Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/323830343a386533633a633030303a3a2f33342d3334203d3e20323733343132.roa
File:                     323830343a386533633a633030303a3a2f33342d3334203d3e20323733343132.roa (raw, json)
Hash identifier:          AJ8MoysZY6Vg4IvyQpd6ldEDCw49bafzw+5+St8XBbk=
Subject key identifier:   B1:7D:21:1B:F2:6F:2B:C9:19:67:81:91:03:81:B3:CA:C1:DE:17:BD
Certificate issuer:       /CN=CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E
Certificate serial:       437EBB90197F7A4F3357B98CF73DD9B53D644239
Authority key identifier: CE:F7:84:55:DE:B7:C5:CB:67:AC:1A:1A:4F:3E:5E:FD:D7:60:9A:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/323830343a386533633a633030303a3a2f33342d3334203d3e20323733343132.roa
Signing time:             Mon 22 Jan 2024 14:56:06 +0000
ROA not before:           Mon 22 Jan 2024 14:51:06 +0000
ROA not after:            Mon 20 Jan 2025 14:56:06 +0000
asID:                     273412
IP address blocks:        2804:8e3c:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:7e:bb:90:19:7f:7a:4f:33:57:b9:8c:f7:3d:d9:b5:3d:64:42:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E
        Validity
            Not Before: Jan 22 14:51:06 2024 GMT
            Not After : Jan 20 14:56:06 2025 GMT
        Subject: CN=B17D211BF26F2BC9196781910381B3CAC1DE17BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:68:6f:ea:e9:78:47:c9:2b:ce:40:72:ba:25:
                    46:02:7a:bb:f5:84:fd:b9:22:06:62:33:95:3c:f4:
                    85:a8:a5:09:fb:61:ea:db:59:73:0e:8c:2d:21:c5:
                    1b:90:02:cd:eb:b9:da:d4:34:75:39:b4:d3:be:d0:
                    1a:43:49:de:ff:e6:4a:c8:4b:f6:86:20:c0:de:88:
                    26:15:10:88:d5:87:e5:56:05:f9:9c:58:83:78:1f:
                    94:4d:3e:17:ae:c9:e8:3f:d2:b3:da:96:3f:c6:93:
                    cc:2e:29:d0:c5:85:b4:6c:5a:9d:3d:ba:dd:bd:01:
                    c4:d3:6e:96:37:88:f2:e8:54:20:a9:53:3b:10:6a:
                    42:90:6c:ba:ed:f5:88:23:5e:32:63:9e:d9:d7:3b:
                    71:14:fd:36:1c:31:25:f4:f7:6e:b2:08:9a:12:9b:
                    46:90:38:4b:92:27:a3:a9:04:9e:9b:d4:ec:c4:5e:
                    04:ca:85:4b:80:66:11:16:10:f4:7d:44:41:9c:e8:
                    d7:8b:82:7c:08:69:bb:6b:3d:15:80:a9:10:39:20:
                    a2:9e:b8:a6:a9:66:86:93:dd:7f:f9:93:c4:97:21:
                    8d:00:1d:59:4b:90:2e:75:61:f2:57:aa:bf:f6:a1:
                    e1:49:32:06:61:98:34:8a:91:e3:57:db:2b:b9:53:
                    87:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:7D:21:1B:F2:6F:2B:C9:19:67:81:91:03:81:B3:CA:C1:DE:17:BD
            X509v3 Authority Key Identifier:
                keyid:CE:F7:84:55:DE:B7:C5:CB:67:AC:1A:1A:4F:3E:5E:FD:D7:60:9A:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/323830343a386533633a633030303a3a2f33342d3334203d3e20323733343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e3c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3a:51:bd:72:93:20:43:46:48:b0:64:41:d8:e4:8f:3c:4a:25:
         5c:62:70:39:2f:bc:53:d9:3e:eb:f9:e7:2d:cf:b9:4c:93:dc:
         3c:67:f0:54:89:59:68:d2:c0:cb:b9:ee:cc:d6:08:92:6a:e9:
         01:02:14:dc:79:2f:56:19:1c:1d:43:b0:ef:ad:0f:92:43:ba:
         7e:46:40:09:ac:e0:30:76:e8:13:5f:43:63:e2:87:72:51:f0:
         2f:05:30:ad:de:41:6e:00:f9:47:61:2e:e2:06:b1:10:d4:0d:
         d9:e2:7a:ed:d9:f5:8d:bc:ef:a7:75:8d:3f:11:a8:1f:7d:46:
         07:f0:d9:d8:bd:b9:e0:33:c0:80:ba:89:ad:3a:2e:c6:d2:c2:
         34:ee:86:db:22:e9:10:c3:15:6c:d6:69:1f:d1:00:4a:5f:89:
         af:47:38:ae:dc:86:99:a0:d7:c7:32:d7:75:03:3e:72:c4:17:
         2e:16:94:f8:1e:f4:23:ad:bf:01:15:63:67:30:5c:99:17:6c:
         7e:1e:cf:18:36:a7:94:2e:17:39:00:49:cb:87:72:a0:fc:12:
         29:15:15:1a:70:0c:53:47:ae:58:f9:a3:f7:8f:f7:4a:91:bd:
         e6:ff:cd:a7:40:c6:64:2d:4c:f4:25:28:b2:02:b3:34:f5:65:
         89:0a:77:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org