Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a633830303a3a2f34322d3432203d3e203631373139.roa
File:                     323830343a316235303a633830303a3a2f34322d3432203d3e203631373139.roa (raw, json)
Hash identifier:          U5AzliVzArFzBgRRFao1arbRdnq/O0BI5ZblKsU89A4=
Subject key identifier:   AB:51:92:E7:FD:5D:E6:E8:18:5E:58:98:B0:F9:63:32:6A:B1:2C:C5
Certificate issuer:       /CN=403FC78498B4F9A70A25B59957E31D1B39C27D1F
Certificate serial:       1571D60D1E97FC6B7CD69D1BD2B52330ED1BF2D0
Authority key identifier: 40:3F:C7:84:98:B4:F9:A7:0A:25:B5:99:57:E3:1D:1B:39:C2:7D:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/403FC78498B4F9A70A25B59957E31D1B39C27D1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a633830303a3a2f34322d3432203d3e203631373139.roa
Signing time:             Mon 06 Nov 2023 17:15:21 +0000
ROA not before:           Mon 06 Nov 2023 17:10:21 +0000
ROA not after:            Mon 04 Nov 2024 17:15:21 +0000
asID:                     61719
IP address blocks:        2804:1b50:c800::/42 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:71:d6:0d:1e:97:fc:6b:7c:d6:9d:1b:d2:b5:23:30:ed:1b:f2:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=403FC78498B4F9A70A25B59957E31D1B39C27D1F
        Validity
            Not Before: Nov  6 17:10:21 2023 GMT
            Not After : Nov  4 17:15:21 2024 GMT
        Subject: CN=AB5192E7FD5DE6E8185E5898B0F963326AB12CC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3c:d3:f4:c9:18:dd:98:f7:51:4c:46:ad:93:
                    45:e3:d8:d2:17:82:8a:c6:77:e8:cd:d0:8b:4b:d4:
                    09:b8:78:58:3d:1c:5c:8c:bb:14:7e:34:03:18:30:
                    06:71:c3:86:e7:3c:6f:bf:ea:e0:e7:fe:1a:f5:7a:
                    7f:b0:da:b5:69:73:51:77:2c:ff:d3:16:b0:45:fc:
                    ca:8b:50:09:7f:f6:9e:b0:3a:8a:9b:06:22:dc:4b:
                    d0:2c:53:c5:43:fb:29:5a:40:33:89:cc:c5:73:f0:
                    a8:37:94:23:4f:68:e0:19:ec:27:ce:53:3a:e6:c0:
                    1e:f3:da:5d:dd:63:8b:06:f4:25:fd:5c:8e:70:25:
                    50:39:09:15:98:b5:b5:f8:20:8a:85:8a:56:9c:ae:
                    44:76:4f:cb:e7:dc:3b:11:6e:d1:fb:02:6c:be:2e:
                    4e:43:a9:fd:b5:00:de:e0:f8:bd:d8:c1:45:06:d0:
                    ab:cf:ad:fa:ad:b4:b7:1c:a4:70:0b:41:98:6b:c3:
                    fe:11:28:be:64:3e:35:4b:2a:2c:b6:d8:d6:af:1a:
                    11:30:95:65:d9:7e:20:78:9d:50:fa:82:9e:c5:f9:
                    c0:6b:87:2d:ac:c1:d5:dc:8d:cf:af:b2:d1:e7:5a:
                    11:29:0f:ee:c9:ac:21:90:16:34:38:ba:0f:22:d3:
                    80:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:51:92:E7:FD:5D:E6:E8:18:5E:58:98:B0:F9:63:32:6A:B1:2C:C5
            X509v3 Authority Key Identifier:
                keyid:40:3F:C7:84:98:B4:F9:A7:0A:25:B5:99:57:E3:1D:1B:39:C2:7D:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/403FC78498B4F9A70A25B59957E31D1B39C27D1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/403FC78498B4F9A70A25B59957E31D1B39C27D1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a633830303a3a2f34322d3432203d3e203631373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b50:c800::/42

    Signature Algorithm: sha256WithRSAEncryption
         60:7f:d6:ce:fc:2c:4a:0d:a4:e2:c8:27:6a:a9:66:b5:37:a1:
         75:f9:47:99:52:c7:ef:00:2a:75:6d:d3:7d:85:ae:ec:f6:e8:
         92:34:c4:b8:96:77:55:4f:a7:89:13:c0:2d:a8:f8:35:84:8a:
         da:39:04:a9:5a:d8:d4:f0:0e:a6:e2:59:40:61:6f:24:bb:9f:
         db:c4:26:98:a3:0b:c4:6a:c4:e5:c5:16:48:73:43:29:8d:35:
         8d:3c:b3:b4:33:65:30:31:32:6a:f7:95:89:6a:da:be:19:09:
         89:8d:db:95:1b:e2:19:3b:85:23:c2:9a:2d:4f:bc:cc:6d:01:
         b0:c9:79:ca:b5:24:22:1e:4f:e7:bb:71:27:12:3f:fd:01:f7:
         34:f5:bd:a4:53:51:6e:e0:74:e0:0d:86:3b:22:11:1c:d4:f6:
         be:62:5d:d0:f5:d9:5b:a8:7e:1a:65:51:02:d1:27:0a:b5:a8:
         93:78:d0:da:3d:ce:79:19:7b:69:03:65:36:61:04:e4:96:82:
         da:09:48:fb:0d:86:02:21:cb:27:99:7d:cd:45:d8:51:3f:f3:
         3e:c3:97:e5:2e:cc:43:c9:d3:08:d8:e5:d2:1b:dd:f7:76:b7:
         92:bf:5e:d1:c7:47:03:2a:35:53:e5:a4:4d:cc:e1:fc:bf:a9:
         71:21:3a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:34 2024 by rpki-client on console-ams.rpki-client.org