Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ZkqGNN3aQi2tSj9i2zJVXtd556QKswFWacWToPfgkZk/0/323830343a373062303a383030303a3a2f34382d3438203d3e20323730373432.roa
File:                     323830343a373062303a383030303a3a2f34382d3438203d3e20323730373432.roa (raw, json)
Hash identifier:          b6jEb1yNrw+rATs357G6xAMcHpbgSH+YWooXB9gGrHo=
Subject key identifier:   50:32:87:28:7C:64:BC:30:54:F7:52:57:81:E3:4C:7C:99:BF:B0:A1
Certificate issuer:       /CN=8BDC3395A20790E2B58712C45CC172352B05BB02
Certificate serial:       530DA4BF5424E8DDBE1786060F075D02B4B9DB43
Authority key identifier: 8B:DC:33:95:A2:07:90:E2:B5:87:12:C4:5C:C1:72:35:2B:05:BB:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BDC3395A20790E2B58712C45CC172352B05BB02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ZkqGNN3aQi2tSj9i2zJVXtd556QKswFWacWToPfgkZk/0/323830343a373062303a383030303a3a2f34382d3438203d3e20323730373432.roa
Signing time:             Thu 23 Feb 2023 04:04:23 +0000
ROA not before:           Thu 23 Feb 2023 03:59:23 +0000
ROA not after:            Thu 22 Feb 2024 04:04:23 +0000
asID:                     270742
IP address blocks:        2804:70b0:8000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:0d:a4:bf:54:24:e8:dd:be:17:86:06:0f:07:5d:02:b4:b9:db:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BDC3395A20790E2B58712C45CC172352B05BB02
        Validity
            Not Before: Feb 23 03:59:23 2023 GMT
            Not After : Feb 22 04:04:23 2024 GMT
        Subject: CN=503287287C64BC3054F7525781E34C7C99BFB0A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:12:b1:7e:82:de:3d:98:0f:7d:08:f9:2e:6c:
                    cc:90:8c:0c:78:bf:3e:77:74:74:bb:87:e8:02:8d:
                    6f:5d:70:01:74:c1:f7:66:9d:21:5a:b9:44:ca:11:
                    4d:fc:67:2a:3a:27:c7:98:bd:99:e9:52:71:9d:d2:
                    8f:4b:bf:fa:7a:d2:ad:1b:08:3a:39:57:d5:19:e3:
                    f4:d9:df:bb:22:6a:e1:f4:20:f2:a0:9b:5e:c6:58:
                    3f:ba:8b:91:5c:94:d0:51:b5:f2:34:1b:23:a9:e4:
                    a1:12:d7:52:a3:e0:e6:83:92:bd:36:d7:e4:2b:d1:
                    99:92:48:22:39:44:02:af:49:ec:dd:94:41:b7:07:
                    46:c6:e2:0f:3f:e5:20:1c:bb:01:df:17:50:ac:d6:
                    f7:79:58:52:17:dc:c6:47:1e:83:ad:11:cb:48:70:
                    1a:0c:ec:70:dd:b4:0b:17:80:e5:b6:2d:68:d0:ea:
                    ed:35:2f:a9:d6:ec:b3:47:a1:60:83:65:a9:ac:d2:
                    2a:9f:85:6d:16:ca:9e:66:05:a4:2f:a2:b8:e1:09:
                    61:69:df:5c:42:1d:13:eb:fc:1c:cf:b5:dc:ba:97:
                    5d:e6:13:0c:bd:35:5a:3a:15:18:21:cf:6d:39:0e:
                    b5:cb:9a:d3:a2:92:e0:d4:41:85:df:ba:0f:76:17:
                    27:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:32:87:28:7C:64:BC:30:54:F7:52:57:81:E3:4C:7C:99:BF:B0:A1
            X509v3 Authority Key Identifier:
                keyid:8B:DC:33:95:A2:07:90:E2:B5:87:12:C4:5C:C1:72:35:2B:05:BB:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ZkqGNN3aQi2tSj9i2zJVXtd556QKswFWacWToPfgkZk/0/8BDC3395A20790E2B58712C45CC172352B05BB02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BDC3395A20790E2B58712C45CC172352B05BB02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ZkqGNN3aQi2tSj9i2zJVXtd556QKswFWacWToPfgkZk/0/323830343a373062303a383030303a3a2f34382d3438203d3e20323730373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70b0:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:96:97:9f:94:66:73:c2:44:76:02:27:cd:61:df:ba:5b:b3:
         1a:b9:9d:1c:32:54:57:b7:7b:31:de:b0:26:7f:31:b6:9c:24:
         22:57:b6:89:ac:35:50:f3:77:0d:99:6b:46:31:4b:49:66:e9:
         f6:a4:ae:5c:41:6b:f1:1e:d3:d3:81:62:b2:ec:cf:52:bc:5b:
         3a:5c:73:27:96:da:47:5f:26:64:03:b4:50:a3:c6:55:f0:b4:
         21:3a:69:e6:39:4f:1b:db:d5:e6:76:f9:a5:8d:f4:2c:12:ac:
         bb:16:38:e7:4f:b0:d2:61:ca:52:0d:1f:cc:e4:85:69:2a:cf:
         9b:5e:e9:1a:52:26:b4:02:14:3d:2d:d5:50:90:89:4f:6f:85:
         fd:28:ac:42:df:3e:55:4f:db:1d:a0:16:af:4b:2a:ba:9e:ba:
         35:08:8e:71:f7:c2:dd:22:cf:3e:e1:b6:fd:a5:21:9a:ec:ea:
         52:a3:ff:0a:ba:65:02:62:b1:82:91:f4:15:d1:ae:e8:ed:c5:
         6c:79:1b:7e:8b:26:bc:29:4f:43:01:50:b7:a2:55:a4:6d:be:
         1f:d2:a9:aa:04:a4:53:90:6b:7f:52:fc:9b:a8:41:3a:c6:fa:
         7e:50:42:60:68:62:55:5b:ac:25:75:b7:65:33:6e:94:f2:dd:
         94:0d:20:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org