Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/323830343a356636343a3a2f33322d313238203d3e20323639303936.roa
File:                     323830343a356636343a3a2f33322d313238203d3e20323639303936.roa (raw, json)
Hash identifier:          P9YyLs98q99Rn+3jLXClrYM1iAdCD2yyVf3pP7ACmW8=
Subject key identifier:   0C:64:3F:64:82:83:ED:F7:BF:39:86:21:E5:DC:17:94:08:2C:0C:74
Certificate issuer:       /CN=824C1C971930641F52CF76D6607DED5BB03BA15F
Certificate serial:       1EAAD13013FB1761AAD5224A849EC4895E2F040D
Authority key identifier: 82:4C:1C:97:19:30:64:1F:52:CF:76:D6:60:7D:ED:5B:B0:3B:A1:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/824C1C971930641F52CF76D6607DED5BB03BA15F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/323830343a356636343a3a2f33322d313238203d3e20323639303936.roa
Signing time:             Wed 05 Apr 2023 20:23:05 +0000
ROA not before:           Wed 05 Apr 2023 20:18:05 +0000
ROA not after:            Wed 03 Apr 2024 20:23:05 +0000
asID:                     269096
IP address blocks:        2804:5f64::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:aa:d1:30:13:fb:17:61:aa:d5:22:4a:84:9e:c4:89:5e:2f:04:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=824C1C971930641F52CF76D6607DED5BB03BA15F
        Validity
            Not Before: Apr  5 20:18:05 2023 GMT
            Not After : Apr  3 20:23:05 2024 GMT
        Subject: CN=0C643F648283EDF7BF398621E5DC1794082C0C74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:01:15:e8:61:c9:f1:ec:f4:11:07:11:bb:66:
                    1d:c4:a3:a2:17:8d:77:ea:4f:82:0f:61:dc:22:ba:
                    fe:39:0d:5a:6a:c8:03:69:2a:b7:6f:64:cb:0e:7c:
                    2d:4b:b6:48:eb:72:22:88:5b:08:97:8a:f0:9b:8c:
                    15:b0:8d:cd:0a:d5:e8:cd:1a:db:ab:19:a3:a5:79:
                    d5:db:b4:85:6c:3a:09:08:ee:98:74:78:5d:94:80:
                    9d:a2:38:c5:5e:c3:b2:08:cb:ef:37:b0:99:fa:a5:
                    87:85:e4:31:a1:da:e9:78:2b:ec:20:41:73:4b:57:
                    66:15:6b:52:4a:09:44:0b:64:94:6b:eb:7b:8a:f7:
                    37:01:5d:29:dd:f6:6d:00:29:91:dc:4b:c0:5b:c3:
                    cb:22:4f:06:8c:83:1c:4c:68:35:f0:76:e9:54:ed:
                    00:0b:68:16:75:7c:b2:c7:66:4a:56:a7:2a:d5:3a:
                    ae:85:b4:98:07:2c:ac:0a:f2:2b:33:21:17:3e:d7:
                    c3:9c:30:04:0a:19:da:d1:17:1d:46:84:4c:c1:71:
                    d2:b5:34:b3:9b:07:5e:1d:6d:77:ff:1c:ce:ca:a2:
                    e6:15:89:a2:9e:8e:ad:2d:a5:04:d0:ef:8a:e8:05:
                    af:65:c8:0a:06:ef:b0:34:5e:c3:a1:a7:e7:b4:7b:
                    59:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:64:3F:64:82:83:ED:F7:BF:39:86:21:E5:DC:17:94:08:2C:0C:74
            X509v3 Authority Key Identifier:
                keyid:82:4C:1C:97:19:30:64:1F:52:CF:76:D6:60:7D:ED:5B:B0:3B:A1:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/824C1C971930641F52CF76D6607DED5BB03BA15F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/824C1C971930641F52CF76D6607DED5BB03BA15F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/323830343a356636343a3a2f33322d313238203d3e20323639303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f64::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:04:66:73:2e:d7:74:e8:a6:94:be:7e:68:72:f5:1b:f0:34:
         d1:e4:e7:46:ec:94:66:ba:2d:f8:74:7f:52:73:63:64:f9:d1:
         f2:29:01:5a:9a:60:c3:c6:f3:87:73:ef:08:b7:57:88:9b:87:
         3e:b3:97:1c:e5:51:8f:df:10:db:f3:da:65:a7:f1:b0:af:3c:
         0d:81:e5:7b:3c:5d:17:44:39:55:a8:7a:70:17:c5:bc:79:c4:
         d1:ff:d4:d2:d3:1e:90:59:08:cd:1a:1c:17:3e:2b:95:1b:5f:
         67:62:a3:f8:03:2d:f3:2b:cc:f5:34:9d:fd:49:47:74:59:09:
         ea:a8:c8:b9:64:ad:e5:45:52:0f:7e:b8:81:08:7c:12:ac:ab:
         77:1e:9d:51:8c:6d:35:4b:35:a2:7c:46:e5:5b:1a:57:64:81:
         a1:00:dc:9e:73:5a:ae:a7:bc:6e:86:97:0f:12:af:98:cb:a4:
         ce:67:cf:3d:c9:f5:3f:a8:f4:54:82:3f:f9:bf:57:e1:b7:7c:
         92:35:e3:74:53:c4:32:bb:0f:07:6a:b9:1f:c1:25:c3:97:51:
         6a:65:af:16:d4:e7:00:c5:75:c9:9c:39:89:cf:b8:f2:f1:06:
         35:d4:c8:40:77:d7:cb:88:34:fb:fe:b5:23:3e:68:30:2f:98:
         46:be:ce:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:36 2024 by rpki-client on console-ams.rpki-client.org