Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ZkqGNN3aQi2tSj9i2zJVXtd556QKswFWacWToPfgkZk/0/323830343a373062303a3a2f33332d313238203d3e20323730373432.roa
File:                     323830343a373062303a3a2f33332d313238203d3e20323730373432.roa (raw, json)
Hash identifier:          606kw26WeIP0aJDefePV1wb6csGbngdEZAtWzdtyLw8=
Subject key identifier:   2A:0B:B9:4A:38:05:A5:32:17:7B:52:87:A5:97:C6:C2:F1:73:64:84
Certificate issuer:       /CN=8BDC3395A20790E2B58712C45CC172352B05BB02
Certificate serial:       2B0E07EE2474EB15567CF1616758B8F8F5DCC4BB
Authority key identifier: 8B:DC:33:95:A2:07:90:E2:B5:87:12:C4:5C:C1:72:35:2B:05:BB:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BDC3395A20790E2B58712C45CC172352B05BB02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ZkqGNN3aQi2tSj9i2zJVXtd556QKswFWacWToPfgkZk/0/323830343a373062303a3a2f33332d313238203d3e20323730373432.roa
Signing time:             Thu 23 Feb 2023 12:26:04 +0000
ROA not before:           Thu 23 Feb 2023 12:21:04 +0000
ROA not after:            Thu 22 Feb 2024 12:26:04 +0000
asID:                     270742
IP address blocks:        2804:70b0::/33 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:0e:07:ee:24:74:eb:15:56:7c:f1:61:67:58:b8:f8:f5:dc:c4:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BDC3395A20790E2B58712C45CC172352B05BB02
        Validity
            Not Before: Feb 23 12:21:04 2023 GMT
            Not After : Feb 22 12:26:04 2024 GMT
        Subject: CN=2A0BB94A3805A532177B5287A597C6C2F1736484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:0f:70:f6:d2:a4:2d:e9:58:ba:8f:22:32:61:
                    10:8b:1b:14:56:60:7c:0b:01:a5:90:70:d1:c3:32:
                    76:70:b6:7c:e9:43:e2:43:ce:d4:1d:7f:61:07:00:
                    9b:78:4b:f0:8c:33:f8:dc:75:10:0d:e3:6a:b7:29:
                    e0:88:c0:47:89:80:2e:0a:de:6f:b6:1c:d7:c3:18:
                    78:c4:6c:72:c2:30:b8:23:09:9d:6c:3e:ca:83:4e:
                    54:02:f3:b9:3e:ed:1e:33:3a:f4:4a:07:08:66:36:
                    63:91:5b:db:f1:8b:07:be:4f:89:73:ec:0c:2b:b5:
                    6e:73:97:33:f8:76:e3:1c:e0:0d:78:29:30:13:46:
                    b7:9b:29:83:1b:a5:52:5f:ea:ce:12:88:51:38:3d:
                    5a:8e:82:af:15:23:5d:9e:c2:5a:f6:0e:c4:7f:a6:
                    09:e8:a6:43:ec:73:8c:c5:47:53:b1:b5:f6:0f:4d:
                    18:3f:2f:07:99:db:ce:fb:e5:b5:da:9d:79:48:c2:
                    d2:0a:4c:8f:70:e2:24:af:2c:03:71:12:5a:c5:38:
                    8d:43:e6:70:38:55:30:4b:64:9f:83:1b:e4:fc:3f:
                    03:49:ba:2f:0d:80:68:53:22:79:fe:4c:27:c8:80:
                    ef:b1:78:4f:2b:6d:ac:0b:73:eb:09:c4:4c:11:7e:
                    11:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:0B:B9:4A:38:05:A5:32:17:7B:52:87:A5:97:C6:C2:F1:73:64:84
            X509v3 Authority Key Identifier:
                keyid:8B:DC:33:95:A2:07:90:E2:B5:87:12:C4:5C:C1:72:35:2B:05:BB:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ZkqGNN3aQi2tSj9i2zJVXtd556QKswFWacWToPfgkZk/0/8BDC3395A20790E2B58712C45CC172352B05BB02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BDC3395A20790E2B58712C45CC172352B05BB02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ZkqGNN3aQi2tSj9i2zJVXtd556QKswFWacWToPfgkZk/0/323830343a373062303a3a2f33332d313238203d3e20323730373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70b0::/33

    Signature Algorithm: sha256WithRSAEncryption
         bf:3e:03:a5:36:1b:a6:76:bd:58:f2:2b:00:34:32:bd:f5:5e:
         31:7f:5b:52:e9:b8:28:dc:d2:4f:34:ad:b2:64:70:30:a5:26:
         eb:2c:ca:61:03:22:97:6d:5d:1b:a2:ad:33:47:1d:d5:a8:99:
         46:53:e5:ef:bd:97:5f:02:d9:00:df:60:64:7a:3b:b9:54:38:
         04:bb:31:42:b2:a2:a9:2c:21:04:47:2a:29:91:e7:c0:56:39:
         e8:7d:6f:d1:2e:49:cf:8a:e6:09:64:4e:fb:17:17:e7:9d:e7:
         a7:ca:4a:e0:12:4b:92:2e:e2:15:d2:a1:34:e1:19:03:94:c8:
         50:7e:8e:eb:49:4e:4f:7a:8a:21:a9:4c:fc:17:e1:c1:5e:ad:
         ee:29:e2:49:88:59:17:05:de:cf:ca:56:9d:3b:1c:25:b4:60:
         1c:9f:a9:25:4a:56:59:a5:ff:b2:db:b1:c3:f9:75:1d:4a:42:
         e1:c6:99:97:ee:83:c9:19:be:6b:2b:82:9a:8d:71:9e:3d:e2:
         57:b8:2f:bb:94:4a:cf:c9:ad:8d:32:17:07:09:9b:37:5b:d0:
         86:eb:38:3f:8b:71:4e:91:23:37:2c:e4:c7:5a:43:0d:f1:77:
         a5:93:4e:b7:9f:cb:7d:b8:b2:47:8e:fd:42:16:b0:7d:82:93:
         bc:41:ff:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:41 2024 by rpki-client on console-ams.rpki-client.org