Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/323830343a343866303a633030303a3a2f33342d3334203d3e203631353839.roa
File:                     323830343a343866303a633030303a3a2f33342d3334203d3e203631353839.roa (raw, json)
Hash identifier:          /eDBm/C/9XRNLYHxcTnrTrpRx3uS71PnyeZg7yaemc0=
Subject key identifier:   F3:EB:48:0C:57:00:21:81:36:48:84:F6:94:F0:95:70:33:9E:5D:E6
Certificate issuer:       /CN=644FDBBE4743E5D56B8A177FBF2E3251F42D92E9
Certificate serial:       3390F50C6822A2C37BA83120138781BFA28CF72F
Authority key identifier: 64:4F:DB:BE:47:43:E5:D5:6B:8A:17:7F:BF:2E:32:51:F4:2D:92:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/644FDBBE4743E5D56B8A177FBF2E3251F42D92E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/323830343a343866303a633030303a3a2f33342d3334203d3e203631353839.roa
Signing time:             Tue 21 Mar 2023 13:29:50 +0000
ROA not before:           Tue 21 Mar 2023 13:24:50 +0000
ROA not after:            Tue 19 Mar 2024 13:29:50 +0000
asID:                     61589
IP address blocks:        2804:48f0:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:90:f5:0c:68:22:a2:c3:7b:a8:31:20:13:87:81:bf:a2:8c:f7:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644FDBBE4743E5D56B8A177FBF2E3251F42D92E9
        Validity
            Not Before: Mar 21 13:24:50 2023 GMT
            Not After : Mar 19 13:29:50 2024 GMT
        Subject: CN=F3EB480C57002181364884F694F09570339E5DE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:aa:f4:b8:eb:09:1e:bf:81:b7:ec:ab:e0:27:
                    7c:8b:49:41:15:12:c8:89:7b:fc:6c:d6:f6:93:87:
                    fb:d5:5b:c1:99:02:ed:fa:4f:82:eb:e6:8b:b0:ad:
                    e6:05:da:9f:de:8d:ce:b0:78:64:43:6a:2f:65:be:
                    dc:a2:6d:2c:2d:e5:3a:13:a4:84:82:35:6a:f5:1b:
                    b1:1a:e6:f5:75:43:34:78:b6:3b:9f:b9:f4:e6:e6:
                    9e:c3:0b:22:f2:7b:b4:e7:49:7c:2e:d7:24:11:3d:
                    d5:63:4e:8b:8f:fe:77:92:a5:a2:66:84:fe:ed:6c:
                    a6:5b:e4:44:80:43:9d:29:ff:48:8a:e0:72:6e:f7:
                    c7:69:b3:a0:23:79:9c:a2:a4:db:38:b5:75:13:e8:
                    57:09:c9:96:fa:6c:4a:79:e8:aa:9b:a9:58:19:b1:
                    b1:69:f8:e7:13:bd:7e:42:d7:6f:3d:60:c7:80:69:
                    7c:92:11:bf:28:bb:48:ec:e1:6d:15:35:a3:21:9e:
                    84:3c:8f:20:88:54:88:bf:92:6c:06:bc:f0:49:08:
                    d1:4c:6c:9f:79:0c:52:f8:23:c5:2f:a8:40:2c:9a:
                    9b:c2:eb:b1:c9:ea:ca:68:c6:8d:c8:34:8a:b3:81:
                    4d:b8:4b:04:c4:67:bc:12:8e:86:69:09:89:2b:00:
                    9c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:EB:48:0C:57:00:21:81:36:48:84:F6:94:F0:95:70:33:9E:5D:E6
            X509v3 Authority Key Identifier:
                keyid:64:4F:DB:BE:47:43:E5:D5:6B:8A:17:7F:BF:2E:32:51:F4:2D:92:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/644FDBBE4743E5D56B8A177FBF2E3251F42D92E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/644FDBBE4743E5D56B8A177FBF2E3251F42D92E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/323830343a343866303a633030303a3a2f33342d3334203d3e203631353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:48f0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6a:bd:16:97:d2:49:a0:8c:79:67:68:73:d6:93:d8:51:76:17:
         00:c5:bd:2d:bd:dc:a3:3e:13:bd:a3:b3:4c:82:37:f8:c7:37:
         4f:ff:16:f3:aa:25:0c:dc:a1:33:7c:69:ee:f5:b6:7c:94:84:
         f6:27:5e:f9:a1:d6:e8:2d:9f:db:6f:fc:79:96:60:7f:5f:42:
         66:d1:2f:98:cb:a0:ce:7a:49:bf:90:55:b3:75:9d:b9:6a:82:
         e3:c8:26:9f:f3:8e:8f:65:d1:8f:c8:cb:f9:9e:c4:dc:d2:31:
         39:e1:65:b3:5f:74:15:c1:00:c8:16:1a:4d:12:c3:7b:65:16:
         8b:5b:5c:61:e2:f7:75:bc:3a:4a:0f:0c:59:5a:4d:4d:65:d7:
         72:37:5f:11:c6:94:27:ca:7e:cc:69:39:c8:bf:ba:57:5e:e3:
         28:72:25:ed:f0:ea:05:b8:18:ad:f4:64:88:2d:d9:34:b9:4a:
         0d:e7:fe:c4:f3:7e:cd:8e:25:1f:52:58:ef:dd:fe:de:b5:16:
         47:02:92:8f:ba:2d:a9:d5:94:5f:a8:eb:ad:2e:31:1e:29:7d:
         ab:0f:9a:89:97:71:8b:96:b4:12:56:fd:0c:51:cc:54:a4:96:
         ab:27:aa:a7:32:f5:a8:a9:42:99:da:c4:52:dd:a9:3b:92:f7:
         b5:05:02:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org