Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/323830343a313137633a383030643a3a2f34382d3438203d3e20323632313832.roa
File:                     323830343a313137633a383030643a3a2f34382d3438203d3e20323632313832.roa (raw, json)
Hash identifier:          3YWRDTFQ6tw8zFHKWz6ZfBRNVcFxzTub0rJR6xQmsp4=
Subject key identifier:   EA:CE:91:F0:A9:5D:2A:11:F3:7F:C1:96:3C:AD:D6:82:38:00:A6:FE
Certificate issuer:       /CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
Certificate serial:       7018627960FDBAF368DC7015C72116358C082DF1
Authority key identifier: 64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/323830343a313137633a383030643a3a2f34382d3438203d3e20323632313832.roa
Signing time:             Thu 06 Apr 2023 19:20:47 +0000
ROA not before:           Thu 06 Apr 2023 19:15:47 +0000
ROA not after:            Thu 04 Apr 2024 19:20:47 +0000
asID:                     262182
IP address blocks:        2804:117c:800d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:18:62:79:60:fd:ba:f3:68:dc:70:15:c7:21:16:35:8c:08:2d:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
        Validity
            Not Before: Apr  6 19:15:47 2023 GMT
            Not After : Apr  4 19:20:47 2024 GMT
        Subject: CN=EACE91F0A95D2A11F37FC1963CADD6823800A6FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:13:0f:e1:71:a1:4e:83:3f:38:c4:14:b5:6d:
                    c3:33:94:d4:83:b1:29:27:fa:f9:b8:fc:40:51:37:
                    9e:4e:39:b2:7a:8a:93:3b:89:30:0f:71:84:be:ae:
                    dd:43:8a:cc:e9:3a:5b:d1:1d:3a:62:ed:09:4c:0c:
                    5e:17:e5:7f:cc:19:91:13:3f:7d:8f:50:9a:e4:2e:
                    f9:c7:60:cc:e1:b8:13:d1:f7:ff:ab:b1:d6:64:71:
                    4e:53:28:76:94:7f:6c:58:20:de:6e:5c:cd:6c:23:
                    c5:fe:cb:83:f1:f6:7f:f3:9d:67:50:ff:e9:a7:11:
                    08:78:0a:66:3c:3a:55:f7:f2:86:16:b9:79:c5:de:
                    77:27:f9:ed:da:93:a2:cf:60:81:a7:4c:0d:49:14:
                    5c:77:38:bb:fc:68:31:c1:e5:36:7c:38:69:27:a1:
                    f4:a5:8f:e9:b6:b0:7d:07:6f:fe:c0:17:ab:55:c7:
                    ec:be:cc:78:bd:da:a0:c5:d0:6d:17:0a:66:a8:7c:
                    95:97:92:c3:0a:da:41:dd:35:79:69:7c:1d:d8:94:
                    99:39:11:60:b5:d0:fd:bc:cd:e0:90:88:81:05:45:
                    de:f5:22:88:a0:28:07:8b:ea:b7:cf:5d:52:73:83:
                    8f:76:ea:97:44:dd:48:41:fe:da:37:f4:66:75:be:
                    f8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CE:91:F0:A9:5D:2A:11:F3:7F:C1:96:3C:AD:D6:82:38:00:A6:FE
            X509v3 Authority Key Identifier:
                keyid:64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/323830343a313137633a383030643a3a2f34382d3438203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:117c:800d::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:2f:d2:2f:fd:16:00:65:47:91:aa:fd:3e:e3:ad:1f:a7:a9:
         cb:3b:1a:1f:6f:81:97:95:76:ae:15:ed:ee:66:9f:a5:8e:b0:
         16:f1:db:b9:53:a4:3b:d6:3c:6b:53:cb:36:7d:d3:24:75:1e:
         92:6e:af:07:0a:9d:d5:52:e9:f7:b6:0f:a4:5f:7d:6c:b4:48:
         5b:6e:d3:8c:db:4d:f7:4b:23:cb:8a:e4:33:7f:a8:65:74:be:
         4e:7a:e1:c1:90:7b:77:2d:63:e1:97:f7:76:fe:28:f3:91:96:
         87:0a:58:82:12:eb:82:1e:be:f8:be:64:ef:91:f7:ce:f5:ae:
         bc:15:0f:8f:74:fc:6f:4a:86:0a:b8:51:85:ed:11:61:7d:ff:
         7d:85:c8:5e:2d:ed:fb:b2:5e:c2:d0:10:c6:4c:3f:83:22:44:
         92:0a:b4:20:17:5e:37:5f:03:41:62:f1:dc:5d:24:a7:be:77:
         4b:e7:e2:76:fd:4a:46:42:d6:36:ca:e1:e7:9b:24:d7:40:a5:
         b6:14:08:db:e8:fe:6b:aa:bd:e7:c9:31:b6:87:ab:13:38:fe:
         ac:5c:1e:ab:01:38:b2:79:d0:29:e9:17:6e:9c:37:e0:23:f1:
         84:25:dd:4b:db:83:1a:ce:ca:1a:41:79:75:23:9e:52:08:11:
         20:00:a9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org