Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/323830343a333132343a343130303a3a2f34302d3430203d3e20323634393936.roa
File:                     323830343a333132343a343130303a3a2f34302d3430203d3e20323634393936.roa (raw, json)
Hash identifier:          Z+KJZhy9cFyNd2dJ+EL0x4URp77dNu8mnC+D+Cpsz+8=
Subject key identifier:   86:78:70:57:23:B0:B8:8B:4F:7A:5E:56:C6:AF:35:26:28:63:D8:E0
Certificate issuer:       /CN=9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E
Certificate serial:       514F9A6D84B22E2D3080B54E74860DA46759BCC2
Authority key identifier: 9A:7D:F1:61:7E:6D:2E:A5:D5:01:7B:A0:00:CA:4D:1D:D6:D6:2F:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/323830343a333132343a343130303a3a2f34302d3430203d3e20323634393936.roa
Signing time:             Fri 23 Jun 2023 20:06:50 +0000
ROA not before:           Fri 23 Jun 2023 20:01:50 +0000
ROA not after:            Fri 21 Jun 2024 20:06:50 +0000
asID:                     264996
IP address blocks:        2804:3124:4100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:4f:9a:6d:84:b2:2e:2d:30:80:b5:4e:74:86:0d:a4:67:59:bc:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E
        Validity
            Not Before: Jun 23 20:01:50 2023 GMT
            Not After : Jun 21 20:06:50 2024 GMT
        Subject: CN=8678705723B0B88B4F7A5E56C6AF35262863D8E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b4:68:8a:af:aa:78:c1:f0:1f:6a:8f:17:c6:
                    6f:ee:52:b2:43:91:07:2d:49:52:b6:c2:b0:9d:81:
                    12:94:26:85:08:d7:8c:66:81:52:da:e6:3c:88:16:
                    1b:c9:7c:a7:2e:4a:ca:23:f2:3c:32:35:4f:4e:7d:
                    5e:85:a1:1b:30:19:83:ea:57:77:32:ef:4f:11:c5:
                    1e:3a:d4:53:3d:aa:24:3c:ef:93:68:f3:01:3b:0c:
                    2d:b7:c3:42:c9:ed:a0:1e:b6:a3:8a:38:e0:ed:1d:
                    88:13:b5:80:c6:f9:e9:84:31:00:12:92:2e:55:48:
                    e2:55:79:6f:ea:28:bf:80:36:d9:7f:bb:44:da:f4:
                    7e:14:f0:e3:f5:4a:c0:8e:a4:58:4f:58:1d:dd:01:
                    0d:e5:47:cc:3f:5b:9c:a7:4e:1a:e2:01:ff:cd:8f:
                    b8:8c:31:0c:1a:76:b6:62:ca:15:a4:12:b9:d4:06:
                    fb:87:70:3f:ff:e9:4d:b0:45:e3:6c:dd:b4:33:49:
                    48:f4:94:e4:66:b7:df:8c:cd:2e:d5:36:e2:38:53:
                    9b:2a:84:3d:c5:2d:fa:75:db:e8:58:3b:44:ab:d1:
                    75:b7:26:c5:9f:74:11:ce:81:78:45:80:5b:66:35:
                    d5:f3:65:93:d8:1f:b4:65:4f:e7:d4:aa:62:57:9a:
                    f5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:78:70:57:23:B0:B8:8B:4F:7A:5E:56:C6:AF:35:26:28:63:D8:E0
            X509v3 Authority Key Identifier:
                keyid:9A:7D:F1:61:7E:6D:2E:A5:D5:01:7B:A0:00:CA:4D:1D:D6:D6:2F:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/323830343a333132343a343130303a3a2f34302d3430203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3124:4100::/40

    Signature Algorithm: sha256WithRSAEncryption
         10:82:c1:14:d6:19:1a:9d:81:20:60:82:23:63:1f:0d:a1:8e:
         12:eb:2e:65:76:e8:7d:53:34:7c:43:b3:81:fe:75:51:fc:1b:
         80:e9:36:c2:df:69:57:53:e1:17:17:04:bc:4a:4a:5f:2e:e9:
         0f:d3:f4:eb:ea:91:c4:9f:71:a4:5a:f0:2b:03:82:91:31:b2:
         14:87:bf:01:d2:4d:a3:40:27:6e:ef:57:ec:3e:75:41:2d:26:
         0a:03:c6:99:fe:6b:9d:aa:3a:28:13:94:15:89:46:ad:e7:2b:
         8b:95:37:a7:16:fb:be:10:c7:41:ca:94:bb:58:69:10:1a:b0:
         11:6b:77:73:0f:e5:31:d8:94:b6:51:2b:95:4d:ae:d6:be:8b:
         41:a4:c9:c3:1d:25:49:a8:f3:5d:5f:9d:79:db:33:3a:fb:fb:
         3a:9e:9f:0b:90:00:11:ee:0e:3a:a8:66:e3:9e:e0:13:9e:2e:
         48:59:9d:11:f0:c2:8b:c1:57:d3:e5:3d:0e:86:cc:b8:25:0e:
         05:e9:d2:8c:82:3a:7a:87:a3:86:e0:c5:0d:87:b3:89:5e:06:
         1e:72:2c:4e:ae:fe:4d:03:30:44:85:8e:dd:96:60:bb:eb:ed:
         ea:3b:33:43:07:0e:0e:05:7b:ee:63:a6:23:07:8e:9e:c3:ea:
         e5:a2:c5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org