Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/0/323830343a373465343a3a2f33322d3332203d3e20323731303130.roa
File:                     323830343a373465343a3a2f33322d3332203d3e20323731303130.roa (raw, json)
Hash identifier:          us0g93On/A6JCAtww9oln65LSDKXfrbjDxC0visutG0=
Subject key identifier:   9C:BF:CF:79:96:90:95:46:F0:E1:55:03:8F:63:B4:B3:EC:81:E6:5E
Certificate issuer:       /CN=70EBE5F7331AAB229677DFBD998C3C3ED33CEA4C
Certificate serial:       0BC6F018BFDC64B042E8CCCAB678653A88CC0A3A
Authority key identifier: 70:EB:E5:F7:33:1A:AB:22:96:77:DF:BD:99:8C:3C:3E:D3:3C:EA:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70EBE5F7331AAB229677DFBD998C3C3ED33CEA4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/0/323830343a373465343a3a2f33322d3332203d3e20323731303130.roa
Signing time:             Wed 06 Sep 2023 17:16:39 +0000
ROA not before:           Wed 06 Sep 2023 17:11:39 +0000
ROA not after:            Wed 04 Sep 2024 17:16:39 +0000
asID:                     271010
IP address blocks:        2804:74e4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:c6:f0:18:bf:dc:64:b0:42:e8:cc:ca:b6:78:65:3a:88:cc:0a:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70EBE5F7331AAB229677DFBD998C3C3ED33CEA4C
        Validity
            Not Before: Sep  6 17:11:39 2023 GMT
            Not After : Sep  4 17:16:39 2024 GMT
        Subject: CN=9CBFCF7996909546F0E155038F63B4B3EC81E65E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:12:a0:e8:10:a0:04:70:dc:2f:1c:4e:70:f3:
                    27:87:43:a2:4d:ff:5d:1b:74:6b:33:dd:14:74:e7:
                    35:69:b1:df:bb:24:42:b2:b3:08:22:1f:c5:81:9f:
                    8e:35:40:d9:da:e3:57:fa:0a:be:99:ed:8d:58:9d:
                    9f:9e:1e:85:f5:12:e6:a1:48:ae:84:5b:91:ad:86:
                    27:38:1c:ab:67:c1:9d:ad:9b:9c:73:14:a0:4e:eb:
                    c0:65:05:56:78:c5:4c:be:f9:6b:ee:9b:0d:28:8f:
                    15:f7:59:da:3c:23:4b:fd:b6:fc:3a:4d:d9:56:a6:
                    c2:41:f7:8c:7d:17:5d:fe:9d:d9:25:92:df:79:d6:
                    f8:5a:6d:5a:63:b3:15:09:c9:0d:33:09:38:0d:ef:
                    ae:96:ec:ce:11:d3:16:9a:87:f8:30:9c:09:5b:17:
                    2a:32:50:ad:3a:37:f3:cf:9b:27:cb:5f:d0:47:6f:
                    cb:52:2b:e1:6a:69:72:50:ec:ea:eb:6e:4e:0b:09:
                    c7:e1:1d:47:a8:85:f3:32:61:63:93:fb:7c:ab:de:
                    d8:51:be:15:05:d0:ed:58:d1:6a:01:6f:d8:06:1f:
                    a1:8f:65:08:ae:98:e4:0c:ac:e2:48:92:50:6a:f2:
                    93:bc:58:53:cb:cb:cf:f6:f3:5e:5f:70:76:17:07:
                    d2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:BF:CF:79:96:90:95:46:F0:E1:55:03:8F:63:B4:B3:EC:81:E6:5E
            X509v3 Authority Key Identifier:
