Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/323830343a373031303a3a2f33332d3333203d3e20323730373031.roa
File:                     323830343a373031303a3a2f33332d3333203d3e20323730373031.roa (raw, json)
Hash identifier:          tQikABfrMHub9vQFwSOAPjrQfwDNMwvs5FZDTN6mj7Y=
Subject key identifier:   64:DE:72:D0:15:B7:B4:AE:82:C7:78:0A:02:1D:D8:70:4C:22:72:11
Certificate issuer:       /CN=76E174AC6D07E33FF8504F0EEA7FD678E8E6DC0E
Certificate serial:       469DF77F15F0C2517CC1855E6284334C03C6BF6E
Authority key identifier: 76:E1:74:AC:6D:07:E3:3F:F8:50:4F:0E:EA:7F:D6:78:E8:E6:DC:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/76E174AC6D07E33FF8504F0EEA7FD678E8E6DC0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/323830343a373031303a3a2f33332d3333203d3e20323730373031.roa
Signing time:             Fri 19 Jan 2024 22:39:00 +0000
ROA not before:           Fri 19 Jan 2024 22:34:00 +0000
ROA not after:            Fri 17 Jan 2025 22:39:00 +0000
asID:                     270701
IP address blocks:        2804:7010::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:9d:f7:7f:15:f0:c2:51:7c:c1:85:5e:62:84:33:4c:03:c6:bf:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76E174AC6D07E33FF8504F0EEA7FD678E8E6DC0E
        Validity
            Not Before: Jan 19 22:34:00 2024 GMT
            Not After : Jan 17 22:39:00 2025 GMT
        Subject: CN=64DE72D015B7B4AE82C7780A021DD8704C227211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c4:6b:62:54:6e:2f:55:9c:71:28:9e:79:6b:
                    53:32:6f:9c:c8:be:39:af:7d:1c:8a:76:fb:8f:d1:
                    ff:1b:34:de:69:92:64:05:eb:59:4a:cc:6e:b5:21:
                    f7:c2:21:4b:cc:9c:8f:3a:78:45:b3:2b:44:9b:90:
                    0f:4e:6b:85:d6:d7:33:16:0b:e6:97:52:2c:fa:5a:
                    15:4c:3b:f9:34:76:22:7f:bb:be:6f:df:35:79:60:
                    a0:e4:76:fa:e4:33:59:2a:6c:b3:46:12:bb:5a:f6:
                    d5:f6:97:f6:b7:fa:0d:ba:a0:2a:09:e5:ea:7b:fb:
                    49:c1:62:63:bb:91:70:9e:f5:66:53:8d:ae:9d:e2:
                    9b:11:7e:83:95:5f:18:54:a6:06:28:b6:39:f1:25:
                    70:89:9d:72:c2:eb:00:d2:44:7e:e9:3e:2e:cc:db:
                    3d:bc:44:58:88:76:3b:29:81:b9:3d:29:91:90:de:
                    16:5a:71:78:33:5b:a3:1a:eb:1f:49:37:c1:2c:61:
                    3a:dd:1d:26:38:7c:53:ef:95:ea:e7:fd:f9:62:c8:
                    08:31:9c:8b:85:77:d9:06:56:34:8f:e0:3e:23:d7:
                    8a:aa:2f:ec:20:ea:33:0b:2e:89:d7:53:97:74:98:
                    ed:a7:87:6c:7f:18:0f:2a:51:2f:2b:35:b3:7b:7d:
                    3a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:DE:72:D0:15:B7:B4:AE:82:C7:78:0A:02:1D:D8:70:4C:22:72:11
            X509v3 Authority Key Identifier:
                keyid:76:E1:74:AC:6D:07:E3:3F:F8:50:4F:0E:EA:7F:D6:78:E8:E6:DC:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/76E174AC6D07E33FF8504F0EEA7FD678E8E6DC0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/76E174AC6D07E33FF8504F0EEA7FD678E8E6DC0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/323830343a373031303a3a2f33332d3333203d3e20323730373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7010::/33

    Signature Algorithm: sha256WithRSAEncryption
         48:54:10:1b:2e:f5:c4:bd:ae:81:db:8a:cb:c3:4c:01:8a:d9:
         81:92:41:2b:2e:eb:fb:d3:ee:00:53:29:14:e2:0c:44:72:74:
         86:15:7c:4b:5d:65:92:f4:55:66:96:00:b6:a4:43:71:f2:9d:
         d1:0e:ba:a3:1e:d2:df:49:5e:32:47:1e:e4:1f:4e:26:21:7e:
         cb:d6:cd:22:46:9f:4d:56:82:9d:4d:36:74:e7:8c:9d:a0:b0:
         b8:d7:cc:b4:9e:f2:eb:29:b2:16:a8:f6:85:05:22:39:7a:d2:
         2a:45:6f:d7:6d:08:ba:50:c8:47:4d:bb:4e:6e:16:56:e1:2c:
         a8:ef:6d:e7:47:8e:72:1f:3d:55:e0:51:eb:a6:57:07:71:21:
         57:be:7c:95:84:54:e8:e2:4a:2d:e9:d1:61:cc:ce:68:e5:8c:
         d8:e0:27:e3:23:2f:bb:0c:7a:81:b2:ab:27:3b:b1:f9:52:e0:
         47:36:7a:82:36:c8:54:f7:97:ca:94:88:04:76:67:4b:58:20:
         51:54:f1:d8:74:5c:94:08:2d:68:82:92:92:9c:2e:e9:b9:06:
         cb:4d:25:ad:fe:4d:eb:83:7e:d3:36:ab:9f:e6:e9:74:a9:b8:
         24:5c:f4:80:fd:27:0a:98:f0:ca:a3:d9:33:c8:79:8e:8b:8a:
         50:ca:b5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org