23:
                    be:76:3a:74:48:d0:c5:20:f1:ea:5d:2b:8e:04:ad:
                    0b:ab:1d:7d:e1:5c:90:91:e6:3a:89:1e:b9:e5:a2:
                    9c:a2:a0:f1:d8:c6:75:3e:75:9e:fb:c3:be:5c:57:
                    0e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A3:17:96:0F:6E:5B:B9:AC:49:B5:15:AC:5B:CB:E1:88:C7:64:3B
            X509v3 Authority Key Identifier:
                keyid:40:3F:C7:84:98:B4:F9:A7:0A:25:B5:99:57:E3:1D:1B:39:C2:7D:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/403FC78498B4F9A70A25B59957E31D1B39C27D1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/403FC78498B4F9A70A25B59957E31D1B39C27D1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a633030303a3a2f33342d3334203d3e203631373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b50:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         59:2e:83:8f:5c:0f:6b:3b:7f:d2:4d:f5:44:48:c6:6b:90:b2:
         57:be:5f:70:24:74:18:15:92:52:89:30:05:5a:36:68:29:8a:
         98:51:a9:96:b2:9e:1a:9c:a3:0b:f6:73:8e:8b:64:50:6f:74:
         a3:3b:62:48:94:d9:89:c5:70:ac:29:06:df:f4:61:79:59:f0:
         02:9e:f3:ae:b5:20:d0:64:57:97:8d:85:8b:49:8f:36:68:a0:
         c9:9e:2c:b3:14:32:60:a1:27:28:2a:5e:30:d6:f3:34:e0:96:
         2b:cd:f8:71:d6:1b:7b:ed:bc:9a:99:6c:05:42:b1:f4:47:cf:
         32:74:af:22:24:45:94:21:c6:a5:c4:e8:84:07:ed:d6:e2:b7:
         49:8d:27:bd:d8:4c:c5:b8:af:e0:43:12:a6:00:8f:85:5b:2a:
         3d:b2:7d:4e:c1:e0:fc:47:a6:6d:25:ca:05:b4:a9:35:d6:32:
         83:4b:89:65:bb:34:df:9f:3c:6e:17:da:7b:1a:2e:05:f5:49:
         47:7c:7c:cf:dc:4c:f9:b6:05:0c:ab:b6:4f:5f:bd:1e:e9:6c:
         55:b8:b5:c2:58:89:1a:cb:c5:45:a7:3f:bf:11:fb:3f:f0:7d:
         53:ec:78:f2:b7:c8:c4:73:be:f1:f9:11:99:b3:0e:c6:c0:52:
         8f:d9:31:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org