Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/0/323830343a343631383a333130303a3a2f34302d3430203d3e20323636393638.roa
File:                     323830343a343631383a333130303a3a2f34302d3430203d3e20323636393638.roa (raw, json)
Hash identifier:          NkcWNyojRnEVbsVtUOGijQWc8LWXjb80iswcKXm66w8=
Subject key identifier:   0E:F7:C6:DC:6C:0D:2B:7E:AA:50:06:DC:07:45:8D:11:3C:28:E4:CE
Certificate issuer:       /CN=74FA7BEC0A12DC39CA289CE410D30FE47A56EAD1
Certificate serial:       19E796E7810221B7FC2D7A3A8807C69281637686
Authority key identifier: 74:FA:7B:EC:0A:12:DC:39:CA:28:9C:E4:10:D3:0F:E4:7A:56:EA:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74FA7BEC0A12DC39CA289CE410D30FE47A56EAD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/0/323830343a343631383a333130303a3a2f34302d3430203d3e20323636393638.roa
Signing time:             Mon 11 Mar 2024 19:02:28 +0000
ROA not before:           Mon 11 Mar 2024 18:57:28 +0000
ROA not after:            Mon 10 Mar 2025 19:02:28 +0000
asID:                     266968
IP address blocks:        2804:4618:3100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e7:96:e7:81:02:21:b7:fc:2d:7a:3a:88:07:c6:92:81:63:76:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74FA7BEC0A12DC39CA289CE410D30FE47A56EAD1
        Validity
            Not Before: Mar 11 18:57:28 2024 GMT
            Not After : Mar 10 19:02:28 2025 GMT
        Subject: CN=0EF7C6DC6C0D2B7EAA5006DC07458D113C28E4CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:da:b8:bd:1e:ef:4e:64:43:55:46:a1:19:18:
                    bd:0f:ef:73:92:5e:9b:36:62:df:4f:60:7c:bb:b1:
                    70:82:ff:74:b0:47:b7:0b:65:2a:0a:c8:35:86:97:
                    f3:8b:60:06:01:63:86:70:90:5c:ce:8f:61:e6:4b:
                    55:8b:4c:28:79:d8:90:ff:2a:9a:bb:2b:fd:3d:8c:
                    4e:4b:ce:75:08:b7:5d:d0:2c:3d:62:2b:94:db:bd:
                    9c:d0:ad:3e:6c:a6:70:ac:18:e9:a7:f0:7d:52:90:
                    3b:32:ef:4e:93:2b:37:57:69:49:76:99:39:12:a0:
                    e6:9a:e8:6d:c9:25:52:b2:a4:6d:3f:23:2b:dd:bb:
                    81:8c:e8:00:d6:ef:6e:b4:7c:71:2a:63:d5:99:34:
                    99:28:fb:40:d1:e8:76:9b:57:85:af:4c:57:13:48:
                    a0:e7:51:0f:0b:31:5d:69:65:5f:a5:86:fb:e4:64:
                    64:a6:bd:54:ec:3d:f6:78:ec:a8:4c:0d:12:73:7e:
                    d7:66:29:dd:3a:81:37:b0:96:a7:5d:29:20:cb:a9:
                    fd:ee:33:8c:51:d2:26:9c:d5:24:82:1f:92:c7:cf:
                    81:c2:63:a7:05:25:35:4c:e6:30:4e:d5:47:2a:05:
                    ec:5a:7f:6c:cf:fa:c7:89:35:66:d1:c1:a7:54:0e:
                    7e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F7:C6:DC:6C:0D:2B:7E:AA:50:06:DC:07:45:8D:11:3C:28:E4:CE
            X509v3 Authority Key Identifier:
                keyid:74:FA:7B:EC:0A:12:DC:39:CA:28:9C:E4:10:D3:0F:E4:7A:56:EA:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/0/74FA7BEC0A12DC39CA289CE410D30FE47A56EAD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74FA7BEC0A12DC39CA289CE410D30FE47A56EAD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/0/323830343a343631383a333130303a3a2f34302d3430203d3e20323636393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4618:3100::/40

    Signature Algorithm: sha256WithRSAEncryption
         86:f7:c5:80:3f:fd:b7:47:ab:6e:37:99:aa:57:50:25:72:5a:
         5a:4c:ef:7e:1f:aa:8c:e1:e1:d5:cc:e7:f7:e1:d2:a0:0c:88:
         ce:1d:f2:6c:82:3e:6b:bc:5c:47:db:6f:f0:11:67:19:54:cd:
         ed:e4:9f:b0:b6:5a:bc:f7:fb:f3:8d:4c:ce:23:54:9c:3c:94:
         c1:23:3e:f7:33:bf:06:60:61:30:23:6e:70:f7:52:51:0b:31:
         61:57:53:0f:61:28:bf:aa:37:6e:d3:6e:eb:f9:7c:34:c4:47:
         54:e3:bf:b1:88:ff:09:4b:94:c5:91:55:81:bf:c7:90:78:34:
         ca:c8:56:18:44:20:1d:bb:bc:0d:e8:75:f6:15:26:d4:3f:da:
         4e:ab:e3:1f:ad:bc:8b:ac:2a:5b:12:e2:52:7c:fb:15:b4:19:
         67:62:56:2b:16:59:93:fe:fc:d8:46:61:bc:b0:45:50:b5:5d:
         79:84:a8:ca:9e:76:70:12:06:14:e4:04:83:8f:ca:73:31:5a:
         38:a2:d9:1a:56:07:75:71:ab:45:38:6d:f2:81:7d:1b:56:7f:
         c1:c4:e3:74:b2:97:f2:39:43:ca:b8:7c:42:68:f1:ad:3f:82:
         17:e3:93:0b:a6:89:91:fb:a5:27:9b:e0:45:c8:c5:35:71:aa:
         66:d3:3a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org