Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/323830343a336564343a3a2f33332d3333203d3e20323636363233.roa
File:                     323830343a336564343a3a2f33332d3333203d3e20323636363233.roa (raw, json)
Hash identifier:          qvHmDr2KU9eisdTZntPId0wfVKYced7m8fL5JA3RLUc=
Subject key identifier:   C7:9D:0E:C4:D3:54:01:A4:3B:80:FF:F1:46:27:33:51:01:47:AC:CE
Certificate issuer:       /CN=3D4374364DEF0A3AD31C3F4544E415B9EC6C7083
Certificate serial:       53740FF11DFCF971AA36B0A3BC9A60F400E1117D
Authority key identifier: 3D:43:74:36:4D:EF:0A:3A:D3:1C:3F:45:44:E4:15:B9:EC:6C:70:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D4374364DEF0A3AD31C3F4544E415B9EC6C7083.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/323830343a336564343a3a2f33332d3333203d3e20323636363233.roa
Signing time:             Sat 05 Aug 2023 11:00:00 +0000
ROA not before:           Sat 05 Aug 2023 10:55:00 +0000
ROA not after:            Sat 03 Aug 2024 11:00:00 +0000
asID:                     266623
IP address blocks:        2804:3ed4::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:74:0f:f1:1d:fc:f9:71:aa:36:b0:a3:bc:9a:60:f4:00:e1:11:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D4374364DEF0A3AD31C3F4544E415B9EC6C7083
        Validity
            Not Before: Aug  5 10:55:00 2023 GMT
            Not After : Aug  3 11:00:00 2024 GMT
        Subject: CN=C79D0EC4D35401A43B80FFF1462733510147ACCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6b:2b:ea:72:50:ce:e7:54:34:1e:da:42:d7:
                    86:99:e4:d8:ec:e1:0b:3e:63:76:a5:aa:bc:15:f4:
                    df:c3:03:f1:e3:f1:11:73:2c:97:0f:cc:38:bf:29:
                    d2:50:1c:45:03:c0:19:0c:9b:ed:2b:62:83:07:c8:
                    a4:e3:f3:73:36:4c:93:4e:e3:aa:67:a3:60:7b:29:
                    00:de:e3:d1:35:a6:ea:47:e7:db:7a:03:00:34:54:
                    15:cd:f1:14:e2:00:b4:73:d5:26:86:ee:ca:0e:07:
                    ac:5d:ac:5f:d1:fe:a8:ce:a6:d5:28:f4:90:47:26:
                    fc:f9:52:a2:c9:ce:d5:11:90:6a:7a:0c:db:02:0f:
                    da:b9:26:7e:78:2f:46:34:a0:c8:3f:a0:4a:56:88:
                    15:15:b6:81:d7:55:bd:72:2c:33:12:08:e6:d3:f6:
                    7c:e7:b1:a4:25:dc:f7:f9:9f:42:15:52:2c:63:c3:
                    17:10:d0:49:7c:fb:86:92:58:07:52:66:4e:f4:f8:
                    dc:1c:b6:65:44:bc:8d:96:17:5f:f0:4c:ba:27:41:
                    12:74:7b:0d:38:3b:52:21:d2:a6:08:49:6d:67:5f:
                    a2:ea:be:94:72:bb:2a:6d:d3:2a:cf:8c:85:56:bb:
                    95:5f:7d:b4:95:0f:91:8b:3b:a4:77:d6:65:d3:dc:
                    b9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:9D:0E:C4:D3:54:01:A4:3B:80:FF:F1:46:27:33:51:01:47:AC:CE
            X509v3 Authority Key Identifier:
                keyid:3D:43:74:36:4D:EF:0A:3A:D3:1C:3F:45:44:E4:15:B9:EC:6C:70:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/3D4374364DEF0A3AD31C3F4544E415B9EC6C7083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D4374364DEF0A3AD31C3F4544E415B9EC6C7083.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/323830343a336564343a3a2f33332d3333203d3e20323636363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ed4::/33

    Signature Algorithm: sha256WithRSAEncryption
         11:00:c8:ce:d1:14:79:2b:35:6a:20:f7:80:d8:a7:53:cc:ba:
         e6:53:66:e7:fb:21:56:b7:f6:98:9b:50:f4:c9:8f:80:d8:38:
         29:44:ed:f6:93:d0:94:2b:d3:ab:82:9b:be:9f:05:ec:72:1f:
         57:ca:ce:e5:50:e0:85:d8:86:10:da:be:3c:ce:2d:d4:8e:5c:
         f2:33:d7:54:e1:a8:d3:01:ee:e8:12:42:d4:2e:84:b7:68:40:
         7c:3d:22:4b:23:d6:7f:5d:29:46:3e:03:50:9b:3f:22:8f:d9:
         b8:7f:32:e6:aa:64:64:26:3c:ae:c6:26:95:eb:56:eb:49:62:
         cb:8a:6b:c2:4e:50:59:06:f8:35:ba:d4:b3:bb:c3:0a:08:ed:
         77:8e:37:89:bd:b0:42:bf:ac:d7:8d:df:e5:ba:20:69:27:36:
         69:40:e6:71:c4:0f:97:05:92:ce:08:f7:08:8c:02:08:2d:c4:
         3d:8f:48:d3:7a:ee:73:49:ab:b0:cf:b8:1c:46:b6:d3:92:58:
         16:7f:26:53:fe:62:d9:79:39:15:78:68:67:5e:30:d8:f6:6f:
         ed:50:49:17:60:78:5f:5f:83:79:f0:54:86:c3:ab:03:d9:1d:
         f6:f4:50:56:34:df:25:7c:73:de:0d:23:f0:ee:b6:46:8b:7d:
         6a:30:a8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:01 2024 by rpki-client on console.sobornost.net