Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/0/323830343a373963633a3a2f33322d3334203d3e20323731333238.roa
File:                     323830343a373963633a3a2f33322d3334203d3e20323731333238.roa (raw, json)
Hash identifier:          gUdXLilp+ftTG6fjDRuu7c2f1d3qfi/6bZSrYn5G0uo=
Subject key identifier:   D5:7B:7F:6C:A2:14:B1:AA:5B:74:BC:2F:1A:A5:CD:97:66:90:18:2D
Certificate issuer:       /CN=61F5EEE5F36D62616A5B068B35FB230002695C0B
Certificate serial:       1DD2DC37BB8104886C80B452953D3802B005D250
Authority key identifier: 61:F5:EE:E5:F3:6D:62:61:6A:5B:06:8B:35:FB:23:00:02:69:5C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F5EEE5F36D62616A5B068B35FB230002695C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/0/323830343a373963633a3a2f33322d3334203d3e20323731333238.roa
Signing time:             Sat 09 Sep 2023 00:00:00 +0000
ROA not before:           Fri 08 Sep 2023 23:55:00 +0000
ROA not after:            Sat 07 Sep 2024 00:00:00 +0000
asID:                     271328
IP address blocks:        2804:79cc::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:d2:dc:37:bb:81:04:88:6c:80:b4:52:95:3d:38:02:b0:05:d2:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61F5EEE5F36D62616A5B068B35FB230002695C0B
        Validity
            Not Before: Sep  8 23:55:00 2023 GMT
            Not After : Sep  7 00:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:81:4f:9e:04:b1:c3:f9:86:b6:df:21:e4:1b:
                    6e:e6:4a:4a:f1:57:ec:85:96:97:ae:dc:a7:d4:e2:
                    a1:d7:54:92:67:53:5b:2d:2a:df:a4:3d:5d:d9:3c:
                    d1:a7:7d:76:ac:d5:8c:0f:62:ce:80:bc:89:e8:0e:
                    e3:e4:91:ef:53:80:04:5e:78:b9:c0:43:91:61:8e:
                    dc:90:f0:38:59:20:cc:17:47:f6:6f:0b:36:4c:5c:
                    b3:b4:83:6e:81:ae:7e:ec:f6:83:0d:56:f8:d7:fb:
                    4a:1b:96:fa:bc:54:5a:b6:7b:71:5b:81:c1:cb:5e:
                    a6:d4:a0:a3:73:e7:d0:78:4e:de:4a:81:08:3e:02:
                    0d:de:9b:b5:87:72:1a:45:93:52:60:85:27:8f:14:
                    c2:eb:7b:28:0a:3b:a0:0e:02:ac:c2:a3:e4:56:41:
                    11:56:f0:44:1a:4f:92:a7:1c:7c:62:52:bd:ee:b2:
                    6b:d3:37:39:d2:df:7b:79:1e:c1:b3:39:f2:57:4b:
                    b4:8e:e0:58:26:07:44:c6:fa:cd:4f:f0:2f:7e:21:
                    09:5c:4e:83:38:0c:68:e3:ab:50:36:df:ed:87:63:
                    47:3a:c3:b9:c8:e2:6b:10:d4:57:26:20:a6:bf:e7:
                    b5:c8:5c:4f:b4:80:84:67:12:89:f9:ab:b3:a6:48:
                    ed:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:7B:7F:6C:A2:14:B1:AA:5B:74:BC:2F:1A:A5:CD:97:66:90:18:2D
            X509v3 Authority Key Identifier:
                keyid:61:F5:EE:E5:F3:6D:62:61:6A:5B:06:8B:35:FB:23:00:02:69:5C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/0/61F5EEE5F36D62616A5B068B35FB230002695C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F5EEE5F36D62616A5B068B35FB230002695C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/0/323830343a373963633a3a2f33322d3334203d3e20323731333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:79cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:27:38:bc:67:f3:1d:5e:2e:c0:af:36:da:06:cd:2d:f1:34:
         7a:e8:70:0e:1a:63:47:86:88:fc:23:71:97:e1:11:11:61:d9:
         54:02:75:c2:95:21:6e:d9:4a:94:03:7e:71:3f:77:f2:ff:2c:
         08:ee:96:0a:aa:e4:7b:ee:51:c7:27:cb:4b:3f:25:33:ab:69:
         d8:f6:28:97:47:da:13:65:cf:da:8e:ed:e7:1f:67:ac:b2:a5:
         b6:f6:d4:15:f2:ed:14:0c:37:91:a5:67:32:0f:d6:ae:ab:db:
         26:8c:74:b3:bc:09:16:44:8a:03:25:8e:72:32:42:93:79:63:
         a1:ec:06:c0:13:05:9e:34:7f:73:ee:8e:ba:9a:a8:ad:ac:f1:
         d4:06:52:c9:ef:f2:e4:e7:e7:f8:17:8a:71:a8:50:75:85:e2:
         85:d5:74:7d:38:cf:db:3f:a8:54:39:e1:44:ac:b1:24:89:ae:
         78:ba:ed:76:e7:76:a7:9c:b3:8b:bd:11:57:1c:6f:71:5d:f7:
         13:12:23:b4:22:ea:9a:a8:40:1f:12:00:73:db:f8:ff:d7:d9:
         40:e1:75:bd:ea:6c:d2:6c:db:bc:9d:06:ee:ac:55:bc:6a:64:
         36:1f:a4:44:f4:8f:eb:59:db:f4:dc:b5:b7:b0:d8:6d:c0:ca:
         d1:7c:bb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org