Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/323830343a366534303a383030303a3a2f33332d3333203d3e20323730353834.roa
File:                     323830343a366534303a383030303a3a2f33332d3333203d3e20323730353834.roa (raw, json)
Hash identifier:          rJaCIVTyB4x8jGUivayFUwnUebDtGVIFZv7cR+u3FeM=
Subject key identifier:   73:BA:99:C6:0F:27:44:01:E0:56:97:59:B4:E0:A9:6F:DA:B1:6D:4D
Certificate issuer:       /CN=69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7
Certificate serial:       5D6CB760E000675612D5362BD91DD50086030D4E
Authority key identifier: 69:AE:EE:56:7B:07:BF:EF:FE:BA:67:EA:5A:87:2A:67:AE:28:A9:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/323830343a366534303a383030303a3a2f33332d3333203d3e20323730353834.roa
Signing time:             Fri 31 Mar 2023 16:33:00 +0000
ROA not before:           Fri 31 Mar 2023 16:28:00 +0000
ROA not after:            Fri 29 Mar 2024 16:33:00 +0000
asID:                     270584
IP address blocks:        2804:6e40:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:6c:b7:60:e0:00:67:56:12:d5:36:2b:d9:1d:d5:00:86:03:0d:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7
        Validity
            Not Before: Mar 31 16:28:00 2023 GMT
            Not After : Mar 29 16:33:00 2024 GMT
        Subject: CN=73BA99C60F274401E0569759B4E0A96FDAB16D4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:02:52:d0:28:18:07:6c:1d:89:12:41:8f:c9:
                    7d:d3:fd:61:56:e6:89:51:6d:22:a1:70:df:c1:e7:
                    76:9c:a9:65:26:19:a2:b7:96:4c:82:4b:d0:c6:6c:
                    4c:eb:79:bb:6f:12:fc:88:2c:88:e9:45:7f:4b:f0:
                    8d:22:47:0a:e4:87:b0:fc:07:d5:89:78:33:7c:d7:
                    be:ae:7b:58:ff:80:6b:82:b7:a9:8c:1b:74:db:1b:
                    0a:ec:f1:e4:cd:30:67:b4:94:32:14:e5:62:df:ce:
                    5a:f2:29:ea:b9:81:4f:2b:23:f9:51:91:7f:73:45:
                    e0:e0:0b:94:d3:8c:a0:97:af:98:76:36:a1:20:1d:
                    12:a0:b4:d0:43:0c:c9:59:08:19:84:b6:f7:ee:55:
                    f0:fc:0b:98:31:24:c4:81:fd:03:3b:de:1b:99:20:
                    0b:39:0a:78:9f:a0:3b:59:3e:17:55:ba:16:eb:d3:
                    70:a1:2e:61:8f:70:51:93:23:01:b7:ca:cc:9e:87:
                    b2:35:17:f6:17:7f:e1:89:80:98:42:50:20:6f:23:
                    5c:99:6f:e4:3d:81:c7:fd:66:49:78:99:c3:9d:7b:
                    c7:b8:18:95:6f:6a:a1:d9:76:1f:f6:a0:01:f3:36:
                    da:e8:27:8b:b2:fc:a3:f2:73:c8:ff:8c:56:a0:d5:
                    a1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:BA:99:C6:0F:27:44:01:E0:56:97:59:B4:E0:A9:6F:DA:B1:6D:4D
            X509v3 Authority Key Identifier:
                keyid:69:AE:EE:56:7B:07:BF:EF:FE:BA:67:EA:5A:87:2A:67:AE:28:A9:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/323830343a366534303a383030303a3a2f33332d3333203d3e20323730353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e40:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         4f:df:31:cc:53:e9:90:8c:74:22:27:26:59:4f:f5:18:77:0d:
         0f:a6:89:13:53:3e:8d:c8:93:df:73:57:87:6c:c0:1b:f4:4d:
         73:21:49:6c:42:8e:3a:e4:bc:a8:4e:76:45:da:04:1c:8b:05:
         b8:47:0f:7b:1b:95:30:06:fa:a4:0f:07:5b:fa:e5:8c:55:14:
         8d:5a:12:6f:da:d6:6e:6d:e3:c0:2a:5c:13:55:b4:0a:72:15:
         1e:6f:fb:68:f8:cc:2b:ee:57:5e:4b:0e:6f:30:99:98:6b:e4:
         7f:c4:e6:15:de:c8:0b:ec:42:11:7d:ee:c5:11:ef:e9:af:18:
         ea:0b:74:06:af:a5:b3:02:f0:1e:ed:5d:3d:28:58:54:0d:a7:
         7a:3d:f6:6c:8d:ef:ff:2b:f8:d8:99:2b:8c:3b:8b:ec:cb:3c:
         cc:e8:d2:f6:8a:c5:5b:d7:86:9b:09:a4:f1:05:86:bb:f8:54:
         56:56:1f:6e:a5:33:22:a8:cf:6f:65:29:c4:53:71:58:90:8c:
         55:eb:4e:d8:3b:77:7b:66:80:70:c4:d3:13:05:14:9e:42:82:
         1c:19:da:d3:67:19:92:6a:f5:f0:f6:df:b4:57:5e:6e:13:07:
         07:d7:14:a0:df:03:a9:00:8a:d1:40:7b:d0:b0:bc:2e:be:49:
         a2:61:f4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:18 2024 by rpki-client on console-ams.rpki-client.org