Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/323830343a373031303a383030303a3a2f33342d3334203d3e20323730373031.roa
File:                     323830343a373031303a383030303a3a2f33342d3334203d3e20323730373031.roa (raw, json)
Hash identifier:          ItWB4PaNilxYNdkL14FajAtOy+MqUgBtE/CywwHaSEA=
Subject key identifier:   B9:E1:9D:98:01:B7:42:14:A2:C4:6B:AE:2A:16:E3:5B:E5:11:A0:8B
Certificate issuer:       /CN=67D57F211328E67D517D7804F40E7CD826FA4FD0
Certificate serial:       3836B9B70A3C6DD056719FB95538EF6222F9A2CB
Authority key identifier: 67:D5:7F:21:13:28:E6:7D:51:7D:78:04:F4:0E:7C:D8:26:FA:4F:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67D57F211328E67D517D7804F40E7CD826FA4FD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/323830343a373031303a383030303a3a2f33342d3334203d3e20323730373031.roa
Signing time:             Fri 19 May 2023 13:51:31 +0000
ROA not before:           Fri 19 May 2023 13:46:31 +0000
ROA not after:            Fri 17 May 2024 13:51:31 +0000
asID:                     270701
IP address blocks:        2804:7010:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:36:b9:b7:0a:3c:6d:d0:56:71:9f:b9:55:38:ef:62:22:f9:a2:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67D57F211328E67D517D7804F40E7CD826FA4FD0
        Validity
            Not Before: May 19 13:46:31 2023 GMT
            Not After : May 17 13:51:31 2024 GMT
        Subject: CN=B9E19D9801B74214A2C46BAE2A16E35BE511A08B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:38:b2:de:e8:b2:31:42:49:19:c4:a6:ca:f3:
                    dd:e9:4c:f4:ee:ec:dc:1c:86:af:a2:be:4b:97:70:
                    73:0e:b6:9b:5d:a7:e7:6a:29:a8:a4:96:56:78:50:
                    40:53:76:91:e1:6e:4d:13:75:91:c7:b4:21:03:81:
                    30:e8:5f:18:c2:03:70:7b:8f:a8:0e:74:18:1e:d7:
                    64:3c:30:c7:77:ca:8d:7e:39:ac:b3:10:a4:41:f2:
                    0a:eb:11:36:de:61:7d:74:62:9a:91:af:90:0a:57:
                    58:a9:bc:21:9d:26:5b:66:c3:3c:d3:1d:4b:4a:33:
                    0c:cf:1f:2f:0b:f5:25:00:70:6c:a7:23:8f:95:fb:
                    f1:f6:a9:59:03:82:54:74:dd:6e:25:73:c5:c7:e1:
                    11:21:8a:39:1a:ad:fa:e7:5b:da:f2:e1:b0:c1:c3:
                    d9:59:79:08:86:52:6e:cc:bf:bb:17:96:7c:c4:60:
                    d4:91:77:50:cb:16:c7:0a:12:31:61:9c:6c:a9:8e:
                    f7:3b:6d:a9:06:bb:31:50:6a:0d:22:d3:79:90:33:
                    bf:5d:b8:3f:06:7b:f9:81:11:31:66:95:3d:ef:fc:
                    a4:20:25:5a:77:88:5c:6e:83:1a:28:81:2f:46:8f:
                    5c:e7:b2:3b:f0:b1:ba:53:09:44:9b:7f:6f:66:22:
                    9b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E1:9D:98:01:B7:42:14:A2:C4:6B:AE:2A:16:E3:5B:E5:11:A0:8B
            X509v3 Authority Key Identifier:
                keyid:67:D5:7F:21:13:28:E6:7D:51:7D:78:04:F4:0E:7C:D8:26:FA:4F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/67D57F211328E67D517D7804F40E7CD826FA4FD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67D57F211328E67D517D7804F40E7CD826FA4FD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/323830343a373031303a383030303a3a2f33342d3334203d3e20323730373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7010:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5e:a0:36:61:d3:7d:af:93:70:da:84:bf:f8:38:18:f2:8a:4a:
         a7:21:3c:f7:1b:b0:15:66:c3:5d:49:8d:b8:88:1f:7f:d6:89:
         3a:91:73:56:60:76:1e:a7:e1:23:e4:af:ca:65:1e:2b:43:a1:
         10:39:d7:e6:22:88:99:15:27:04:ee:c9:63:b1:13:ae:69:4d:
         a2:28:e8:d1:df:05:1d:37:97:01:77:38:eb:65:c0:94:b2:b9:
         b6:09:fd:24:86:3a:5b:c2:97:f9:35:4a:a1:f9:cc:6d:84:72:
         5d:7c:e3:ef:95:5c:a7:3f:5d:66:9d:38:77:3a:c3:35:e4:d5:
         9b:c0:9f:73:55:41:e1:f4:e5:4c:6a:c0:45:23:ce:63:bc:42:
         66:e7:ac:b9:e2:cf:4d:89:66:11:10:af:4d:81:c0:11:7b:54:
         27:77:b3:8f:b3:c1:90:d0:33:7c:a8:7e:0f:68:a9:ab:9a:3d:
         84:00:74:4e:b4:73:2d:20:f2:4b:f7:4c:d6:1f:4e:e0:99:e9:
         7e:d7:c4:97:72:03:f0:6d:ac:6a:2d:4f:05:da:c9:6c:f1:a6:
         01:a6:32:16:6b:77:d9:fb:f1:ee:51:6c:e9:16:af:6a:46:8b:
         6b:e3:3c:41:9c:21:e5:a7:bf:5e:7b:0c:e5:78:f4:77:f9:67:
         34:18:7d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:40 2024 by rpki-client on console-ams.rpki-client.org