Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/323830343a373863303a633030303a3a2f33342d3334203d3e20323731323633.roa
File:                     323830343a373863303a633030303a3a2f33342d3334203d3e20323731323633.roa (raw, json)
Hash identifier:          qRy0B1XR8FEWNzURjAPoiEpNRbkrXqCvv10Bm/uqUmA=
Subject key identifier:   BA:B2:F4:96:49:4C:94:A5:37:5E:70:4D:0A:A9:B3:20:39:0E:9D:E3
Certificate issuer:       /CN=698A229B1E11E12DAF0F78DB2769039EE3C78C26
Certificate serial:       7214AE901AF79A3F50CF2F28CB87C49ECBCC2B9A
Authority key identifier: 69:8A:22:9B:1E:11:E1:2D:AF:0F:78:DB:27:69:03:9E:E3:C7:8C:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/698A229B1E11E12DAF0F78DB2769039EE3C78C26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/323830343a373863303a633030303a3a2f33342d3334203d3e20323731323633.roa
Signing time:             Tue 19 Apr 2022 17:23:14 +0000
ROA not before:           Tue 19 Apr 2022 17:18:14 +0000
ROA not after:            Tue 18 Apr 2023 17:23:14 +0000
asID:                     271263
IP address blocks:        2804:78c0:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:14:ae:90:1a:f7:9a:3f:50:cf:2f:28:cb:87:c4:9e:cb:cc:2b:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=698A229B1E11E12DAF0F78DB2769039EE3C78C26
        Validity
            Not Before: Apr 19 17:18:14 2022 GMT
            Not After : Apr 18 17:23:14 2023 GMT
        Subject: CN=BAB2F496494C94A5375E704D0AA9B320390E9DE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:57:1f:73:3f:02:6a:e3:ba:cf:ca:83:78:16:
                    34:ee:75:e8:26:fd:11:38:d5:f8:3b:cf:a2:9c:61:
                    5c:8c:a9:7d:44:6f:c1:ca:20:6c:be:21:18:66:bc:
                    b1:ee:e9:75:16:0c:78:ac:19:ac:16:ea:ee:2c:59:
                    06:c3:69:bc:9a:80:8f:ed:df:64:ea:48:66:56:b1:
                    a5:0b:eb:04:a2:38:f6:68:11:ea:5d:55:59:ad:87:
                    b1:1d:cb:ef:6f:0c:fd:5a:0f:38:ed:1c:6b:c2:3f:
                    97:37:5a:fb:d0:7d:37:6a:cb:26:13:81:66:a2:54:
                    10:1a:60:b1:47:60:6e:af:ee:fe:d2:db:bd:82:f4:
                    6b:09:96:73:e3:0c:de:4d:2d:4b:4b:3a:be:f0:42:
                    8e:67:fc:99:4e:fa:64:01:8b:77:f8:4c:ef:40:57:
                    80:ed:0f:1c:bb:80:3f:39:4d:9e:a4:a7:03:6b:7c:
                    3c:eb:c4:2a:4d:91:07:98:63:5e:82:8c:f1:a9:b0:
                    75:b3:42:11:0e:98:c0:cf:74:8e:f3:89:7e:e0:72:
                    4a:62:93:96:a5:02:fb:b4:3c:d4:f2:ee:9d:16:0b:
                    21:5f:eb:9b:f0:e4:ab:53:b0:3d:28:36:79:8b:dc:
                    e3:e9:6d:48:42:33:c4:97:41:1b:74:55:b4:ce:dd:
                    68:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B2:F4:96:49:4C:94:A5:37:5E:70:4D:0A:A9:B3:20:39:0E:9D:E3
            X509v3 Authority Key Identifier:
                keyid:69:8A:22:9B:1E:11:E1:2D:AF:0F:78:DB:27:69:03:9E:E3:C7:8C:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/698A229B1E11E12DAF0F78DB2769039EE3C78C26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/698A229B1E11E12DAF0F78DB2769039EE3C78C26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/323830343a373863303a633030303a3a2f33342d3334203d3e20323731323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:78c0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1c:34:b7:f1:5a:18:35:24:47:7b:22:a3:e0:43:61:0a:4f:9c:
         65:32:f1:e1:af:18:32:41:1b:71:38:6d:68:96:fa:12:c5:bb:
         f8:1f:b7:2c:02:90:71:91:0c:54:1b:ae:d2:8b:94:a7:63:bc:
         8e:2c:c8:2d:03:3e:08:81:aa:e8:b0:8e:8f:ea:8f:64:c5:0c:
         a8:48:73:2d:1a:d9:d4:c5:6f:74:85:85:d7:2e:34:a8:d0:fc:
         ce:0b:53:eb:8b:54:bf:b4:29:ca:67:3f:ce:45:4c:42:fb:48:
         fe:6e:9c:16:16:c5:8a:9d:5a:9c:df:ec:f6:c9:33:da:62:57:
         9b:c2:55:47:f0:89:7c:c3:55:61:dd:a8:f3:46:c5:76:6e:bf:
         ba:ea:1e:ba:ae:50:ab:2e:85:32:4c:e7:67:b0:12:52:6b:b3:
         e2:43:57:5b:37:cb:08:97:bf:26:1b:35:17:8b:3a:78:77:66:
         a5:de:35:3d:e3:a5:8e:74:f8:42:dd:4f:74:c8:92:bc:de:78:
         4a:e3:07:2d:80:8c:b0:1f:7e:88:b1:66:4a:38:94:e5:12:9b:
         8f:e9:89:1b:63:61:be:8d:5d:d7:38:3d:41:00:a5:df:b5:a2:
         46:87:fc:d7:a1:13:b3:42:ed:f9:51:6e:e9:84:25:2a:d3:ad:
         03:8e:7c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org