Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/323830343a316163383a633030303a3a2f33342d3334203d3e203631383835.roa
File:                     323830343a316163383a633030303a3a2f33342d3334203d3e203631383835.roa (raw, json)
Hash identifier:          zx3MdvgS3gX+wx87BEEXj8+avDcHj/N6QeBsqOCfwqQ=
Subject key identifier:   CA:E0:BE:DC:4F:64:22:DE:7F:98:BC:4D:CB:AA:C5:D3:B4:FE:C2:1C
Certificate issuer:       /CN=DFA638A6E41F7AF7978357E8B8434B2B95C908EF
Certificate serial:       7FFB17C4D18FCF42A46505ED1B6D40FE48CD779E
Authority key identifier: DF:A6:38:A6:E4:1F:7A:F7:97:83:57:E8:B8:43:4B:2B:95:C9:08:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFA638A6E41F7AF7978357E8B8434B2B95C908EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/323830343a316163383a633030303a3a2f33342d3334203d3e203631383835.roa
Signing time:             Tue 27 Feb 2024 15:17:42 +0000
ROA not before:           Tue 27 Feb 2024 15:12:42 +0000
ROA not after:            Tue 25 Feb 2025 15:17:42 +0000
asID:                     61885
IP address blocks:        2804:1ac8:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:fb:17:c4:d1:8f:cf:42:a4:65:05:ed:1b:6d:40:fe:48:cd:77:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFA638A6E41F7AF7978357E8B8434B2B95C908EF
        Validity
            Not Before: Feb 27 15:12:42 2024 GMT
            Not After : Feb 25 15:17:42 2025 GMT
        Subject: CN=CAE0BEDC4F6422DE7F98BC4DCBAAC5D3B4FEC21C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3f:a7:e9:03:7c:4d:9b:90:8b:59:ca:4f:28:
                    93:7b:90:3d:ab:db:92:53:4e:c7:a0:f3:ba:48:7f:
                    11:1b:81:45:7a:79:eb:fd:13:db:17:5d:ec:63:fc:
                    a0:68:66:99:c0:ab:a6:60:7f:c6:bb:d7:30:97:63:
                    52:a2:14:ff:ee:e6:01:22:75:13:a6:43:de:90:de:
                    58:63:38:c2:32:cb:42:29:05:d8:c2:d4:64:33:44:
                    a0:0f:f7:b8:97:cd:d9:b5:59:ff:f1:ed:ba:00:b1:
                    8c:fb:9d:ce:16:13:0c:57:0f:7c:2a:9c:a0:60:75:
                    14:77:0c:9a:15:fc:75:77:a2:71:5a:dd:0b:a1:41:
                    55:66:ac:3b:89:3d:1b:bb:75:72:11:0e:78:41:82:
                    76:3f:c4:bb:51:11:38:e6:d1:30:e2:f7:e3:ce:6b:
                    79:51:54:0f:28:18:52:02:34:99:d1:8e:37:22:17:
                    04:f2:2b:9f:6c:04:35:5e:05:06:23:35:50:bb:2e:
                    4c:23:8a:f6:6b:ff:59:18:c3:f3:b7:65:b4:8a:62:
                    61:2c:e5:6f:f0:70:c0:f2:c0:73:66:f5:4c:73:05:
                    80:c9:9e:15:24:d3:67:28:12:15:8a:24:b6:da:09:
                    17:7e:d0:9d:3b:14:6f:7d:c4:ee:9e:63:34:a2:d0:
                    40:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E0:BE:DC:4F:64:22:DE:7F:98:BC:4D:CB:AA:C5:D3:B4:FE:C2:1C
            X509v3 Authority Key Identifier:
                keyid:DF:A6:38:A6:E4:1F:7A:F7:97:83:57:E8:B8:43:4B:2B:95:C9:08:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/DFA638A6E41F7AF7978357E8B8434B2B95C908EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFA638A6E41F7AF7978357E8B8434B2B95C908EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/323830343a316163383a633030303a3a2f33342d3334203d3e203631383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ac8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3b:8b:e7:b7:26:d4:8c:1d:8f:40:21:c0:0b:52:b3:cc:a6:11:
         84:b8:bf:6a:59:4e:2f:fc:48:6a:81:aa:d0:03:b2:d3:7b:ef:
         2c:bf:4a:ba:9e:7b:28:90:a2:85:5b:d2:88:dc:73:d8:b8:95:
         65:fe:37:9c:bd:92:26:cb:cd:dc:e8:b3:47:a6:5a:1f:52:df:
         9c:47:5c:96:5b:c0:b1:18:41:9a:cf:4c:5b:04:2e:c6:c7:29:
         81:47:78:44:2f:22:d6:27:91:57:bc:97:01:d2:0a:bb:2e:06:
         4e:2e:7e:05:87:ef:ce:4a:8a:6d:60:1f:62:6e:00:e2:76:44:
         70:75:1c:44:88:47:20:1f:3c:30:36:73:5e:ba:9d:84:49:c7:
         53:d3:ab:f1:fa:a5:13:ff:29:cc:84:37:af:81:dc:8d:74:6d:
         cb:02:c5:9f:6a:75:dc:cb:67:07:f8:2f:c3:f0:76:90:ee:44:
         55:e6:bd:3f:e7:ad:37:cc:ea:2b:84:3a:73:ff:3b:cc:8a:19:
         73:40:37:86:45:f0:5f:cb:c6:9e:74:10:db:85:99:ff:57:26:
         3f:29:d4:0c:54:2f:d5:16:a5:9d:42:66:5f:f8:78:08:32:01:
         af:61:00:07:90:c0:7c:b2:5e:4c:af:42:34:5e:68:8b:41:0a:
         34:65:c2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:36 2024 by rpki-client on console-ams.rpki-client.org