Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/323830343a366534303a3a2f33342d3334203d3e20323730353834.roa
File:                     323830343a366534303a3a2f33342d3334203d3e20323730353834.roa (raw, json)
Hash identifier:          RrrJwFgCQbw8eU2foyAEd0qgdZP+JYW59yBlMYXh6f0=
Subject key identifier:   06:55:57:8B:34:68:F0:B8:61:33:9E:7E:96:80:0A:66:0A:BF:EA:08
Certificate issuer:       /CN=69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7
Certificate serial:       1A376F93CDBD3E519EFFDFBAA8A1E8F482121879
Authority key identifier: 69:AE:EE:56:7B:07:BF:EF:FE:BA:67:EA:5A:87:2A:67:AE:28:A9:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/323830343a366534303a3a2f33342d3334203d3e20323730353834.roa
Signing time:             Fri 31 Mar 2023 16:32:39 +0000
ROA not before:           Fri 31 Mar 2023 16:27:39 +0000
ROA not after:            Fri 29 Mar 2024 16:32:39 +0000
asID:                     270584
IP address blocks:        2804:6e40::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:37:6f:93:cd:bd:3e:51:9e:ff:df:ba:a8:a1:e8:f4:82:12:18:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7
        Validity
            Not Before: Mar 31 16:27:39 2023 GMT
            Not After : Mar 29 16:32:39 2024 GMT
        Subject: CN=0655578B3468F0B861339E7E96800A660ABFEA08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2a:cc:07:db:a5:d1:43:96:5c:06:9d:ba:0f:
                    08:ad:33:98:53:3a:84:ef:0f:ca:fa:32:e5:bc:45:
                    6d:2b:f1:e6:21:14:6e:c6:5f:6a:02:0d:1c:59:56:
                    81:f5:c2:68:24:93:88:41:82:fa:a8:9c:34:65:f2:
                    7d:fc:94:5b:e4:70:65:41:3f:8b:7f:43:fc:b1:e3:
                    ef:25:d6:05:20:d1:e2:30:12:9d:70:61:ae:d1:6e:
                    b0:42:53:bd:e9:c5:8e:d8:ab:e9:11:00:66:72:78:
                    60:24:7e:c4:0a:9c:75:42:19:c4:fe:41:02:cc:e6:
                    0c:c3:95:54:fc:d4:d3:93:38:c8:5c:e6:c9:6b:b9:
                    ae:6d:ec:bd:2e:9d:e4:15:1a:cf:f0:96:a1:0c:72:
                    94:2a:10:ef:25:18:e2:8e:06:c1:fd:68:48:0a:6a:
                    e4:f9:55:02:47:1d:eb:f3:bd:f8:c1:6b:f7:78:ed:
                    4b:e5:44:79:75:43:7a:e9:14:89:f1:4a:fc:96:95:
                    94:9e:0a:77:32:ff:17:d2:62:19:02:02:ec:4b:eb:
                    fb:43:5a:c1:ae:6d:58:e1:38:9a:0f:d5:5b:fb:12:
                    03:63:40:56:90:10:50:d6:e5:c4:35:14:b7:41:c5:
                    12:7a:be:63:61:45:e8:2e:4a:06:f4:95:52:10:a8:
                    26:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:55:57:8B:34:68:F0:B8:61:33:9E:7E:96:80:0A:66:0A:BF:EA:08
            X509v3 Authority Key Identifier:
                keyid:69:AE:EE:56:7B:07:BF:EF:FE:BA:67:EA:5A:87:2A:67:AE:28:A9:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/323830343a366534303a3a2f33342d3334203d3e20323730353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e40::/34

    Signature Algorithm: sha256WithRSAEncryption
         9a:e7:53:89:00:fe:0c:e5:df:0f:16:ff:d0:76:8a:30:90:10:
         8e:fe:b5:27:f5:02:47:8b:09:0d:65:f7:2c:2a:c1:df:f2:68:
         da:33:c8:fe:52:0e:97:29:c9:b6:16:59:c1:25:27:21:1a:c6:
         14:d5:a8:40:90:5a:43:24:dd:9e:7b:a2:db:64:a6:95:95:85:
         79:f8:c6:34:bb:0b:92:92:1f:fe:1c:d1:fe:91:f1:39:c8:ce:
         f3:76:03:5b:5c:e4:47:9c:6f:f2:b2:da:33:98:e8:1c:79:4f:
         b2:71:77:26:3e:1b:58:ea:55:d1:1e:5e:0a:db:c3:d6:f6:60:
         50:97:39:44:e0:fd:eb:44:85:bb:30:cf:b2:28:a6:a2:cc:aa:
         af:08:53:7f:f3:0e:26:73:e6:03:98:4b:25:2a:f7:c7:b4:cb:
         d6:54:32:29:c1:55:61:37:44:75:df:56:1c:fb:04:b3:20:48:
         18:52:37:44:ff:07:56:5d:df:73:d3:50:17:97:07:5f:78:6a:
         02:09:cf:b5:38:85:3d:ba:45:75:fb:9b:3a:07:1e:5d:14:e0:
         47:8c:78:cb:ea:a3:23:ea:9c:a4:b7:f3:86:fc:1d:f4:9f:bd:
         32:2b:9e:71:3b:58:42:c3:0f:8a:79:f2:ff:1e:d3:a0:1e:2b:
         2f:24:dc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org