Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/323830343a366130303a383030303a3a2f33342d3334203d3e20323730333035.roa
File:                     323830343a366130303a383030303a3a2f33342d3334203d3e20323730333035.roa (raw, json)
Hash identifier:          nr/M7Xe640TAhfxU4SP5z85nIhHQ7cu+dWVlbexbv/I=
Subject key identifier:   C6:75:F0:C3:F4:EA:92:A5:71:0F:86:80:9E:8E:AC:24:C8:33:CE:2F
Certificate issuer:       /CN=4019E68B6DEC8AAEC6D285328277EF68ACC6C9B4
Certificate serial:       6A6EB214ED9F9142FA420DD6AE65E1B803B2A4E0
Authority key identifier: 40:19:E6:8B:6D:EC:8A:AE:C6:D2:85:32:82:77:EF:68:AC:C6:C9:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4019E68B6DEC8AAEC6D285328277EF68ACC6C9B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/323830343a366130303a383030303a3a2f33342d3334203d3e20323730333035.roa
Signing time:             Mon 08 May 2023 13:42:26 +0000
ROA not before:           Mon 08 May 2023 13:37:26 +0000
ROA not after:            Mon 06 May 2024 13:42:26 +0000
asID:                     270305
IP address blocks:        2804:6a00:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:6e:b2:14:ed:9f:91:42:fa:42:0d:d6:ae:65:e1:b8:03:b2:a4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4019E68B6DEC8AAEC6D285328277EF68ACC6C9B4
        Validity
            Not Before: May  8 13:37:26 2023 GMT
            Not After : May  6 13:42:26 2024 GMT
        Subject: CN=C675F0C3F4EA92A5710F86809E8EAC24C833CE2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e4:0c:82:75:86:23:cc:d9:98:f7:5a:a0:8b:
                    45:9b:e5:ba:cb:4b:aa:2b:16:55:fd:48:95:5e:d7:
                    1f:f2:0e:77:11:03:6d:eb:f8:de:42:e4:f5:01:b4:
                    59:ef:57:11:7e:36:a3:e8:b5:7d:ae:73:8e:65:75:
                    67:51:3b:23:75:6b:fb:7d:c6:75:54:b8:33:ef:18:
                    75:c5:a1:61:d8:0f:c2:c8:c4:13:de:96:71:49:aa:
                    dc:8f:31:92:71:79:bb:8c:41:6e:89:1f:7c:3f:cc:
                    86:e2:0b:52:6b:74:90:6d:69:ad:c9:f2:5f:3f:19:
                    27:ba:9d:36:6b:c5:0e:30:dc:74:b1:b4:ec:eb:bf:
                    cd:b1:e2:96:cc:94:e6:b1:0e:58:cc:1d:85:fd:54:
                    15:4f:57:8e:d3:30:fb:4c:6d:f4:65:bd:0e:b2:e2:
                    55:92:37:51:a2:ed:2a:f8:45:49:ba:59:86:7f:91:
                    a5:07:40:d5:16:22:15:79:bb:b5:d5:21:2a:53:2f:
                    b9:0c:48:89:c7:ba:bc:99:1e:2a:20:8f:2a:30:d7:
                    62:df:d3:dc:1f:0b:ad:5a:7e:7f:36:a4:df:ce:af:
                    49:a5:82:8b:96:b0:3c:62:54:3a:5a:b1:31:d8:ad:
                    0b:88:43:55:ad:88:7f:45:9c:de:7b:78:99:d2:5f:
                    6c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:75:F0:C3:F4:EA:92:A5:71:0F:86:80:9E:8E:AC:24:C8:33:CE:2F
            X509v3 Authority Key Identifier:
                keyid:40:19:E6:8B:6D:EC:8A:AE:C6:D2:85:32:82:77:EF:68:AC:C6:C9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/4019E68B6DEC8AAEC6D285328277EF68ACC6C9B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4019E68B6DEC8AAEC6D285328277EF68ACC6C9B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/323830343a366130303a383030303a3a2f33342d3334203d3e20323730333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a00:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3f:6f:69:4b:21:83:36:e9:fc:32:b8:39:af:04:5e:d8:f0:7d:
         38:1c:74:65:58:c4:e3:cc:42:b5:4e:dc:7a:5e:ab:41:fe:79:
         a5:43:4f:08:1c:1a:17:9f:0d:53:b3:fd:69:d6:4f:17:62:3b:
         24:38:44:aa:3c:db:db:e6:e9:fe:0f:94:6d:31:47:90:f3:46:
         e6:48:e8:f4:90:30:64:69:2b:4c:e8:fd:66:d4:18:0b:05:12:
         bf:8d:96:06:3a:97:27:92:26:cd:44:7f:9d:49:b1:1d:89:a5:
         7b:9a:01:0b:56:e2:46:f3:eb:2b:e8:75:1a:0d:fc:14:8d:8a:
         aa:d6:6f:fc:da:21:45:9d:1d:b1:94:e9:09:b9:91:32:50:d1:
         df:34:5a:59:cf:b4:57:02:c5:ca:25:73:8a:e5:3a:23:46:cd:
         09:97:96:3a:c6:21:9e:0b:53:8e:45:1f:76:0a:26:ac:03:d8:
         14:8c:8a:8e:ec:46:63:ba:7f:f2:5a:db:e5:7b:fc:20:d4:d9:
         6c:4c:34:9c:8d:4f:4d:4f:e1:b1:e0:dc:5b:f3:2f:42:56:c2:
         6f:a8:21:84:e1:f5:51:aa:ec:d2:36:46:13:5d:e5:00:b4:8a:
         c0:11:f9:3a:d3:95:31:98:40:59:2a:de:71:03:55:e0:23:9d:
         32:3f:b0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:02 2024 by rpki-client on console-ams.rpki-client.org