Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a343030303a3a2f33342d3334203d3e20323730353434.roa
File:                     323830343a366439633a343030303a3a2f33342d3334203d3e20323730353434.roa (raw, json)
Hash identifier:          ZqKrvhVQCPjq9ZbkI0JXEIdBZ/PCM5wcUjMmi083ty0=
Subject key identifier:   A7:2F:96:B3:44:E7:EE:E4:D3:13:80:17:C8:D7:33:63:40:92:7D:FC
Certificate issuer:       /CN=B224E79ACF8AC68E9C68317AB6507068C8F22F7C
Certificate serial:       11654ADED0C91A8B81A079DB50B2181405523D72
Authority key identifier: B2:24:E7:9A:CF:8A:C6:8E:9C:68:31:7A:B6:50:70:68:C8:F2:2F:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B224E79ACF8AC68E9C68317AB6507068C8F22F7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a343030303a3a2f33342d3334203d3e20323730353434.roa
Signing time:             Mon 30 Oct 2023 12:47:02 +0000
ROA not before:           Mon 30 Oct 2023 12:42:02 +0000
ROA not after:            Mon 28 Oct 2024 12:47:02 +0000
asID:                     270544
IP address blocks:        2804:6d9c:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:65:4a:de:d0:c9:1a:8b:81:a0:79:db:50:b2:18:14:05:52:3d:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B224E79ACF8AC68E9C68317AB6507068C8F22F7C
        Validity
            Not Before: Oct 30 12:42:02 2023 GMT
            Not After : Oct 28 12:47:02 2024 GMT
        Subject: CN=A72F96B344E7EEE4D3138017C8D7336340927DFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:32:91:96:95:64:4c:ac:7f:2b:4d:79:d1:6a:
                    aa:53:eb:f1:c5:6a:d2:96:b0:d2:ce:22:12:90:58:
                    b8:2e:33:09:9b:58:c8:4c:df:70:96:d9:5d:47:67:
                    c3:f0:0d:58:e4:da:db:5f:36:cf:05:74:72:e8:80:
                    5a:7b:06:a2:32:52:b5:58:cd:45:3f:9f:b7:62:43:
                    a3:e2:cf:27:b0:eb:0d:58:36:f1:be:4f:b7:73:70:
                    f2:a5:c5:e1:60:b3:4b:5e:52:a6:e1:f2:5d:47:43:
                    19:38:a9:1a:bb:b7:11:e7:de:f1:11:e6:4c:b6:61:
                    02:59:43:62:8d:bd:8a:6f:c8:fa:b7:18:74:db:76:
                    03:8b:d1:38:a5:cb:33:84:5f:da:d7:4b:44:21:02:
                    f9:bc:78:0d:6b:f9:a6:e3:b8:c4:df:ee:12:15:b6:
                    49:b3:73:77:b9:d8:83:74:d0:61:96:a3:d8:70:fe:
                    bb:c9:72:4d:ee:40:a8:a7:82:e8:b2:23:73:dc:ce:
                    3f:35:a7:e5:a2:53:14:78:6e:b6:25:0b:34:ce:e8:
                    e1:8e:f4:ee:1b:22:1b:1c:0f:e4:80:0e:22:b7:33:
                    33:79:71:40:47:b0:23:e8:55:5b:a2:29:29:e4:ba:
                    6c:36:14:f2:45:b6:b1:d4:40:49:cd:3c:c2:f5:d2:
                    52:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:2F:96:B3:44:E7:EE:E4:D3:13:80:17:C8:D7:33:63:40:92:7D:FC
            X509v3 Authority Key Identifier:
                keyid:B2:24:E7:9A:CF:8A:C6:8E:9C:68:31:7A:B6:50:70:68:C8:F2:2F:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/B224E79ACF8AC68E9C68317AB6507068C8F22F7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B224E79ACF8AC68E9C68317AB6507068C8F22F7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a343030303a3a2f33342d3334203d3e20323730353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6d9c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         2d:99:f6:3f:e1:54:f6:e8:4b:a1:8e:76:4f:a4:b9:87:85:37:
         db:94:1c:7f:d9:a0:38:52:ef:55:cc:59:9b:d1:2f:85:89:6f:
         63:f4:3d:51:94:a2:26:41:62:9a:bd:85:a5:ce:17:0f:e4:9a:
         e5:d9:f0:a7:49:76:b0:27:65:4b:80:55:08:ec:67:e7:88:1a:
         ff:4e:eb:da:96:46:ce:28:b8:23:60:fe:9a:e4:6f:a8:13:97:
         9e:37:d0:99:8e:65:e1:06:f3:c3:11:39:f0:5e:46:b6:6f:49:
         82:1e:db:05:e4:ce:93:2c:d8:20:02:46:78:c6:db:92:c4:5d:
         4f:d7:6d:75:39:8f:e3:b1:d0:3e:30:7f:6a:52:40:23:e3:f5:
         89:c2:3b:45:db:b7:6b:de:72:8d:5c:01:ce:b4:7b:31:6e:1f:
         db:e0:e9:b8:cd:20:aa:9d:ea:98:fd:e0:21:3b:b5:fe:a7:60:
         db:cb:7a:1c:88:63:69:8e:12:34:d9:48:54:15:6a:be:89:47:
         95:f0:cd:d0:47:68:6f:3e:11:fa:e3:b6:ea:11:ea:5b:59:c9:
         5c:ff:86:fe:c6:90:b4:0e:5e:61:c1:bd:8f:2c:62:27:60:a4:
         cc:f6:e4:43:d3:a2:5e:d3:9f:71:f4:bf:df:76:1a:da:8a:05:
         0c:19:79:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:04 2024 by rpki-client on console-fra.rpki-client.org