Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/2/323830343a356131303a633030303a3a2f33342d3334203d3e20323638373436.roa
File:                     323830343a356131303a633030303a3a2f33342d3334203d3e20323638373436.roa (raw, json)
Hash identifier:          k9w5udlHsCYN9CiujrOWLKzUY9kLREjZMhDF7rzHBks=
Subject key identifier:   BA:F1:B7:78:9B:E0:3F:81:DA:5C:90:33:0A:38:CF:EC:7A:EB:AB:BB
Certificate issuer:       /CN=3014053C58ECABA7850A00C558FB42CE2C0FC6CC
Certificate serial:       584F374BE52A47CB876EF6AE6E30FABC9066C43D
Authority key identifier: 30:14:05:3C:58:EC:AB:A7:85:0A:00:C5:58:FB:42:CE:2C:0F:C6:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3014053C58ECABA7850A00C558FB42CE2C0FC6CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/2/323830343a356131303a633030303a3a2f33342d3334203d3e20323638373436.roa
Signing time:             Mon 04 Sep 2023 20:35:19 +0000
ROA not before:           Mon 04 Sep 2023 20:30:19 +0000
ROA not after:            Mon 02 Sep 2024 20:35:19 +0000
asID:                     268746
IP address blocks:        2804:5a10:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:4f:37:4b:e5:2a:47:cb:87:6e:f6:ae:6e:30:fa:bc:90:66:c4:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3014053C58ECABA7850A00C558FB42CE2C0FC6CC
        Validity
            Not Before: Sep  4 20:30:19 2023 GMT
            Not After : Sep  2 20:35:19 2024 GMT
        Subject: CN=BAF1B7789BE03F81DA5C90330A38CFEC7AEBABBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3a:92:af:95:d0:7b:78:88:43:43:65:87:6f:
                    82:27:22:62:11:a5:b7:b2:b9:18:d8:d9:0a:eb:cb:
                    a1:5a:26:0e:6e:da:4c:5d:70:a2:e7:b0:2e:15:fc:
                    91:b4:4f:1f:00:85:05:9d:01:84:37:39:e8:ac:09:
                    d7:18:9b:b1:f2:08:6a:d8:82:8f:df:44:25:32:b4:
                    d0:2d:15:34:56:11:f7:d1:48:20:bd:18:e1:85:b1:
                    44:19:50:c7:34:39:55:73:85:c9:f6:05:98:c4:20:
                    b6:58:53:55:5d:06:ed:7c:ef:f4:55:67:94:f7:7e:
                    38:99:af:5c:14:e5:d3:84:84:a1:3f:13:49:06:33:
                    76:c8:82:df:67:24:6d:ea:a5:e9:98:0b:41:21:cd:
                    dc:cd:4a:a0:a8:b7:af:02:9c:3a:fc:ef:ac:79:6a:
                    4b:29:a0:40:15:48:a3:ac:d6:19:21:b8:fe:e5:57:
                    4a:bb:43:6f:3d:b5:07:65:95:ae:b0:10:5c:a1:13:
                    0e:1a:c5:c5:f2:09:75:6a:80:3e:aa:7c:eb:73:00:
                    28:9b:ac:a9:a0:d0:59:39:ea:9b:5a:1b:37:28:f6:
                    3e:f6:7d:99:b7:96:e3:4f:23:61:c7:a6:86:50:16:
                    ce:46:bc:6b:c7:5d:22:56:5c:75:bb:6c:0c:aa:66:
                    21:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F1:B7:78:9B:E0:3F:81:DA:5C:90:33:0A:38:CF:EC:7A:EB:AB:BB
            X509v3 Authority Key Identifier:
                keyid:30:14:05:3C:58:EC:AB:A7:85:0A:00:C5:58:FB:42:CE:2C:0F:C6:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/2/3014053C58ECABA7850A00C558FB42CE2C0FC6CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3014053C58ECABA7850A00C558FB42CE2C0FC6CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/2/323830343a356131303a633030303a3a2f33342d3334203d3e20323638373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a10:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a2:21:63:9e:44:45:6d:72:ef:3a:61:c2:e5:fb:ab:e5:8b:23:
         e0:18:74:d1:d6:31:8c:d2:29:3c:bc:19:54:cf:d7:dc:0e:73:
         74:93:f4:50:5e:b9:57:4e:20:5c:33:45:8c:0c:c7:a4:08:ff:
         34:7d:9f:07:db:85:9e:5b:d1:58:91:44:b0:2f:49:b7:06:3a:
         00:3e:7b:9a:b5:b6:a1:f5:8a:80:9e:46:6e:3e:de:96:c2:f9:
         d7:30:7b:fa:ae:28:b5:74:79:46:05:ce:d5:dc:17:d3:00:bd:
         86:8a:86:de:c9:f0:ea:60:ff:a1:1a:12:5a:7f:9f:4f:13:11:
         94:c3:bd:95:a1:f7:32:7b:c5:29:ce:eb:a3:92:0f:d6:1a:cf:
         c0:b5:57:9c:88:10:93:1a:ad:99:1b:c5:06:ce:b6:95:51:8d:
         23:63:75:7e:3f:85:3f:6a:a9:60:52:79:3e:4c:49:6b:9c:6b:
         ce:c2:59:f2:1f:ee:c7:32:22:f8:d0:89:44:12:49:4d:45:6e:
         93:19:f5:59:a0:49:dc:b7:da:f2:8b:b7:46:11:46:47:f0:f2:
         16:db:52:48:8e:95:e9:b0:91:d4:c5:82:fe:de:ab:05:79:4f:
         6d:8c:89:ea:ac:3d:01:c7:43:da:21:f9:bb:f0:7d:43:e2:f0:
         ff:2f:e5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:30 2024 by rpki-client on console-ams.rpki-client.org