Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/323830343a373031303a383030303a3a2f33332d3333203d3e20323730373031.roa
File:                     323830343a373031303a383030303a3a2f33332d3333203d3e20323730373031.roa (raw, json)
Hash identifier:          ZEiRyed8UVt/YD4ASx3LiQOQbqSjQeiT4mHsJ70123c=
Subject key identifier:   BB:C3:8E:A9:88:62:4F:30:D2:7B:25:B1:82:B8:21:90:6D:B4:2D:92
Certificate issuer:       /CN=76E174AC6D07E33FF8504F0EEA7FD678E8E6DC0E
Certificate serial:       5995C71990F5BFD2F916AEF111C2FC2D90019C8E
Authority key identifier: 76:E1:74:AC:6D:07:E3:3F:F8:50:4F:0E:EA:7F:D6:78:E8:E6:DC:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/76E174AC6D07E33FF8504F0EEA7FD678E8E6DC0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/323830343a373031303a383030303a3a2f33332d3333203d3e20323730373031.roa
Signing time:             Fri 19 Jan 2024 22:39:02 +0000
ROA not before:           Fri 19 Jan 2024 22:34:02 +0000
ROA not after:            Fri 17 Jan 2025 22:39:02 +0000
asID:                     270701
IP address blocks:        2804:7010:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:95:c7:19:90:f5:bf:d2:f9:16:ae:f1:11:c2:fc:2d:90:01:9c:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76E174AC6D07E33FF8504F0EEA7FD678E8E6DC0E
        Validity
            Not Before: Jan 19 22:34:02 2024 GMT
            Not After : Jan 17 22:39:02 2025 GMT
        Subject: CN=BBC38EA988624F30D27B25B182B821906DB42D92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a0:2d:8b:25:d4:b1:a6:e8:3f:eb:6a:2d:05:
                    41:da:9f:fe:52:6a:84:42:d2:fd:42:cd:5b:a4:8e:
                    6b:8d:e3:0f:27:f0:39:62:7a:4a:40:c9:95:43:5a:
                    27:d5:16:51:90:2e:a6:e6:9c:c7:a7:b0:36:6d:ba:
                    cd:cf:7e:6d:34:2c:78:94:a5:f2:2a:91:35:79:e0:
                    3c:dc:0b:60:66:77:2e:1d:e7:69:49:1c:a6:0a:97:
                    78:96:d3:5c:02:c0:39:2f:ce:f2:ed:15:03:7b:6f:
                    e3:7b:57:4f:c3:35:25:24:5b:fc:04:8f:d7:f3:db:
                    6e:98:d5:be:68:21:16:05:40:6c:76:20:01:85:5d:
                    7c:66:7d:36:44:77:ae:b3:95:bc:9f:9b:62:a2:7d:
                    37:7b:28:c8:b6:28:80:b4:e3:e3:b7:ab:ba:53:b2:
                    fd:61:4b:4f:81:c1:7c:6e:80:1f:da:d9:27:26:77:
                    8c:9c:80:e0:6d:03:a3:35:e2:b2:25:b3:ee:82:cd:
                    bd:79:f0:da:5d:34:98:58:f7:8d:83:45:7c:a6:3f:
                    3e:40:ce:a3:b8:c7:1b:6e:43:76:54:c0:47:5f:4b:
                    ef:a3:33:0b:48:2b:1e:f8:d2:34:2e:6b:4e:f2:a4:
                    a9:0f:20:fc:99:c8:a4:6a:11:48:50:58:bf:52:de:
                    a8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C3:8E:A9:88:62:4F:30:D2:7B:25:B1:82:B8:21:90:6D:B4:2D:92
            X509v3 Authority Key Identifier:
                keyid:76:E1:74:AC:6D:07:E3:3F:F8:50:4F:0E:EA:7F:D6:78:E8:E6:DC:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/76E174AC6D07E33FF8504F0EEA7FD678E8E6DC0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/76E174AC6D07E33FF8504F0EEA7FD678E8E6DC0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/323830343a373031303a383030303a3a2f33332d3333203d3e20323730373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7010:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         a7:71:c3:cf:38:3d:2a:3b:77:2e:b8:27:fb:04:ed:2b:c5:b5:
         16:3f:eb:5f:47:a8:3d:b0:9a:38:3d:1c:eb:4f:d2:32:4c:2b:
         e1:ed:9e:94:02:00:f2:a0:cd:3c:a6:dc:ce:ab:b7:9a:86:f4:
         a9:46:34:43:56:88:85:1f:90:2b:1f:87:da:c7:b8:9c:92:93:
         07:2b:dd:03:15:1f:9c:22:40:bf:e2:f6:23:f8:b6:f1:21:65:
         4a:9d:35:40:c7:ab:37:a3:01:27:39:59:cd:e3:8f:4e:13:e2:
         25:b9:af:54:53:0c:44:f6:97:17:fc:7f:26:15:04:7a:97:cc:
         07:d0:b6:87:08:e4:51:6e:0a:eb:d6:83:97:0f:04:01:55:8c:
         15:88:8a:cb:4b:4c:87:50:80:12:49:aa:31:8e:d3:1e:db:c5:
         dc:34:b6:80:83:06:d3:66:3b:62:c9:46:09:26:51:08:39:a1:
         5e:56:b0:91:f0:23:ed:02:03:ee:5a:0c:e3:a9:4f:a4:06:51:
         06:6c:ff:39:16:19:50:e3:93:c7:31:df:ae:6f:b9:f4:14:8f:
         1b:ae:0f:6c:55:e5:87:82:32:0a:4a:35:20:e9:c5:6e:a4:41:
         57:45:82:5d:ac:16:96:d2:58:3d:e2:ba:9b:d4:b1:36:85:05:
         60:a0:c2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org