Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/323830343a363863303a3a2f33342d3334203d3e20323639373133.roa
File:                     323830343a363863303a3a2f33342d3334203d3e20323639373133.roa (raw, json)
Hash identifier:          SPMZTltgUoct14R40mkfmKf3b3yMFrsl0HeIV/HNQL4=
Subject key identifier:   BC:37:3D:52:47:68:44:80:2B:B1:3E:7F:13:98:00:CB:88:C8:97:AE
Certificate issuer:       /CN=6C1BCFE217EE8DEA992D9A29675B9B04ECC1AC2A
Certificate serial:       4B9B2D6A97799F4CDA67ACB1D58885DD9F75AE5F
Authority key identifier: 6C:1B:CF:E2:17:EE:8D:EA:99:2D:9A:29:67:5B:9B:04:EC:C1:AC:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C1BCFE217EE8DEA992D9A29675B9B04ECC1AC2A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/323830343a363863303a3a2f33342d3334203d3e20323639373133.roa
Signing time:             Fri 10 Nov 2023 16:37:30 +0000
ROA not before:           Fri 10 Nov 2023 16:32:30 +0000
ROA not after:            Fri 08 Nov 2024 16:37:30 +0000
asID:                     269713
IP address blocks:        2804:68c0::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:9b:2d:6a:97:79:9f:4c:da:67:ac:b1:d5:88:85:dd:9f:75:ae:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C1BCFE217EE8DEA992D9A29675B9B04ECC1AC2A
        Validity
            Not Before: Nov 10 16:32:30 2023 GMT
            Not After : Nov  8 16:37:30 2024 GMT
        Subject: CN=BC373D52476844802BB13E7F139800CB88C897AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:29:fa:e8:eb:71:58:43:fd:af:fd:0f:e5:c8:
                    68:36:3f:01:da:02:9b:7a:4d:95:7d:91:30:6e:7b:
                    93:23:5c:a4:d2:c7:af:c2:54:27:b8:42:48:ee:65:
                    49:38:4d:2e:af:dc:e2:81:43:ca:8c:25:86:db:c5:
                    57:b7:16:cc:a8:3c:24:ae:57:75:3a:8f:55:6a:83:
                    2c:0f:18:a4:c1:e9:40:e0:cd:53:18:d6:12:16:cb:
                    00:e4:80:51:65:d7:d9:ef:14:1c:2b:29:7c:d4:d4:
                    64:6e:4a:ae:74:0f:ec:18:4f:e0:c8:53:fe:69:a4:
                    dc:31:c4:90:8f:30:56:33:6b:d0:83:95:a0:e9:6e:
                    73:56:ba:d3:15:00:75:df:fa:af:63:e0:b2:31:9c:
                    6a:2e:7e:c2:66:a8:e3:9d:a2:b1:51:a2:8c:06:fe:
                    3b:1b:ea:0d:6e:c2:54:8f:f6:5e:f9:46:38:d5:94:
                    1f:f0:b5:95:b1:03:3f:78:b9:c9:1c:6b:41:b9:16:
                    22:1d:58:59:91:f6:19:43:8c:3e:39:b6:d5:45:fb:
                    e2:8c:4e:11:53:d1:35:66:f3:5a:e3:25:aa:6d:41:
                    90:f5:b2:ad:18:89:16:1e:24:9e:71:c1:60:cf:4f:
                    f6:60:28:3e:6c:98:3a:59:ad:aa:0d:06:d6:1d:79:
                    0d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:37:3D:52:47:68:44:80:2B:B1:3E:7F:13:98:00:CB:88:C8:97:AE
            X509v3 Authority Key Identifier:
                keyid:6C:1B:CF:E2:17:EE:8D:EA:99:2D:9A:29:67:5B:9B:04:EC:C1:AC:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/6C1BCFE217EE8DEA992D9A29675B9B04ECC1AC2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C1BCFE217EE8DEA992D9A29675B9B04ECC1AC2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/323830343a363863303a3a2f33342d3334203d3e20323639373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:68c0::/34

    Signature Algorithm: sha256WithRSAEncryption
         0a:17:0b:a2:c3:f7:98:1c:41:cc:53:49:49:99:66:ee:0f:bc:
         f7:39:86:b9:75:47:af:bd:e5:69:94:e5:14:b4:8d:f9:5a:2c:
         e8:ef:d3:b8:9b:09:13:e0:38:9b:b5:08:b7:b7:ed:bb:12:10:
         90:d0:41:17:5d:dc:df:5b:48:91:96:bc:6b:a7:fc:ed:c9:8c:
         f3:71:d5:d0:3b:97:24:f9:1a:7a:1a:d8:a7:05:28:54:93:85:
         f0:ba:5e:00:de:f8:f5:95:03:8f:18:0d:07:b0:70:c3:bb:1e:
         01:6d:54:50:1d:ce:45:bb:11:e3:57:33:26:27:37:ce:c7:9b:
         44:ba:9d:ee:87:3f:e3:ab:be:dc:5f:9f:03:b3:cc:d8:a2:60:
         3a:b1:f7:72:dc:a3:67:f5:e8:9c:f4:f3:2e:b2:55:e3:15:eb:
         ad:4e:65:70:91:f0:a5:62:a2:b8:10:95:88:be:4d:8d:a2:75:
         3a:d8:02:f7:d8:b0:7a:2b:1b:dd:01:1e:12:99:09:9e:16:d9:
         25:f6:72:b7:5b:e8:c2:f6:84:eb:65:e1:87:a1:b5:61:24:5b:
         75:eb:75:b0:1b:51:6a:31:50:99:49:67:84:89:da:c9:ce:9b:
         8b:14:98:53:5a:ee:0f:04:96:aa:e7:30:b2:54:3f:63:9c:9f:
         c4:09:47:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org