Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/2/323830343a356131303a3a2f33332d3333203d3e20323638373436.roa
File:                     323830343a356131303a3a2f33332d3333203d3e20323638373436.roa (raw, json)
Hash identifier:          erJPdYXHNq9RteurFvLRfadQuJTTa1eZdoDbguatTmc=
Subject key identifier:   09:89:CD:51:67:69:C3:6B:66:79:F4:67:D3:36:A1:D9:46:11:6C:99
Certificate issuer:       /CN=3014053C58ECABA7850A00C558FB42CE2C0FC6CC
Certificate serial:       43D4EE052D96E63D45DC047BF4E062E687362044
Authority key identifier: 30:14:05:3C:58:EC:AB:A7:85:0A:00:C5:58:FB:42:CE:2C:0F:C6:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3014053C58ECABA7850A00C558FB42CE2C0FC6CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/2/323830343a356131303a3a2f33332d3333203d3e20323638373436.roa
Signing time:             Mon 04 Sep 2023 20:35:10 +0000
ROA not before:           Mon 04 Sep 2023 20:30:10 +0000
ROA not after:            Mon 02 Sep 2024 20:35:10 +0000
asID:                     268746
IP address blocks:        2804:5a10::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:d4:ee:05:2d:96:e6:3d:45:dc:04:7b:f4:e0:62:e6:87:36:20:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3014053C58ECABA7850A00C558FB42CE2C0FC6CC
        Validity
            Not Before: Sep  4 20:30:10 2023 GMT
            Not After : Sep  2 20:35:10 2024 GMT
        Subject: CN=0989CD516769C36B6679F467D336A1D946116C99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4e:42:6c:2d:87:d5:c8:2e:b4:5b:65:fb:99:
                    c9:b7:7f:58:4a:1e:39:4a:e9:24:c0:d9:fb:ea:8b:
                    19:ea:e5:6f:26:3d:2f:35:f6:45:2d:2d:8e:56:4e:
                    fc:0d:dd:6a:bd:1d:98:4c:64:f9:ed:55:b3:5c:0c:
                    0c:55:02:fb:ee:f8:8b:db:b0:69:14:f5:5f:af:4c:
                    00:42:8f:29:ab:8d:fb:38:ae:30:bc:99:71:8a:1b:
                    f9:fb:be:bd:c2:c4:d7:f1:f1:20:39:35:66:ca:e9:
                    42:c7:2a:85:58:11:1e:72:aa:63:44:f1:f1:57:6b:
                    ba:46:e9:4b:97:65:0b:0f:5e:66:1c:34:8c:5f:96:
                    b5:31:4d:3e:d8:c7:0a:d2:9b:02:03:c6:be:4a:93:
                    cb:5f:71:6c:2c:2c:b6:9f:24:f3:9c:9a:dc:92:8c:
                    7b:5b:4e:1b:d6:8a:e1:1f:5a:a1:8a:cb:3d:6f:f6:
                    47:34:cb:c8:dc:6c:8e:4d:b3:3e:8e:82:0f:d7:62:
                    d1:8c:40:5e:2f:13:61:8a:56:41:32:ce:23:c4:00:
                    74:21:c7:7f:81:8b:eb:37:1a:3a:cc:b8:f8:b5:a6:
                    e7:c7:0f:6f:0e:8e:78:da:a5:d1:68:51:1c:09:71:
                    e5:c0:68:a8:e5:a6:81:22:6c:bb:ef:30:82:83:0e:
                    ef:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:89:CD:51:67:69:C3:6B:66:79:F4:67:D3:36:A1:D9:46:11:6C:99
            X509v3 Authority Key Identifier:
                keyid:30:14:05:3C:58:EC:AB:A7:85:0A:00:C5:58:FB:42:CE:2C:0F:C6:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/2/3014053C58ECABA7850A00C558FB42CE2C0FC6CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3014053C58ECABA7850A00C558FB42CE2C0FC6CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/2/323830343a356131303a3a2f33332d3333203d3e20323638373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a10::/33

    Signature Algorithm: sha256WithRSAEncryption
         b2:3a:09:d8:15:ab:a0:c2:10:84:67:ed:3f:2a:3c:d0:dd:50:
         65:ad:07:72:ae:87:d2:96:c7:69:06:d3:be:ea:83:56:40:d7:
         c5:3a:08:4a:8a:80:3a:51:c9:0d:59:bc:29:fa:c6:aa:cd:88:
         ad:67:04:4a:1f:a7:01:0c:c8:ff:fa:89:31:4d:44:35:e0:d3:
         2f:5a:36:b9:34:5b:61:b3:7a:14:0b:93:d4:b5:6d:75:20:18:
         0b:5e:76:9f:f0:dd:44:97:c2:cc:84:e5:f5:a1:d2:66:bf:bd:
         35:36:a2:43:80:1d:ef:df:e1:e2:07:23:5f:ea:31:1a:69:5e:
         a1:1f:1d:5f:f6:89:09:bb:6c:39:24:02:9a:97:b3:60:29:95:
         5d:cf:fd:a6:30:28:6f:03:69:95:46:36:68:9b:14:e8:8f:1a:
         87:72:c9:ea:be:6a:25:da:ff:9c:da:14:63:f6:83:81:a7:b9:
         49:3e:fc:7a:0c:54:de:54:b1:8d:ec:a4:12:c9:29:ca:83:f3:
         f2:6b:f2:48:48:fa:08:62:10:f2:ce:92:73:dd:f4:36:45:0d:
         5f:6c:97:a9:17:ee:bd:38:55:b5:88:52:4a:e5:cc:6a:08:34:
         75:b3:7b:9f:91:72:66:33:6e:79:6e:79:6e:58:05:57:2f:30:
         53:16:08:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:30 2024 by rpki-client on console-ams.rpki-client.org