Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/323830343a323362383a3a2f33322d3332203d3e203631353834.roa
File:                     323830343a323362383a3a2f33322d3332203d3e203631353834.roa (raw, json)
Hash identifier:          JRys9th+pkTY7Y8R6bycv7KqHFuu/XAi+DGKN8bLJTk=
Subject key identifier:   C6:46:69:80:D2:6D:5E:E7:17:C6:76:2D:8A:83:CC:FD:8B:BB:1A:07
Certificate issuer:       /CN=674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1
Certificate serial:       4A23E292A9DBCFCC219D68E931352A660E694534
Authority key identifier: 67:4F:4A:07:DE:25:50:DA:0A:39:FE:F5:5B:D2:A8:B2:D2:54:94:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/323830343a323362383a3a2f33322d3332203d3e203631353834.roa
Signing time:             Mon 10 Jul 2023 19:06:31 +0000
ROA not before:           Mon 10 Jul 2023 19:01:31 +0000
ROA not after:            Mon 08 Jul 2024 19:06:31 +0000
asID:                     61584
IP address blocks:        2804:23b8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:23:e2:92:a9:db:cf:cc:21:9d:68:e9:31:35:2a:66:0e:69:45:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1
        Validity
            Not Before: Jul 10 19:01:31 2023 GMT
            Not After : Jul  8 19:06:31 2024 GMT
        Subject: CN=C6466980D26D5EE717C6762D8A83CCFD8BBB1A07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:37:a4:02:de:8e:db:d3:e2:4c:ab:63:74:46:
                    3e:2e:14:0e:f4:40:fd:54:e8:c8:f2:36:8b:d5:c6:
                    9c:1f:1a:6e:eb:5c:34:8a:61:0e:66:6d:cc:94:52:
                    ce:7f:2a:b1:cf:48:17:61:26:8a:e8:3e:ad:bd:f1:
                    a8:4a:dc:ff:54:39:5f:63:19:b4:a1:d9:03:7c:eb:
                    7e:97:41:27:25:c7:43:90:fa:33:b4:20:f4:e9:a7:
                    0c:2a:87:98:2d:45:c6:f3:54:71:ec:2b:f2:5c:d9:
                    cd:f0:b8:fa:1f:4d:ed:c9:49:e1:63:a9:0e:2d:5f:
                    29:a9:4d:01:2c:48:f2:00:60:a9:6e:21:99:58:b5:
                    8b:ad:5e:13:f5:60:7a:2f:10:e7:31:ac:25:cd:40:
                    9f:45:83:ac:40:ff:0e:a6:fb:be:81:24:43:0a:fd:
                    84:11:25:73:97:08:d5:4a:f3:60:2d:85:fb:e1:df:
                    52:71:2d:e4:cb:0e:8b:f6:e4:b7:e0:d7:66:78:c9:
                    ab:50:73:03:e6:b4:13:75:21:28:35:44:a5:72:55:
                    a2:7b:35:34:d3:fb:56:42:00:89:0e:a5:ca:3d:b6:
                    52:46:81:4c:83:1d:9f:ee:15:8f:1d:3d:65:29:f0:
                    ca:b4:ad:85:7f:3d:65:84:d9:5c:60:c9:df:b7:be:
                    62:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:46:69:80:D2:6D:5E:E7:17:C6:76:2D:8A:83:CC:FD:8B:BB:1A:07
            X509v3 Authority Key Identifier:
                keyid:67:4F:4A:07:DE:25:50:DA:0A:39:FE:F5:5B:D2:A8:B2:D2:54:94:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/323830343a323362383a3a2f33322d3332203d3e203631353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:23b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         c9:05:56:5d:15:48:55:69:9a:a4:a7:25:60:5f:c6:b6:bb:5c:
         7e:8d:64:40:38:57:27:27:56:e2:1c:a4:e7:dd:52:f4:a9:5b:
         c3:bc:58:d8:76:f2:81:a2:50:b9:be:14:df:be:32:54:2b:f7:
         3d:41:3c:12:99:e5:80:20:d4:5f:dd:20:f6:e8:b1:93:57:c7:
         fa:4f:cc:5b:74:57:3e:4d:88:be:a4:16:9d:fe:19:1b:b8:cc:
         59:1a:49:a1:0c:a4:dc:de:98:d4:c2:f5:a8:1a:18:c2:d0:b6:
         ab:1d:63:65:e2:6e:8f:52:73:4d:69:d8:31:a2:d4:81:70:75:
         05:37:e8:69:ce:67:9c:7e:8f:07:38:68:92:b5:06:00:75:5c:
         5c:8e:a0:ef:0f:c0:b6:2f:ed:3e:81:3a:18:f2:dd:c9:5f:12:
         25:9f:43:43:da:7d:d4:c1:95:00:12:8a:84:83:07:61:ef:c2:
         91:93:ea:6c:13:90:f4:d2:67:e5:52:60:d2:fc:43:17:66:5e:
         86:8f:68:31:f9:9d:40:75:0c:ca:5a:83:7c:59:0f:a4:a5:7a:
         66:77:19:1c:7f:d5:c8:da:af:b2:92:cf:6c:ff:5e:01:be:83:
         fa:1c:15:03:55:a3:45:4e:24:b6:b9:68:53:5c:57:e4:e9:22:
         5f:dd:8d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:01 2024 by rpki-client on console-ams.rpki-client.org