                keyid:70:EB:E5:F7:33:1A:AB:22:96:77:DF:BD:99:8C:3C:3E:D3:3C:EA:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/0/70EBE5F7331AAB229677DFBD998C3C3ED33CEA4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70EBE5F7331AAB229677DFBD998C3C3ED33CEA4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/0/323830343a373465343a3a2f33322d3332203d3e20323731303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:8b:b9:29:ba:bf:12:e7:8d:c8:b3:42:2a:b1:4f:a0:b1:9d:
         87:29:f1:f2:f3:89:ba:1b:df:49:81:82:43:df:d6:99:93:f2:
         31:12:d5:97:9f:a9:ea:43:c5:ad:6f:15:48:fe:51:b7:27:87:
         a2:0c:d0:aa:15:2b:a7:d8:38:10:47:6f:f8:39:b4:2a:d2:05:
         13:42:fb:56:88:6e:d8:4f:c8:8e:eb:48:5e:04:e5:36:35:25:
         b7:74:d8:b9:05:7c:b8:1c:a4:b2:0b:87:2f:7c:03:cd:79:e9:
         1c:e2:68:1d:20:ce:cc:31:e4:cf:69:5d:fe:b3:c8:dd:0b:78:
         10:d8:2b:f8:a5:ce:45:61:3b:b9:fc:7d:78:27:93:47:16:af:
         7f:29:fc:2e:fc:45:34:56:b6:5f:45:c9:18:b7:ab:77:8b:29:
         e1:07:bd:be:5b:78:ee:c2:e3:63:aa:43:59:16:1f:76:77:b9:
         6f:c2:c1:e8:98:2d:b6:3c:b7:36:e9:ab:9f:f6:03:38:9e:3a:
         f9:19:5b:4e:f8:f9:2d:c7:16:a9:78:3e:9f:d9:ca:60:99:85:
         5c:71:0a:a6:0c:71:e0:28:f0:d5:74:24:97:fc:e0:0d:73:82:
         68:b2:fc:a8:8e:99:75:38:64:f2:8d:1e:59:97:81:8b:d8:80:
         4b:e4:84:a1
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUC8bwGL/cZLBC6MzKtnhlOojMCjowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBFQkU1RjczMzFBQUIyMjk2NzdERkJEOTk4QzNDM0VE
MzNDRUE0QzAeFw0yMzA5MDYxNzExMzlaFw0yNDA5MDQxNzE2MzlaMDMxMTAvBgNV
BAMTKDlDQkZDRjc5OTY5MDk1NDZGMEUxNTUwMzhGNjNCNEIzRUM4MUU2NUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcEqDoEKAEcNwvHE5w8yeHQ6JN
/10bdGsz3RR05zVpsd+7JEKyswgiH8WBn441QNna41f6Cr6Z7Y1YnZ+eHoX1Euah
SK6EW5Gthic4HKtnwZ2tm5xzFKBO68BlBVZ4xUy++Wvumw0ojxX3Wdo8I0v9tvw6
TdlWpsJB94x9F13+ndklkt951vhabVpjsxUJyQ0zCTgN766W7M4R0xaah/gwnAlb
FyoyUK06N/PPmyfLX9BHb8tSK+FqaXJQ7Orrbk4LCcfhHUeohfMyYWOT+3yr3thR
vhUF0O1Y0WoBb9gGH6GPZQiumOQMrOJIklBq8pO8WFPLy8/2815fcHYXB9KjAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUnL/PeZaQlUbw4VUDj2O0s+yB5l4wHwYDVR0j
BBgwFoAUcOvl9zMaqyKWd9+9mYw8PtM86kwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzVuQVJjNHRIaFhlc2M3a2Y0MnN5ZjE4ZjYzR1NFQnBDcW8xdW8zS1ZI
UEEvMC83MEVCRTVGNzMzMUFBQjIyOTY3N0RGQkQ5OThDM0MzRUQzM0NFQTRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzcwRUJFNUY3MzMxQUFCMjI5
Njc3REZCRDk5OEMzQzNFRDMzQ0VBNEMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc1bkFSYzR0SGhYZXNjN2tmNDJzeWYxOGY2M0dTRUJwQ3FvMXVvM0tWSFBBLzAv
MzIzODMwMzQzYTM3MzQ2NTM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMx
MzAzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR05DANBgkqhkiG9w0BAQsFAAOCAQEAZIu5Kbq/
EueNyLNCKrFPoLGdhynx8vOJuhvfSYGCQ9/WmZPyMRLVl5+p6kPFrW8VSP5RtyeH
ogzQqhUrp9g4EEdv+Dm0KtIFE0L7Vohu2E/IjutIXgTlNjUlt3TYuQV8uByksguH
L3wDzXnpHOJoHSDOzDHkz2ld/rPI3Qt4ENgr+KXORWE7ufx9eCeTRxavfyn8LvxF
NFa2X0XJGLerd4sp4Qe9vlt47sLjY6pDWRYfdne5b8LB6Jgttjy3Numrn/YDOJ46
+RlbTvj5LccWqXg+n9nKYJmFXHEKpgxx4Cjw1XQkl/zgDXOCaLL8qI6ZdThk8o0e
WZeBi9iAS+SEoQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org