Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuJdaidoqLFp7ozw3tynaHxZvKHeKNecPr17RAN6Ksua/0/323830343a336563633a3a2f33322d3438203d3e20323636363231.roa
File:                     323830343a336563633a3a2f33322d3438203d3e20323636363231.roa (raw, json)
Hash identifier:          GXhQjT9wk/ujMIdGsDuNF7hoec+QshxrSsl2rJhRqXs=
Subject key identifier:   65:00:D3:76:22:B4:8F:AE:BE:2E:B9:2A:A9:E3:D9:FB:55:70:29:67
Certificate issuer:       /CN=4394F9D85DC2BCCAA8F96B028F1030E6883D02EE
Certificate serial:       7EBDC4CFC6EE5BFC5CBC6E511A48042742DD2634
Authority key identifier: 43:94:F9:D8:5D:C2:BC:CA:A8:F9:6B:02:8F:10:30:E6:88:3D:02:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4394F9D85DC2BCCAA8F96B028F1030E6883D02EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuJdaidoqLFp7ozw3tynaHxZvKHeKNecPr17RAN6Ksua/0/323830343a336563633a3a2f33322d3438203d3e20323636363231.roa
Signing time:             Sat 11 Nov 2023 15:31:15 +0000
ROA not before:           Sat 11 Nov 2023 15:26:15 +0000
ROA not after:            Sat 09 Nov 2024 15:31:15 +0000
asID:                     266621
IP address blocks:        2804:3ecc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:bd:c4:cf:c6:ee:5b:fc:5c:bc:6e:51:1a:48:04:27:42:dd:26:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4394F9D85DC2BCCAA8F96B028F1030E6883D02EE
        Validity
            Not Before: Nov 11 15:26:15 2023 GMT
            Not After : Nov  9 15:31:15 2024 GMT
        Subject: CN=6500D37622B48FAEBE2EB92AA9E3D9FB55702967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:62:2a:5e:0f:24:99:77:20:73:36:a6:c7:b4:
                    06:12:e0:34:11:46:17:27:57:cd:e1:5e:73:61:fb:
                    59:0c:69:31:3a:17:ed:72:c0:10:43:36:6d:07:47:
                    04:60:12:de:79:1a:c5:63:eb:b5:ab:f7:08:8e:02:
                    d6:7a:5e:80:69:46:2f:bc:61:63:b6:b0:71:57:bf:
                    8e:ff:7c:e8:60:d9:38:9d:a7:85:7f:01:2f:84:a2:
                    09:cf:0c:7e:da:a0:f1:7a:a8:49:25:8c:fd:eb:97:
                    19:59:e0:72:74:6e:30:86:68:34:16:87:fa:c3:19:
                    8b:27:2f:c7:69:4e:f3:d1:53:71:fb:12:e7:ac:d0:
                    18:51:e4:29:cb:e2:88:74:35:a2:eb:f9:66:94:f9:
                    78:27:d4:ee:7f:b7:68:de:2f:49:5c:37:dc:83:a5:
                    51:ed:da:ff:6a:79:51:eb:c4:15:89:c2:ae:37:8f:
                    50:f8:af:f3:8c:f2:92:ee:fc:09:a7:07:0e:cb:c1:
                    75:93:ca:ae:27:38:6e:84:77:f5:2d:7d:d8:f7:d7:
                    40:80:94:0f:7f:88:be:79:7b:41:75:a2:8e:89:f1:
                    40:90:ef:a9:c1:05:d5:5e:63:20:c8:10:12:2b:7b:
                    e8:75:5f:e7:2f:7d:32:75:a5:cf:64:e6:6f:98:05:
                    8c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:00:D3:76:22:B4:8F:AE:BE:2E:B9:2A:A9:E3:D9:FB:55:70:29:67
            X509v3 Authority Key Identifier:
                keyid:43:94:F9:D8:5D:C2:BC:CA:A8:F9:6B:02:8F:10:30:E6:88:3D:02:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuJdaidoqLFp7ozw3tynaHxZvKHeKNecPr17RAN6Ksua/0/4394F9D85DC2BCCAA8F96B028F1030E6883D02EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4394F9D85DC2BCCAA8F96B028F1030E6883D02EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuJdaidoqLFp7ozw3tynaHxZvKHeKNecPr17RAN6Ksua/0/323830343a336563633a3a2f33322d3438203d3e20323636363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ecc::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:da:c6:ec:7f:47:ae:e2:12:c3:6a:57:77:dc:a2:97:01:f1:
         a3:b3:20:22:37:6c:33:14:18:bb:2d:c0:9f:09:57:25:01:c9:
         e8:42:6a:8c:4d:fd:ab:63:fa:04:d8:9e:37:64:6c:35:fb:1c:
         f8:0f:38:ec:0c:68:ff:f5:ab:68:b2:66:ea:56:08:0e:27:28:
         ce:59:e7:6c:ce:9b:b2:01:a7:ba:46:47:33:23:51:14:1a:ea:
         18:2d:86:41:a0:2b:07:e3:00:7f:a6:a5:ef:ed:1c:37:7e:8b:
         66:d3:d6:63:fb:bf:0d:7a:aa:fe:88:33:18:cc:50:4d:e8:05:
         6f:65:45:85:44:70:c0:6e:7c:cd:ba:93:75:94:5d:f8:81:dc:
         17:92:80:68:c0:55:84:cf:3d:a8:56:c1:84:cb:26:15:3c:de:
         b1:37:a6:7c:a8:ca:65:9b:f8:a2:c3:ca:2e:62:f2:03:d8:3e:
         35:a9:90:4c:2b:b1:fc:f1:0a:c3:a3:08:c9:38:f7:5e:2b:12:
         2a:9f:8e:5a:b9:34:b8:b3:cf:fb:24:03:4b:f6:a6:8c:c3:37:
         ff:bf:60:6a:a1:8c:fa:b9:04:61:b3:23:55:d0:4f:d9:56:1c:
         80:b8:66:bc:4f:49:90:82:1d:bd:a2:5e:39:ac:f6:46:b7:3b:
         60:90:22:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org