Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a3a2f33332d3333203d3e20323637303237.roa
File:                     323830343a343730383a3a2f33332d3333203d3e20323637303237.roa (raw, json)
Hash identifier:          noApxU6UW3wuVBzD3AbGcRTjk4to2ETGmbbQnQXUypU=
Subject key identifier:   E7:7F:BC:7D:D1:4D:85:4B:1F:02:FC:5F:EA:D3:5A:01:7F:A0:5F:13
Certificate issuer:       /CN=B776754A2C8B100218B061AA79BE9186F191500D
Certificate serial:       6B7974A1BB85890D0B732BCD90F650CBDA66AD70
Authority key identifier: B7:76:75:4A:2C:8B:10:02:18:B0:61:AA:79:BE:91:86:F1:91:50:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B776754A2C8B100218B061AA79BE9186F191500D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a3a2f33332d3333203d3e20323637303237.roa
Signing time:             Sat 11 Nov 2023 20:59:42 +0000
ROA not before:           Sat 11 Nov 2023 20:54:42 +0000
ROA not after:            Sat 09 Nov 2024 20:59:42 +0000
asID:                     267027
IP address blocks:        2804:4708::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:79:74:a1:bb:85:89:0d:0b:73:2b:cd:90:f6:50:cb:da:66:ad:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B776754A2C8B100218B061AA79BE9186F191500D
        Validity
            Not Before: Nov 11 20:54:42 2023 GMT
            Not After : Nov  9 20:59:42 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:56:2a:02:10:66:c3:b9:4e:e2:0f:a2:3a:07:
                    d4:95:0e:7c:90:c1:73:71:cf:16:08:b1:63:04:5f:
                    be:3a:e9:69:93:c5:c1:33:7d:de:9c:88:79:f9:ad:
                    0d:89:b1:4d:1c:24:5c:b4:7a:1d:a9:44:64:17:6a:
                    7f:27:45:41:3f:4d:33:cf:f4:3e:ca:ca:9b:a6:ba:
                    01:8b:bf:f1:df:81:ef:ae:64:47:6b:7f:ab:61:0f:
                    89:dd:c4:ed:18:23:b1:61:0d:c4:17:f2:b2:23:20:
                    66:b7:e3:43:3b:1f:7f:df:ea:7f:71:77:9d:dc:1a:
                    a1:b0:79:8c:df:56:2a:55:69:81:f8:bc:c0:e6:d6:
                    4a:5c:c7:da:e3:7f:bd:90:ea:1d:63:6f:df:0c:77:
                    18:b8:f3:e8:bb:91:5f:5c:76:06:6e:f8:c9:fc:13:
                    6c:c2:47:b9:a7:69:a4:67:fc:40:90:d7:9a:99:ba:
                    11:99:a3:ad:e5:0e:63:26:81:84:58:3e:0e:8b:8e:
                    ca:7f:47:2a:e9:80:3e:35:d8:40:10:bb:d1:22:2b:
                    c7:2a:37:e9:2c:96:28:33:6e:28:99:5f:02:44:b4:
                    3d:37:a5:6d:26:4c:8d:9d:d3:d8:6d:62:87:f0:19:
                    19:89:3a:6a:8f:8a:b0:4a:41:a2:0f:3d:87:a9:45:
                    42:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:7F:BC:7D:D1:4D:85:4B:1F:02:FC:5F:EA:D3:5A:01:7F:A0:5F:13
            X509v3 Authority Key Identifier:
                keyid:B7:76:75:4A:2C:8B:10:02:18:B0:61:AA:79:BE:91:86:F1:91:50:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/B776754A2C8B100218B061AA79BE9186F191500D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B776754A2C8B100218B061AA79BE9186F191500D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a3a2f33332d3333203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4708::/33

    Signature Algorithm: sha256WithRSAEncryption
         a9:b3:bc:a5:97:1e:a7:fc:66:4f:b5:8a:25:1a:00:41:4e:93:
         ee:89:ce:29:ba:ae:7d:cd:a4:2a:58:0f:c2:aa:f9:e8:b5:10:
         4f:3c:73:9c:f8:45:09:46:13:55:36:cb:5a:6a:0e:f5:0d:a6:
         91:ae:50:ba:fe:7f:8e:4f:16:c5:67:c0:73:da:fc:9f:07:80:
         0a:3d:c8:66:bd:0d:ae:4d:09:7d:93:34:9f:16:a7:17:4c:f4:
         d4:99:96:05:83:67:ad:f6:19:56:4d:e7:5d:55:6b:55:2b:62:
         d8:8d:f1:78:32:6f:81:22:bf:a6:ad:17:61:ff:13:1c:39:c6:
         2e:ce:6f:c9:cf:64:59:74:49:ab:bd:13:41:bc:36:f3:e6:c3:
         43:6a:e4:e8:48:bf:99:22:72:21:d6:52:6a:2d:e9:11:dd:45:
         5c:82:7f:a4:0b:83:e3:da:9f:27:73:91:ce:27:20:e6:1c:3f:
         ac:20:1e:df:13:75:cf:ee:42:6c:77:cd:c6:b3:06:2c:77:e3:
         d4:16:13:06:21:6f:b6:40:b4:d0:da:e7:03:0b:d5:48:21:e1:
         78:f3:35:ae:01:91:db:33:8d:53:5a:f1:f2:a8:7a:40:8a:25:
         7f:87:71:d6:a7:eb:58:01:60:3c:82:93:45:d3:56:c0:1d:44:
         fc:da:36:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org