Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/323830343a313737383a383030303a3a2f33342d3334203d3e20323633313436.roa
File:                     323830343a313737383a383030303a3a2f33342d3334203d3e20323633313436.roa (raw, json)
Hash identifier:          DKPOFHrf/mXqjqwxur6CbQXunbfobiHq7Nabw7OI5fc=
Subject key identifier:   74:06:AB:80:4B:66:84:B1:D6:8B:77:B7:10:42:26:18:28:67:74:F0
Certificate issuer:       /CN=42173031F4D425DF09DB731E4F7AC1011DE66F19
Certificate serial:       42F0044101FBDA3C5E27F3301DC46021CB50A837
Authority key identifier: 42:17:30:31:F4:D4:25:DF:09:DB:73:1E:4F:7A:C1:01:1D:E6:6F:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/323830343a313737383a383030303a3a2f33342d3334203d3e20323633313436.roa
Signing time:             Tue 27 Feb 2024 17:30:41 +0000
ROA not before:           Tue 27 Feb 2024 17:25:41 +0000
ROA not after:            Tue 25 Feb 2025 17:30:41 +0000
asID:                     263146
IP address blocks:        2804:1778:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f0:04:41:01:fb:da:3c:5e:27:f3:30:1d:c4:60:21:cb:50:a8:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42173031F4D425DF09DB731E4F7AC1011DE66F19
        Validity
            Not Before: Feb 27 17:25:41 2024 GMT
            Not After : Feb 25 17:30:41 2025 GMT
        Subject: CN=7406AB804B6684B1D68B77B710422618286774F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5b:59:82:58:02:96:07:05:83:80:64:a9:4e:
                    b2:8f:ed:89:d3:38:23:78:8b:3a:a6:28:b3:89:8f:
                    2d:67:6f:00:42:a9:08:6c:d3:35:a6:42:0d:c8:2d:
                    3a:8a:10:62:2c:f5:07:c4:15:22:8d:14:64:4a:4a:
                    97:80:dc:c4:13:f6:57:cc:76:33:7e:c4:76:6e:bd:
                    40:47:bd:88:16:c4:77:d5:87:15:1b:88:25:34:01:
                    5f:68:a2:f3:bf:76:03:04:0e:81:f4:f2:31:29:d7:
                    e2:6b:c5:52:d9:27:72:30:02:1e:23:25:b3:d0:ed:
                    7c:28:35:bd:40:e7:aa:e5:33:15:70:eb:ca:87:5a:
                    b8:d6:f5:f3:09:0f:d6:ed:27:79:6a:58:3e:f9:29:
                    08:a6:d1:d3:6e:be:ad:13:c2:cf:5a:cd:66:29:14:
                    5c:68:54:c5:2d:6f:b0:1e:3d:5c:69:6a:56:04:e1:
                    28:a0:4c:fc:1d:2d:e5:af:47:b7:14:94:ca:27:d0:
                    7a:0e:84:55:20:04:71:1b:17:49:fd:01:c8:a7:2b:
                    cf:a6:25:7b:c2:d3:d2:5a:bd:16:c3:92:3b:40:c8:
                    c5:9a:6a:7c:9e:d5:3b:76:e4:93:0d:8c:88:59:8a:
                    51:45:0b:17:b5:7b:b5:5e:29:f1:3d:10:66:1a:9a:
                    85:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:06:AB:80:4B:66:84:B1:D6:8B:77:B7:10:42:26:18:28:67:74:F0
            X509v3 Authority Key Identifier:
                keyid:42:17:30:31:F4:D4:25:DF:09:DB:73:1E:4F:7A:C1:01:1D:E6:6F:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/323830343a313737383a383030303a3a2f33342d3334203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1778:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b8:9e:cb:c8:2e:83:92:be:8c:f7:de:62:3f:7a:b3:11:48:57:
         72:05:4a:db:42:c7:88:8f:4f:e3:b6:12:40:a0:66:69:94:15:
         59:bd:26:b5:f8:68:1f:2c:b4:02:51:c4:86:5a:1f:cf:d1:87:
         bf:ea:44:1f:21:c0:43:a0:76:ce:6a:aa:bf:1a:50:29:28:0c:
         4e:30:b7:02:d6:b9:b7:4b:d0:b9:94:40:61:ab:e0:ce:75:ee:
         75:55:fb:7f:cd:15:1b:25:80:ab:ea:8d:20:0d:1a:5b:bc:9f:
         47:64:18:b3:86:0c:75:3e:b8:9e:27:de:75:e0:5c:20:a4:31:
         f5:2e:e5:ac:2b:d3:16:f0:d5:96:e0:b9:73:97:60:14:36:e9:
         6f:8b:f5:02:37:35:78:77:a7:c1:bd:43:61:d1:84:25:67:41:
         28:0a:a2:27:15:a9:82:48:30:63:a3:b4:12:03:f3:20:ac:bd:
         e5:98:5c:24:ad:fb:a6:62:64:9d:49:9b:fc:ce:20:0e:92:de:
         8a:94:43:c6:7d:58:8f:23:59:95:f8:9b:02:74:f3:67:95:21:
         48:39:a4:26:a8:4f:79:ee:c0:6d:d0:b9:4c:cc:df:74:29:c6:
         b9:35:08:df:49:b8:52:0a:21:54:cd:f2:44:95:e7:ed:97:52:
         18:5e:aa:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org