Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/323830343a373934343a3130303a3a2f34302d3430203d3e20323731323935.roa
File:                     323830343a373934343a3130303a3a2f34302d3430203d3e20323731323935.roa (raw, json)
Hash identifier:          kpjR8ERaUhDpbUX/bYqGBxvOwXyUP1gG4qLKOd24VH4=
Subject key identifier:   7A:3A:22:61:41:36:A6:04:D0:3C:FD:56:DE:82:42:BB:F1:39:E1:45
Certificate issuer:       /CN=6BB28979534152D56CDB8941822004B21C044476
Certificate serial:       3022E041EFC16FEC3D937718069DC54DA168D48D
Authority key identifier: 6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/323830343a373934343a3130303a3a2f34302d3430203d3e20323731323935.roa
Signing time:             Sun 19 Mar 2023 13:28:18 +0000
ROA not before:           Sun 19 Mar 2023 13:23:18 +0000
ROA not after:            Sun 17 Mar 2024 13:28:18 +0000
asID:                     271295
IP address blocks:        2804:7944:100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:22:e0:41:ef:c1:6f:ec:3d:93:77:18:06:9d:c5:4d:a1:68:d4:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BB28979534152D56CDB8941822004B21C044476
        Validity
            Not Before: Mar 19 13:23:18 2023 GMT
            Not After : Mar 17 13:28:18 2024 GMT
        Subject: CN=7A3A22614136A604D03CFD56DE8242BBF139E145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:82:69:ea:32:14:fd:75:06:e4:c4:89:74:c2:
                    77:e1:58:34:d6:2b:07:31:15:7b:97:96:46:44:e4:
                    fd:50:c8:01:a8:ef:dc:18:d0:29:ec:59:de:18:05:
                    46:8a:b1:91:bf:d0:2d:dd:42:65:49:dd:74:d0:42:
                    e7:38:9c:dd:0c:f3:9c:14:bf:47:41:ce:9b:1c:d2:
                    f8:78:43:13:50:0c:fd:20:7f:7c:89:b9:43:c4:df:
                    e8:d5:03:71:f8:f7:ad:d4:e8:98:cb:ad:a8:65:46:
                    96:1b:ef:0f:ee:91:07:b8:cf:be:60:da:f3:96:9b:
                    96:ac:04:71:ad:13:27:c9:2c:9c:27:f3:94:30:a8:
                    cb:b2:2b:4d:ce:a0:e8:4b:8c:97:5a:aa:79:8f:2b:
                    cc:fa:2d:0d:02:91:14:a8:63:99:a2:00:91:f3:7c:
                    44:f4:14:35:e2:00:99:4c:c0:36:59:1a:c0:74:a0:
                    64:3d:61:b4:10:8e:30:a5:ce:ef:eb:fc:ea:c7:6a:
                    49:04:08:0e:41:96:98:63:52:34:cd:8c:d7:f2:d2:
                    93:e9:1c:42:42:ff:80:95:ed:45:d1:7a:14:7f:ed:
                    82:49:64:00:17:7d:2a:af:72:99:11:36:f9:cf:30:
                    27:02:3a:93:83:47:7c:6f:df:a0:f0:e2:bd:23:37:
                    cc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3A:22:61:41:36:A6:04:D0:3C:FD:56:DE:82:42:BB:F1:39:E1:45
            X509v3 Authority Key Identifier:
                keyid:6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/6BB28979534152D56CDB8941822004B21C044476.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/323830343a373934343a3130303a3a2f34302d3430203d3e20323731323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7944:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         5c:af:d8:eb:29:2b:35:9a:6c:33:cf:5b:0a:d3:38:ca:1f:4f:
         86:35:a6:6e:bb:b7:8e:a8:c8:a1:de:6d:22:e6:da:2b:d7:3c:
         f4:92:8a:75:0f:f9:2c:b7:b7:f3:e7:4a:b9:f4:52:b7:69:66:
         7b:77:7a:6c:a3:a8:21:e2:bb:90:cd:80:0d:90:0f:09:c3:b7:
         5a:41:fa:ac:9a:76:6b:9c:65:42:60:6b:f6:89:fc:8a:2b:67:
         7e:33:3a:0a:5b:d3:4d:56:8e:7d:bd:40:f4:4c:d5:b3:af:54:
         55:7e:02:97:83:08:8a:3e:b3:84:c1:9f:c7:ec:cb:40:2c:05:
         43:26:e2:0c:17:a4:d5:ee:00:c2:22:ac:7c:6b:63:db:2f:2b:
         1b:96:ff:1d:df:f2:06:2c:19:7d:9e:81:c0:4f:9b:96:9b:b9:
         78:16:e0:11:b5:49:10:36:ca:2c:08:06:72:ad:dd:56:05:1d:
         6f:f3:b3:97:09:e0:dd:5f:84:eb:bf:bb:f0:71:01:4c:ce:10:
         1e:68:6e:e5:ee:8a:b4:dc:e9:dc:72:2b:04:01:20:f7:89:c3:
         0a:75:66:b6:af:7f:0e:d3:aa:e0:d8:f3:c8:0d:1f:48:9b:60:
         86:64:91:74:80:ae:5b:ad:46:27:27:81:20:dc:bf:b3:d6:47:
         8c:c0:b5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org