Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/323830343a373863303a343030303a3a2f33342d3334203d3e20323731323633.roa
File:                     323830343a373863303a343030303a3a2f33342d3334203d3e20323731323633.roa (raw, json)
Hash identifier:          8k2hdRJXkV2hKn+Kl2RvquViUy1bf0EyIysUJLb8FD0=
Subject key identifier:   E5:41:8F:AC:BE:3A:EF:2A:9F:0A:69:83:53:2A:91:97:9D:97:E4:D4
Certificate issuer:       /CN=698A229B1E11E12DAF0F78DB2769039EE3C78C26
Certificate serial:       5049A4F196113541AC8F07413664730464D9AED9
Authority key identifier: 69:8A:22:9B:1E:11:E1:2D:AF:0F:78:DB:27:69:03:9E:E3:C7:8C:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/698A229B1E11E12DAF0F78DB2769039EE3C78C26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/323830343a373863303a343030303a3a2f33342d3334203d3e20323731323633.roa
Signing time:             Tue 19 Apr 2022 17:23:14 +0000
ROA not before:           Tue 19 Apr 2022 17:18:14 +0000
ROA not after:            Tue 18 Apr 2023 17:23:14 +0000
asID:                     271263
IP address blocks:        2804:78c0:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:49:a4:f1:96:11:35:41:ac:8f:07:41:36:64:73:04:64:d9:ae:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=698A229B1E11E12DAF0F78DB2769039EE3C78C26
        Validity
            Not Before: Apr 19 17:18:14 2022 GMT
            Not After : Apr 18 17:23:14 2023 GMT
        Subject: CN=E5418FACBE3AEF2A9F0A6983532A91979D97E4D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2d:ea:28:f1:4f:74:7d:89:db:db:56:70:d7:
                    b2:6e:5a:e2:4e:ad:d6:ae:71:0b:22:62:e0:d8:bb:
                    8d:1b:21:9c:9a:f6:5c:7c:d7:a4:1d:71:bb:c6:2d:
                    f4:b7:95:f8:a1:d2:b9:03:67:b9:b8:d3:c3:ca:e9:
                    cc:31:be:d4:6e:dd:80:e7:b8:85:2a:7c:ed:5f:c7:
                    34:4e:ca:3d:a6:30:24:45:d4:b5:d1:ae:d6:04:52:
                    cf:71:a4:94:49:ea:9c:f1:60:15:99:5c:29:a3:da:
                    61:54:a6:f4:f1:dc:86:a1:e9:05:1a:99:2d:17:f2:
                    7b:8d:13:ec:f4:34:a7:6b:d9:74:55:6b:d9:03:82:
                    01:a9:31:90:09:d6:aa:12:47:b4:49:94:9d:1b:0d:
                    25:31:a0:b3:87:ad:9c:ff:58:55:43:3d:42:2f:41:
                    bb:fb:50:b2:9d:5c:34:a1:7f:58:53:8c:18:ad:82:
                    a0:b2:c1:fe:50:28:92:ef:8d:dc:7b:3d:a1:b0:20:
                    76:37:b2:af:1a:53:e4:df:5b:83:cb:68:87:9f:40:
                    86:1f:5f:ed:95:60:5c:a2:13:dc:60:2c:d2:aa:51:
                    d4:5c:fe:e1:f7:39:0a:fd:ba:c3:60:ba:f5:fe:55:
                    b5:b2:6c:ac:17:9a:29:df:7c:a1:3c:ef:8e:25:9f:
                    40:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:41:8F:AC:BE:3A:EF:2A:9F:0A:69:83:53:2A:91:97:9D:97:E4:D4
            X509v3 Authority Key Identifier:
                keyid:69:8A:22:9B:1E:11:E1:2D:AF:0F:78:DB:27:69:03:9E:E3:C7:8C:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/698A229B1E11E12DAF0F78DB2769039EE3C78C26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/698A229B1E11E12DAF0F78DB2769039EE3C78C26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/323830343a373863303a343030303a3a2f33342d3334203d3e20323731323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:78c0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         37:e4:7c:a3:8e:13:c7:84:1a:a1:34:dd:bf:6e:b7:e3:a9:28:
         55:7d:c1:d4:f5:4d:3a:c9:71:5c:55:32:6e:22:9f:f7:04:7f:
         17:9a:79:1f:60:86:14:84:81:c1:65:21:d9:44:30:fa:ce:8a:
         ab:6c:31:14:11:00:b1:9c:80:ff:b0:55:e2:de:aa:d7:15:95:
         12:c4:d0:2d:b9:ee:4f:58:8e:d5:a8:43:e6:8b:6e:d5:43:50:
         b7:40:20:29:84:c6:98:5e:5b:7a:ad:a6:2e:86:90:c9:70:83:
         5f:24:31:a5:e1:45:cc:62:0d:66:2d:8e:d4:31:78:2d:36:f9:
         67:a2:6e:c4:e2:5a:2e:32:49:1a:09:ba:9f:47:6d:b8:e1:ab:
         6e:af:7a:e0:ec:02:f1:46:d6:c1:dc:ca:a9:9d:a4:2a:02:70:
         e7:9f:d4:96:ca:98:fe:68:61:36:51:ce:3d:78:1e:5d:81:a7:
         9f:30:8a:32:91:86:3b:fe:c1:5b:97:ab:a9:cd:04:01:d8:4e:
         8a:ba:28:72:88:76:35:63:aa:b1:45:0f:d4:97:29:6e:e5:27:
         cd:86:62:d5:28:e6:4a:31:e0:cc:8d:d6:61:d2:99:2d:96:81:
         b6:ac:00:4c:aa:fa:e3:f9:c3:fc:af:8c:b4:65:91:8a:f3:ee:
         eb:bf:85:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org