Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ZkqGNN3aQi2tSj9i2zJVXtd556QKswFWacWToPfgkZk/0/323830343a373062303a383030303a3a2f33332d313238203d3e20323730373432.roa
File:                     323830343a373062303a383030303a3a2f33332d313238203d3e20323730373432.roa (raw, json)
Hash identifier:          uZKBEV0wDqP7jFBjcc6Ra7O5eyxMYpKaaWUGap1YJIc=
Subject key identifier:   88:4E:92:D4:73:20:ED:3A:1D:3D:EF:F0:E6:DD:F7:2E:E6:5B:B4:32
Certificate issuer:       /CN=8BDC3395A20790E2B58712C45CC172352B05BB02
Certificate serial:       0C314ECF65A6E22CA4FF9241C5C4F64EA4A941A1
Authority key identifier: 8B:DC:33:95:A2:07:90:E2:B5:87:12:C4:5C:C1:72:35:2B:05:BB:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BDC3395A20790E2B58712C45CC172352B05BB02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ZkqGNN3aQi2tSj9i2zJVXtd556QKswFWacWToPfgkZk/0/323830343a373062303a383030303a3a2f33332d313238203d3e20323730373432.roa
Signing time:             Thu 23 Feb 2023 12:26:38 +0000
ROA not before:           Thu 23 Feb 2023 12:21:38 +0000
ROA not after:            Thu 22 Feb 2024 12:26:38 +0000
asID:                     270742
IP address blocks:        2804:70b0:8000::/33 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:31:4e:cf:65:a6:e2:2c:a4:ff:92:41:c5:c4:f6:4e:a4:a9:41:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BDC3395A20790E2B58712C45CC172352B05BB02
        Validity
            Not Before: Feb 23 12:21:38 2023 GMT
            Not After : Feb 22 12:26:38 2024 GMT
        Subject: CN=884E92D47320ED3A1D3DEFF0E6DDF72EE65BB432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9f:45:f0:b2:60:1f:f5:1c:2b:2f:6b:ff:47:
                    8c:e7:81:ad:7d:f4:2a:33:a2:14:4e:aa:30:6b:e7:
                    61:05:6d:31:db:58:9c:e2:be:8a:ed:29:6e:af:b3:
                    b8:95:da:f2:75:70:a4:2c:cf:48:0a:11:7a:9c:76:
                    f0:43:3e:14:b8:7b:67:39:19:ec:e7:a0:25:fc:ec:
                    71:0f:13:19:55:ac:3d:d4:1e:ff:86:9d:f5:bb:b5:
                    95:66:5e:fa:85:15:dc:5d:0e:3b:54:be:58:15:1f:
                    3e:d2:4f:af:08:d4:d0:2a:63:a2:e8:98:90:0e:b7:
                    b2:6d:89:ad:34:c1:d3:29:35:ca:16:f1:ea:59:dd:
                    2d:de:7f:55:c1:70:af:eb:d5:89:f2:a3:4b:f0:80:
                    90:d3:56:60:16:bc:26:fa:c4:f1:1e:cd:4c:90:68:
                    04:ef:ad:a0:05:38:ad:01:2e:17:16:23:f1:b2:7f:
                    d6:bd:88:d2:ae:6d:be:0f:0a:42:db:1d:8d:be:50:
                    55:99:83:51:60:f9:89:de:f1:99:a2:a0:76:d7:18:
                    a7:d8:9e:1b:ba:82:3b:d8:c4:63:60:fd:3e:c9:e0:
                    80:63:8f:f9:e3:1f:7f:c0:d7:ec:49:4b:f6:02:51:
                    01:72:6d:56:cc:1f:fe:9e:f3:dd:2f:60:ef:5f:a8:
                    4e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:4E:92:D4:73:20:ED:3A:1D:3D:EF:F0:E6:DD:F7:2E:E6:5B:B4:32
            X509v3 Authority Key Identifier:
                keyid:8B:DC:33:95:A2:07:90:E2:B5:87:12:C4:5C:C1:72:35:2B:05:BB:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ZkqGNN3aQi2tSj9i2zJVXtd556QKswFWacWToPfgkZk/0/8BDC3395A20790E2B58712C45CC172352B05BB02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BDC3395A20790E2B58712C45CC172352B05BB02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ZkqGNN3aQi2tSj9i2zJVXtd556QKswFWacWToPfgkZk/0/323830343a373062303a383030303a3a2f33332d313238203d3e20323730373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70b0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         6e:e4:54:c0:f3:2f:14:1c:6a:cc:9b:9e:5d:a5:d1:c8:9b:07:
         87:58:07:f2:74:46:53:db:8c:92:9b:65:b6:ab:64:57:22:de:
         b2:28:09:e4:83:aa:fd:37:13:95:6e:dc:bd:2b:87:86:ba:a3:
         0d:2f:ed:80:99:bf:c4:99:77:19:26:0c:3f:f7:04:8e:4e:ae:
         85:d7:af:b5:7f:51:aa:af:06:c7:f8:8a:ca:0b:54:2b:90:98:
         e8:9f:8c:31:0a:05:dc:64:e0:98:bb:ac:25:44:39:1c:3e:29:
         2c:50:93:c7:3b:d4:43:88:32:66:28:a0:99:5b:44:53:d8:0e:
         26:4c:79:1f:7b:30:c8:98:c7:1e:30:83:b5:d5:96:3c:9e:bb:
         61:6c:f2:0d:2c:73:75:34:5a:9c:06:5c:6f:5e:45:0b:26:2c:
         b1:94:27:bd:b7:67:2f:95:34:6c:eb:dc:16:14:95:da:d0:ae:
         52:96:73:86:96:b0:8a:2c:4e:49:4f:17:cb:97:47:e5:1e:a2:
         63:91:a4:93:a1:4e:8a:8c:f7:46:43:46:9f:ba:97:36:ac:28:
         5c:a7:18:7a:03:bb:02:4c:e4:9a:1b:0f:7e:b2:78:90:56:10:
         8c:78:fe:db:4a:fc:c7:54:2a:f1:b0:1b:9e:70:83:56:4a:7f:
         0f:08:ea:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org