Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tzCM28VmLcWb2bAwF2h5ezzquFUiomV6jrRd8B4WYg3/0/323830343a373061343a383030303a3a2f33332d3333203d3e20323730373339.roa
File:                     323830343a373061343a383030303a3a2f33332d3333203d3e20323730373339.roa (raw, json)
Hash identifier:          q7iqfSvECAfPCOsEI7mAiFPCMucv6L2szhAyPgdG4Nk=
Subject key identifier:   CA:84:01:7C:37:A8:39:04:39:C1:48:DB:F2:CC:47:5A:A1:3A:BA:A9
Certificate issuer:       /CN=FD7602BF76AA1AACD393FB899DDC6086459522CE
Certificate serial:       16CE0ABC62F1312FC23139FA868A3CBE60E9C535
Authority key identifier: FD:76:02:BF:76:AA:1A:AC:D3:93:FB:89:9D:DC:60:86:45:95:22:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD7602BF76AA1AACD393FB899DDC6086459522CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tzCM28VmLcWb2bAwF2h5ezzquFUiomV6jrRd8B4WYg3/0/323830343a373061343a383030303a3a2f33332d3333203d3e20323730373339.roa
Signing time:             Tue 02 Jan 2024 13:55:41 +0000
ROA not before:           Tue 02 Jan 2024 13:50:41 +0000
ROA not after:            Tue 31 Dec 2024 13:55:41 +0000
asID:                     270739
IP address blocks:        2804:70a4:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ce:0a:bc:62:f1:31:2f:c2:31:39:fa:86:8a:3c:be:60:e9:c5:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD7602BF76AA1AACD393FB899DDC6086459522CE
        Validity
            Not Before: Jan  2 13:50:41 2024 GMT
            Not After : Dec 31 13:55:41 2024 GMT
        Subject: CN=CA84017C37A8390439C148DBF2CC475AA13ABAA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0f:c5:00:fc:d5:6c:7e:f9:7f:33:67:15:c5:
                    67:d3:47:cb:b6:99:17:75:c6:d7:e7:29:c5:06:64:
                    0c:7d:3f:53:55:c9:b9:0f:b0:56:f1:22:bf:ec:99:
                    7b:c7:d3:96:39:e7:3b:93:6c:d4:50:e9:ca:02:73:
                    d4:2b:d9:75:26:49:07:d5:d6:cc:7e:bc:0c:da:60:
                    74:40:b0:b6:31:a2:cd:96:37:33:f1:9d:5d:28:e3:
                    46:17:7a:3f:66:43:4e:29:73:8d:91:92:f8:4d:26:
                    b3:a2:ea:dc:a3:eb:b6:21:29:08:33:09:94:af:24:
                    c1:7f:7c:33:81:86:fb:9e:6f:a3:b8:87:3b:11:10:
                    12:82:bc:55:01:ef:48:0d:47:ca:48:01:89:cf:bc:
                    ac:2f:79:59:6f:ad:c4:3f:5b:89:b2:5f:e6:d1:be:
                    dd:20:d5:20:29:24:5f:28:cc:01:b2:c2:0f:22:e0:
                    ac:a7:30:c7:eb:2d:40:9d:58:36:8a:53:37:0a:6d:
                    7a:04:7c:07:8e:e8:7e:67:d0:ad:88:e4:b6:39:68:
                    99:33:5a:d9:62:48:4d:ba:cb:dc:80:c1:ef:e9:b6:
                    2a:1a:04:61:19:bd:e6:e4:03:ec:23:4b:9a:16:7e:
                    2b:1d:5e:2d:9f:9e:97:bf:e0:06:bf:0a:d8:1b:90:
                    49:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:84:01:7C:37:A8:39:04:39:C1:48:DB:F2:CC:47:5A:A1:3A:BA:A9
            X509v3 Authority Key Identifier:
                keyid:FD:76:02:BF:76:AA:1A:AC:D3:93:FB:89:9D:DC:60:86:45:95:22:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tzCM28VmLcWb2bAwF2h5ezzquFUiomV6jrRd8B4WYg3/0/FD7602BF76AA1AACD393FB899DDC6086459522CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD7602BF76AA1AACD393FB899DDC6086459522CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tzCM28VmLcWb2bAwF2h5ezzquFUiomV6jrRd8B4WYg3/0/323830343a373061343a383030303a3a2f33332d3333203d3e20323730373339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70a4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         95:99:29:73:2d:17:a9:ec:6a:f3:3e:de:e2:d3:50:a4:07:57:
         10:5b:0f:15:84:d9:ca:5a:68:06:7c:27:b0:35:1e:70:73:dc:
         47:20:a5:56:c7:e0:29:bb:ec:4e:79:56:9a:23:d6:5c:50:b4:
         25:61:30:75:7b:6c:48:00:e7:2e:51:7f:46:3f:20:e4:3a:b5:
         45:8f:b7:02:59:7d:ac:93:28:c3:f8:41:ea:9d:58:08:dc:49:
         f3:52:24:fc:94:c1:45:f6:80:4e:4e:bb:c7:9d:9f:9a:49:be:
         12:9b:c1:76:06:29:c6:55:50:9a:e8:2c:d7:01:af:a7:65:d1:
         4c:20:1f:76:37:6f:71:bf:56:ba:22:35:41:f0:6c:90:de:81:
         5a:10:3f:29:df:61:0a:c7:1a:3e:4e:cf:fe:74:3b:55:6a:7c:
         02:56:89:07:c3:90:34:ed:5f:ab:d1:85:97:70:93:ed:ff:de:
         92:b1:c0:43:f7:63:ce:c1:56:e8:40:a9:c1:82:f6:28:5f:6e:
         7f:d4:b2:8e:2f:68:f4:2c:a1:89:36:fd:41:c9:cb:ac:ff:36:
         8c:03:bf:d1:d7:62:45:56:f0:4e:46:1c:32:e8:80:04:04:b3:
         f2:da:7b:d4:c9:68:40:8e:b4:57:c6:83:d6:d8:5a:4e:45:d5:
         8a:37:d5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org