Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/323830343a376537383a3a2f33322d3332203d3e20323731363236.roa
File:                     323830343a376537383a3a2f33322d3332203d3e20323731363236.roa (raw, json)
Hash identifier:          v0sXyLyrXOPFnnOl6DJa8BdQtBeVoQZq3Z/jF5WlN2s=
Subject key identifier:   69:A1:FD:35:57:2E:D8:C8:D5:34:2B:0D:A1:72:BD:87:DF:5C:D0:4F
Certificate issuer:       /CN=6C68F4E439F49730F3B62FC2F240863A8AB2A820
Certificate serial:       03E040C7EE2930CB64E585E02DDA6B127F7434A9
Authority key identifier: 6C:68:F4:E4:39:F4:97:30:F3:B6:2F:C2:F2:40:86:3A:8A:B2:A8:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C68F4E439F49730F3B62FC2F240863A8AB2A820.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/323830343a376537383a3a2f33322d3332203d3e20323731363236.roa
Signing time:             Tue 04 Jul 2023 16:12:36 +0000
ROA not before:           Tue 04 Jul 2023 16:07:36 +0000
ROA not after:            Tue 02 Jul 2024 16:12:36 +0000
asID:                     271626
IP address blocks:        2804:7e78::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:e0:40:c7:ee:29:30:cb:64:e5:85:e0:2d:da:6b:12:7f:74:34:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C68F4E439F49730F3B62FC2F240863A8AB2A820
        Validity
            Not Before: Jul  4 16:07:36 2023 GMT
            Not After : Jul  2 16:12:36 2024 GMT
        Subject: CN=69A1FD35572ED8C8D5342B0DA172BD87DF5CD04F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:38:09:59:91:d2:a5:1c:50:eb:0d:ec:fb:1c:
                    9b:ff:55:02:79:0f:25:b5:9d:21:93:ba:31:65:e7:
                    3a:15:b5:63:45:a0:10:fa:f9:66:f7:91:10:42:6e:
                    3c:35:2a:82:b4:66:0b:8a:02:12:6a:bc:21:83:90:
                    b5:42:a4:30:aa:69:c4:48:60:5c:6d:40:bd:05:bd:
                    cc:1d:1a:fd:66:ce:ec:90:2d:ab:ad:21:f8:9a:5e:
                    70:97:7c:24:0c:47:1d:f5:b7:db:c1:ee:9b:ea:e7:
                    2d:3a:54:f9:67:42:1c:3d:13:13:a2:dc:50:1a:9d:
                    19:65:3d:32:70:7f:95:fd:3b:79:35:83:06:9d:87:
                    d6:4a:4e:d2:7c:74:55:af:5b:af:60:1e:b0:e3:10:
                    ec:5f:24:6a:0c:aa:51:19:f5:f0:fe:d9:0d:a8:12:
                    5c:52:e9:85:d1:8b:8f:03:9f:d7:e2:bd:13:ce:0c:
                    91:21:c2:04:b8:08:c3:9b:51:e8:98:c7:f4:25:51:
                    08:bb:fc:a2:16:2f:8b:a5:f1:5c:ef:e8:09:05:85:
                    c0:00:3e:0c:b3:42:a6:49:dd:f6:3c:8c:80:97:8c:
                    b8:2f:67:f4:1b:90:86:63:bf:a7:98:26:6e:88:78:
                    b8:21:80:1a:0c:6a:0d:11:85:68:5c:f0:ee:04:d3:
                    ca:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A1:FD:35:57:2E:D8:C8:D5:34:2B:0D:A1:72:BD:87:DF:5C:D0:4F
            X509v3 Authority Key Identifier:
                keyid:6C:68:F4:E4:39:F4:97:30:F3:B6:2F:C2:F2:40:86:3A:8A:B2:A8:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/6C68F4E439F49730F3B62FC2F240863A8AB2A820.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C68F4E439F49730F3B62FC2F240863A8AB2A820.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/323830343a376537383a3a2f33322d3332203d3e20323731363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e78::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:f0:f1:cb:eb:c4:25:79:e2:d3:34:6e:54:3c:21:1b:62:01:
         07:0c:2f:02:69:72:71:9a:bf:0d:9a:50:38:ad:63:81:ed:dc:
         c3:41:d0:69:8e:90:6f:a4:c1:35:50:cf:fd:0a:c1:e4:78:2d:
         9d:f8:64:62:a6:44:90:d2:f6:58:92:66:3a:c5:44:47:57:96:
         69:89:23:2c:6e:1d:9c:b4:21:f7:e7:f9:99:84:b8:10:38:28:
         0a:c8:1d:c4:ce:f9:6e:18:bd:ad:fc:c4:51:72:77:25:4a:05:
         cd:8c:2b:3e:4e:41:bb:45:17:09:73:a7:88:79:9c:69:a4:ad:
         03:4d:57:39:bc:17:e3:62:71:a9:ae:d2:82:8a:b7:63:af:37:
         39:5d:43:7b:ec:9a:0a:b0:b0:4a:63:1b:a8:df:73:7d:8a:d1:
         56:4d:be:89:c7:6e:8e:67:7b:75:77:5a:1e:96:3e:06:0c:e9:
         3b:e5:1b:69:4c:27:b4:31:3e:42:1e:46:52:dd:25:a2:47:03:
         d8:22:bd:f9:c2:d3:7c:dc:c9:37:96:b7:db:a2:3e:1f:b0:57:
         71:24:c6:f6:5f:68:9d:09:e2:72:06:95:ad:aa:aa:15:a1:ae:
         7b:60:4b:9b:b3:0a:98:d7:61:88:0c:bc:60:e0:d6:e0:6c:0a:
         61:4a:dd:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org