Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/0/323830343a343665633a3a2f33322d3430203d3e20323637303230.roa
File:                     323830343a343665633a3a2f33322d3430203d3e20323637303230.roa (raw, json)
Hash identifier:          0HQVL34y2Iuqc8GJ4bu3Be9zjIWxEsFLuPu+dYSbKmQ=
Subject key identifier:   EE:31:F6:BF:40:00:10:44:F6:82:31:93:5A:7E:DA:97:FB:66:BE:DE
Certificate issuer:       /CN=CD6720E096E2B3B5875DEF1F65F6D97FBB565623
Certificate serial:       6C71A4D0A44478E28A12A7C6CBB381E11FCDEAAC
Authority key identifier: CD:67:20:E0:96:E2:B3:B5:87:5D:EF:1F:65:F6:D9:7F:BB:56:56:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6720E096E2B3B5875DEF1F65F6D97FBB565623.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/0/323830343a343665633a3a2f33322d3430203d3e20323637303230.roa
Signing time:             Thu 10 Aug 2023 21:25:17 +0000
ROA not before:           Thu 10 Aug 2023 21:20:17 +0000
ROA not after:            Thu 08 Aug 2024 21:25:17 +0000
asID:                     267020
IP address blocks:        2804:46ec::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:71:a4:d0:a4:44:78:e2:8a:12:a7:c6:cb:b3:81:e1:1f:cd:ea:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6720E096E2B3B5875DEF1F65F6D97FBB565623
        Validity
            Not Before: Aug 10 21:20:17 2023 GMT
            Not After : Aug  8 21:25:17 2024 GMT
        Subject: CN=EE31F6BF40001044F68231935A7EDA97FB66BEDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d7:aa:49:0c:2f:61:99:73:5b:b8:98:13:c5:
                    ed:7d:67:83:f5:1d:d4:1d:01:c2:ed:aa:4b:29:46:
                    65:2a:1a:63:c4:d1:07:23:cb:f4:10:1f:37:c0:18:
                    87:54:c0:03:6d:38:02:72:8c:01:0b:79:7c:07:ba:
                    9b:db:00:45:a0:88:ab:a2:4b:4e:3d:5a:b0:04:27:
                    7f:59:2b:5b:50:c1:82:d4:34:88:70:e7:7a:64:83:
                    df:2b:53:69:1e:f2:c0:fb:40:49:4b:54:d4:be:d8:
                    a5:25:da:2d:ee:f6:92:3c:fd:39:a8:c6:d4:d4:e6:
                    43:03:13:db:8c:94:f0:b8:de:a0:72:3b:2c:69:e2:
                    5e:97:8c:ca:65:e5:db:d0:d3:21:eb:6a:ec:df:cf:
                    2b:df:e0:87:f9:c6:12:38:21:4b:f3:ab:09:26:b1:
                    29:69:7e:9d:46:50:a8:13:2c:a7:b3:45:20:19:ad:
                    ae:04:e3:fb:f2:06:8b:bc:f6:04:4f:c1:b7:75:19:
                    ad:fa:61:ff:be:46:dd:ee:7e:f3:54:46:b5:7c:8d:
                    c5:70:15:91:7e:36:ca:99:8b:a8:9d:2e:83:da:9c:
                    58:e4:b8:0b:6e:0e:f7:c7:e3:a1:08:01:4a:72:95:
                    d7:64:63:72:2e:ce:a8:28:23:df:48:8d:3d:09:68:
                    24:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:31:F6:BF:40:00:10:44:F6:82:31:93:5A:7E:DA:97:FB:66:BE:DE
            X509v3 Authority Key Identifier:
                keyid:CD:67:20:E0:96:E2:B3:B5:87:5D:EF:1F:65:F6:D9:7F:BB:56:56:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/0/CD6720E096E2B3B5875DEF1F65F6D97FBB565623.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6720E096E2B3B5875DEF1F65F6D97FBB565623.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/0/323830343a343665633a3a2f33322d3430203d3e20323637303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:46ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:c2:42:cf:e0:e3:a8:ad:bc:20:ee:97:0a:5e:8e:5b:11:e6:
         54:d3:cc:20:7f:e5:39:f3:23:b5:20:a8:8f:3d:49:90:61:6c:
         8e:d3:27:82:43:c5:eb:09:b0:ad:b0:a9:fb:74:5d:5b:82:33:
         e8:15:29:1f:26:0e:23:2c:2f:47:a1:dd:37:3f:44:60:7a:25:
         b7:fd:61:fb:1d:e1:0f:f4:ab:86:19:4f:7f:60:b0:44:77:03:
         05:67:36:1c:86:06:10:77:0a:b8:fe:e2:08:da:b8:65:8d:84:
         68:e3:77:02:68:36:69:4a:3c:dd:4b:18:db:82:97:9e:8c:68:
         75:0b:82:f8:65:cb:8f:0b:4a:78:66:cf:e0:4e:75:4e:f0:81:
         9e:27:fe:65:ee:68:46:f8:53:ef:59:b2:b2:c5:76:5b:f7:66:
         0a:02:8c:6e:e7:d8:5c:0e:c8:10:fc:8d:fb:01:19:d4:e6:d9:
         5a:8a:3f:71:93:df:c0:6e:be:09:df:17:9c:a6:eb:65:5f:62:
         76:8c:88:b6:20:59:3d:6b:1e:9e:98:d7:d2:47:14:08:d2:ab:
         ab:b9:01:fd:fa:69:cb:cc:7a:be:f6:73:d8:62:74:c8:00:26:
         78:d9:74:f6:ee:fd:41:f4:98:70:81:d7:02:9b:97:6c:f6:47:
         2e:24:86:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org