Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/323830343a363163303a3a2f33342d3334203d3e20323639323534.roa
File:                     323830343a363163303a3a2f33342d3334203d3e20323639323534.roa (raw, json)
Hash identifier:          Z2NPnXaIan6VFWEPpWmr1K4q9r4MpZ7ifgM8Umdky8w=
Subject key identifier:   27:89:7B:98:A5:42:6A:C5:ED:23:A6:10:37:EA:5B:46:BC:FC:8F:C9
Certificate issuer:       /CN=4703DF576DCFAC4B11DA9AF278028714F3ECD9FC
Certificate serial:       1E2D6B5059C6848D03DF34AB843E817FF5AD884C
Authority key identifier: 47:03:DF:57:6D:CF:AC:4B:11:DA:9A:F2:78:02:87:14:F3:EC:D9:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4703DF576DCFAC4B11DA9AF278028714F3ECD9FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/323830343a363163303a3a2f33342d3334203d3e20323639323534.roa
Signing time:             Tue 15 Aug 2023 14:31:30 +0000
ROA not before:           Tue 15 Aug 2023 14:26:30 +0000
ROA not after:            Tue 13 Aug 2024 14:31:30 +0000
asID:                     269254
IP address blocks:        2804:61c0::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:2d:6b:50:59:c6:84:8d:03:df:34:ab:84:3e:81:7f:f5:ad:88:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4703DF576DCFAC4B11DA9AF278028714F3ECD9FC
        Validity
            Not Before: Aug 15 14:26:30 2023 GMT
            Not After : Aug 13 14:31:30 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:42:90:62:2d:2a:25:c1:0a:dd:52:6d:87:9c:
                    94:84:10:53:c1:33:0d:63:bc:1f:03:b6:a4:7f:5d:
                    63:ec:42:31:05:1b:ac:bb:c5:f0:59:0d:96:2d:2d:
                    21:4b:49:38:50:a6:a2:94:e3:a9:96:df:78:24:a2:
                    cc:2d:27:b0:68:32:20:ce:74:bb:4d:5f:f3:ba:38:
                    15:33:f9:44:36:76:43:df:80:3f:5a:a0:57:c2:94:
                    1e:30:2a:17:6d:db:2c:44:9a:3d:e2:f0:1c:cd:bf:
                    df:2d:2d:12:20:57:96:02:4a:3c:72:00:ed:52:ef:
                    53:8f:48:d9:1e:2c:4a:4a:70:eb:ba:35:cf:4e:08:
                    a0:d0:f4:bf:2e:d5:95:a3:8d:9f:1b:bc:d3:65:b3:
                    5d:17:e1:9e:3c:02:6f:c5:99:a4:b9:60:b2:b0:77:
                    0c:31:ee:2a:cf:e2:cc:11:0a:2e:a9:82:6a:81:b6:
                    75:4d:94:95:66:b7:f9:00:a5:c8:53:46:51:75:8d:
                    b6:ea:4f:49:cf:61:93:59:6f:c3:9a:04:ac:d1:3a:
                    df:3d:60:71:f5:91:57:fa:f3:22:08:0b:b2:61:76:
                    53:46:15:18:ae:01:73:b9:79:d7:af:98:e9:52:57:
                    53:0f:86:11:4d:1e:13:d6:9e:a3:81:72:0a:6d:82:
                    c9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:89:7B:98:A5:42:6A:C5:ED:23:A6:10:37:EA:5B:46:BC:FC:8F:C9
            X509v3 Authority Key Identifier:
                keyid:47:03:DF:57:6D:CF:AC:4B:11:DA:9A:F2:78:02:87:14:F3:EC:D9:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/4703DF576DCFAC4B11DA9AF278028714F3ECD9FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4703DF576DCFAC4B11DA9AF278028714F3ECD9FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/323830343a363163303a3a2f33342d3334203d3e20323639323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61c0::/34

    Signature Algorithm: sha256WithRSAEncryption
         42:6a:8c:b1:08:bc:5e:40:d4:bf:8a:16:43:8d:d4:d4:60:82:
         cd:ca:78:48:1c:8b:dd:dc:7f:1b:4b:2c:8a:8f:27:6b:9c:06:
         a1:5d:d4:4e:93:6d:78:92:93:9f:0e:16:b7:3d:8d:83:35:b7:
         80:d5:9e:23:f7:8e:3a:a0:48:11:86:07:2e:ae:29:7a:b8:e3:
         39:6a:66:2d:54:40:2a:61:dc:bf:e3:13:0b:dd:ea:eb:e8:59:
         73:19:41:f8:e5:2c:96:a7:22:ec:14:ae:78:f2:fa:a7:dd:ae:
         e9:f5:4a:12:fb:02:70:26:02:fc:c2:45:fd:29:5b:68:77:b1:
         8d:63:de:48:d9:1b:56:67:73:87:d3:2a:07:04:72:2a:1a:63:
         0e:23:15:9a:c1:7d:89:ea:8c:65:96:05:e4:04:1e:06:f1:dd:
         ee:fc:60:35:26:3c:54:38:ce:b8:a1:a8:cd:b3:43:ca:36:0b:
         9a:ee:81:e5:74:63:07:6e:d5:31:fe:58:08:e1:75:61:e8:92:
         f7:51:91:d5:9a:94:df:76:7d:3a:e0:55:db:87:ca:c9:41:e7:
         98:59:ff:14:ff:b6:fc:11:b5:d0:25:82:a7:a2:92:34:67:13:
         a1:f5:af:66:06:a7:b2:c9:a0:ce:be:e9:34:d7:04:af:e7:25:
         34:26:e8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org