Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HCzNntug48WenT1GwTBiUecJ5KUksdRNXMTLJMBKvthR/0/323830343a363662383a383030303a3a2f33342d3334203d3e20323639353738.roa
File:                     323830343a363662383a383030303a3a2f33342d3334203d3e20323639353738.roa (raw, json)
Hash identifier:          jaDTxV6fClhyr0NuOAIpLW55N6+qBsc7lXkWrbO5k/A=
Subject key identifier:   C8:5D:3B:E1:CA:38:CC:E8:02:74:66:3E:0E:6C:36:54:A3:C5:A6:92
Certificate issuer:       /CN=CC34520B595FF4E20FC1BC7F108928DB78BF1C7F
Certificate serial:       530F0F329C3B616084FFB68EF56F6F8E51310530
Authority key identifier: CC:34:52:0B:59:5F:F4:E2:0F:C1:BC:7F:10:89:28:DB:78:BF:1C:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC34520B595FF4E20FC1BC7F108928DB78BF1C7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HCzNntug48WenT1GwTBiUecJ5KUksdRNXMTLJMBKvthR/0/323830343a363662383a383030303a3a2f33342d3334203d3e20323639353738.roa
Signing time:             Tue 07 Nov 2023 19:58:44 +0000
ROA not before:           Tue 07 Nov 2023 19:53:44 +0000
ROA not after:            Tue 05 Nov 2024 19:58:44 +0000
asID:                     269578
IP address blocks:        2804:66b8:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:0f:0f:32:9c:3b:61:60:84:ff:b6:8e:f5:6f:6f:8e:51:31:05:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC34520B595FF4E20FC1BC7F108928DB78BF1C7F
        Validity
            Not Before: Nov  7 19:53:44 2023 GMT
            Not After : Nov  5 19:58:44 2024 GMT
        Subject: CN=C85D3BE1CA38CCE80274663E0E6C3654A3C5A692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7e:4b:1e:24:4c:88:6d:25:7a:ef:7f:46:b5:
                    dd:90:fe:f3:5e:52:43:4c:76:6d:9e:6e:90:3b:d1:
                    44:59:6c:72:cf:24:ed:42:eb:9c:4e:aa:16:26:00:
                    f3:3f:07:3d:18:7d:92:49:19:ff:c5:1c:36:5d:2e:
                    e2:dd:0e:7d:75:1b:4b:bc:d9:dd:40:6f:6f:6f:13:
                    9a:70:e8:2d:3c:19:68:57:11:53:fb:a6:31:06:76:
                    19:88:a7:8b:69:bc:80:ec:5b:90:a5:ae:76:a4:56:
                    c0:cd:be:ed:a8:52:02:b7:31:90:b0:d3:fd:9c:4d:
                    c5:14:b0:a1:c1:a7:bf:b7:07:c6:cd:ad:43:c2:fb:
                    c8:97:74:38:b2:67:ca:e0:a7:9d:fd:8c:df:5a:40:
                    32:94:80:ed:97:ea:e1:45:20:b5:a4:c5:2f:56:77:
                    42:67:ff:c9:84:39:cf:31:c3:4f:8c:4c:35:4f:ba:
                    0e:02:91:f0:35:e4:58:e7:91:10:29:cf:e7:c1:00:
                    0f:8d:0e:76:a7:2a:2c:93:d2:41:0f:b4:d2:ad:d6:
                    35:6a:84:01:16:ad:65:49:fe:a0:db:b2:07:5a:88:
                    86:53:99:e6:48:3b:4d:a5:9b:3e:54:5d:67:4f:eb:
                    9c:68:d4:00:d2:89:c2:4b:02:aa:57:72:65:38:e1:
                    74:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:5D:3B:E1:CA:38:CC:E8:02:74:66:3E:0E:6C:36:54:A3:C5:A6:92
            X509v3 Authority Key Identifier:
                keyid:CC:34:52:0B:59:5F:F4:E2:0F:C1:BC:7F:10:89:28:DB:78:BF:1C:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HCzNntug48WenT1GwTBiUecJ5KUksdRNXMTLJMBKvthR/0/CC34520B595FF4E20FC1BC7F108928DB78BF1C7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC34520B595FF4E20FC1BC7F108928DB78BF1C7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCzNntug48WenT1GwTBiUecJ5KUksdRNXMTLJMBKvthR/0/323830343a363662383a383030303a3a2f33342d3334203d3e20323639353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:66b8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7e:3e:00:25:56:30:17:b8:b0:63:64:2f:54:a2:68:93:49:38:
         73:91:7f:a4:25:0b:74:e0:74:71:98:11:7c:71:33:9a:d9:6f:
         78:3e:85:2a:b3:5f:39:e1:48:98:54:42:28:d6:25:c7:14:38:
         5c:5e:73:dd:cc:b0:d1:9a:44:69:a1:90:5f:64:7d:96:54:e6:
         3f:39:b8:1e:0c:69:d3:92:69:71:d1:f9:0b:5c:ff:58:25:40:
         2b:f0:60:f1:12:49:ea:55:f1:9f:4a:37:73:df:05:b8:3c:b2:
         f2:ab:97:65:66:04:20:37:06:c7:7f:1b:b4:1b:62:c0:9d:0a:
         cd:cf:bc:a3:41:eb:82:09:3e:df:cd:de:9a:ae:61:ab:ed:4d:
         00:05:a8:ad:fa:80:da:f0:7c:47:70:88:63:26:b3:9d:65:79:
         9c:63:98:b2:65:13:47:bc:8d:a4:42:4b:15:b7:da:fc:d9:8e:
         06:2a:82:ee:90:65:8a:ed:33:07:9a:60:d8:d4:32:07:d6:f9:
         6a:69:e0:3f:ba:5c:1d:5a:c9:81:9d:ca:60:ac:35:4e:67:5c:
         1a:f2:1e:d5:56:0d:55:23:8d:d5:52:ad:4e:b1:15:98:bf:4a:
         a4:f0:ab:1c:6a:a6:fe:3c:d9:1c:14:c5:3d:68:ac:fe:87:20:
         d5:7e:6c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:36 2024 by rpki-client on console-ams.rpki-client.org