Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2jvikW8D1SQXvBojaq8x7yicXbkwXJYxQWge9Do16GzR/0/323830343a316138383a3a2f33322d3335203d3e203631383634.roa
File:                     323830343a316138383a3a2f33322d3335203d3e203631383634.roa (raw, json)
Hash identifier:          VwA4B0Rf6ZAc6ikHyx7c9pcygjafTJ+dRz0I9PRgdDI=
Subject key identifier:   54:61:74:32:4C:67:58:08:B8:BA:F1:77:4B:F2:5F:ED:79:91:8F:5D
Certificate issuer:       /CN=969BBA3C16CDEED18D26A017181A738070D48421
Certificate serial:       79255340BC28F4EAC8B298772809669E5790D210
Authority key identifier: 96:9B:BA:3C:16:CD:EE:D1:8D:26:A0:17:18:1A:73:80:70:D4:84:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/969BBA3C16CDEED18D26A017181A738070D48421.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2jvikW8D1SQXvBojaq8x7yicXbkwXJYxQWge9Do16GzR/0/323830343a316138383a3a2f33322d3335203d3e203631383634.roa
Signing time:             Tue 14 Dec 2021 13:55:34 +0000
ROA not before:           Tue 14 Dec 2021 13:50:34 +0000
ROA not after:            Tue 13 Dec 2022 13:55:34 +0000
asID:                     61864
IP address blocks:        2804:1a88::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:25:53:40:bc:28:f4:ea:c8:b2:98:77:28:09:66:9e:57:90:d2:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=969BBA3C16CDEED18D26A017181A738070D48421
        Validity
            Not Before: Dec 14 13:50:34 2021 GMT
            Not After : Dec 13 13:55:34 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bb:e0:69:ed:da:e4:30:c1:67:15:72:fb:30:
                    7d:cc:42:e3:d0:42:c5:fc:b7:03:b4:a8:41:e6:25:
                    3f:94:29:44:53:de:3c:4d:5d:81:86:2a:37:c4:54:
                    c9:61:65:d5:66:82:6c:e1:17:04:42:52:60:c8:a2:
                    2e:06:8e:81:53:e0:d7:e6:11:79:cd:48:ec:a2:57:
                    1e:f4:2f:a9:cc:15:f0:58:44:34:6f:d0:64:ec:6c:
                    6d:34:1a:f9:8b:91:d4:15:77:c7:02:1d:1d:ff:06:
                    40:40:c1:85:48:d8:5f:9f:03:25:d1:0f:f4:48:73:
                    4b:19:1a:c0:5b:2c:8e:2b:ec:f5:05:8a:b1:77:da:
                    2b:d7:12:18:f0:c6:65:a4:ad:33:20:69:36:74:ab:
                    50:a8:d0:92:ab:a5:50:f5:fa:61:98:95:5e:93:0a:
                    60:6a:e1:7f:c1:c7:3f:ab:60:95:d5:33:c0:df:48:
                    c8:dd:d3:38:3e:3e:a8:0f:37:99:7f:6a:ff:08:31:
                    fb:71:56:f2:53:88:2d:a1:46:d6:75:30:1d:0f:5d:
                    0d:0f:ce:2f:b6:1d:e3:33:38:5b:8f:10:8e:c3:ed:
                    44:97:05:1c:df:dc:02:90:cc:0b:1c:e4:da:d6:2b:
                    6b:37:c2:7f:a6:64:7d:41:d3:8b:2a:8c:8c:b4:42:
                    33:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:61:74:32:4C:67:58:08:B8:BA:F1:77:4B:F2:5F:ED:79:91:8F:5D
            X509v3 Authority Key Identifier:
                keyid:96:9B:BA:3C:16:CD:EE:D1:8D:26:A0:17:18:1A:73:80:70:D4:84:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2jvikW8D1SQXvBojaq8x7yicXbkwXJYxQWge9Do16GzR/0/969BBA3C16CDEED18D26A017181A738070D48421.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/969BBA3C16CDEED18D26A017181A738070D48421.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2jvikW8D1SQXvBojaq8x7yicXbkwXJYxQWge9Do16GzR/0/323830343a316138383a3a2f33322d3335203d3e203631383634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a88::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:25:0b:56:ec:26:8b:f6:a1:0a:3f:38:5a:f6:29:95:21:c0:
         b9:ff:03:5d:8a:b6:81:90:6f:2c:1f:12:d1:45:61:ad:5d:9f:
         48:28:f7:bf:a9:5a:6a:0a:14:9b:58:46:ab:f3:5c:e3:e3:5e:
         31:4e:e2:34:53:91:32:e2:78:c3:a9:9c:fa:e4:4f:12:2d:76:
         78:12:8b:44:b4:2f:a3:02:90:9a:bf:e4:8f:a8:e3:10:dc:0c:
         81:c7:c1:fe:c7:7b:40:47:e8:96:39:c2:b7:a0:2c:86:f2:49:
         22:3d:11:dd:1f:ce:1b:a0:12:ba:31:2a:c6:df:3a:c9:52:b5:
         b7:08:1f:71:e8:46:ae:6c:69:ed:61:5e:8d:31:4b:ff:f6:b3:
         38:57:73:39:55:c3:c2:5a:99:24:d7:7d:1a:6a:07:6d:5b:7f:
         25:a3:31:cc:34:0d:44:a3:a1:2f:23:a4:af:dd:9b:2c:3e:92:
         fd:24:8e:5a:eb:da:37:0c:32:67:82:b2:c1:8a:7b:cc:f4:d3:
         38:fe:77:ce:69:e8:2f:44:62:d7:9a:3a:77:01:c8:d0:68:c0:
         9c:8d:70:d0:bd:9e:91:15:2b:46:14:d6:99:42:ce:2f:f6:0e:
         42:25:49:7d:87:57:16:4d:18:b7:36:39:c8:a3:4d:0e:7b:7b:
         27:90:5d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org