Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/323830343a313137633a383030653a3a2f34382d3438203d3e20323632313832.roa
File:                     323830343a313137633a383030653a3a2f34382d3438203d3e20323632313832.roa (raw, json)
Hash identifier:          chFlw6rEERT7ajsp6JVQ80VzCJaq8gbuZMWIeZhY+hs=
Subject key identifier:   7E:88:5D:77:A4:BE:47:51:CC:14:8D:EE:CD:07:28:FB:6C:04:8F:43
Certificate issuer:       /CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
Certificate serial:       48C068764D140BD10B7A0E015C0B5D58B2431500
Authority key identifier: 64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/323830343a313137633a383030653a3a2f34382d3438203d3e20323632313832.roa
Signing time:             Thu 06 Apr 2023 19:20:45 +0000
ROA not before:           Thu 06 Apr 2023 19:15:45 +0000
ROA not after:            Thu 04 Apr 2024 19:20:45 +0000
asID:                     262182
IP address blocks:        2804:117c:800e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c0:68:76:4d:14:0b:d1:0b:7a:0e:01:5c:0b:5d:58:b2:43:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
        Validity
            Not Before: Apr  6 19:15:45 2023 GMT
            Not After : Apr  4 19:20:45 2024 GMT
        Subject: CN=7E885D77A4BE4751CC148DEECD0728FB6C048F43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9e:67:7b:84:16:64:56:88:88:04:cc:6f:a6:
                    19:c9:c9:aa:f7:29:59:4f:0f:e7:7b:52:05:9c:a0:
                    d2:98:a0:d4:39:b3:32:f7:21:43:36:39:85:ff:c8:
                    ff:e7:0b:3e:c0:d3:63:67:03:d2:fe:c0:43:1a:95:
                    46:6f:a7:0e:8e:ee:e6:19:57:03:03:7e:cc:0f:60:
                    6d:b9:8d:1d:be:a0:27:ba:eb:8a:54:9d:0a:95:16:
                    36:7a:f6:26:c2:dc:a1:84:2c:03:39:5a:3b:b7:06:
                    a1:7a:41:90:3a:f0:e4:36:89:95:9e:ba:97:4f:36:
                    ff:62:b1:cf:ce:c6:46:c1:e4:6d:c1:6a:36:63:2c:
                    a4:20:15:0f:bc:1d:a8:c9:0f:0a:1e:4f:2c:c0:83:
                    ff:af:c8:11:94:21:69:56:be:98:8a:50:15:a1:d2:
                    09:6f:06:0e:9e:20:04:b4:56:df:22:39:38:5b:cd:
                    89:90:02:8e:b2:88:55:d7:3d:4f:58:70:e6:4e:10:
                    ec:8b:d3:9b:40:81:c8:f1:79:d0:04:80:ae:8b:2d:
                    63:50:ac:31:25:04:49:3d:78:36:82:61:1f:d2:bf:
                    82:cb:3e:ce:84:b4:34:d6:88:51:87:f8:5a:cb:53:
                    2d:95:de:d9:0f:87:f5:76:35:c0:9a:db:48:75:a0:
                    0b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:88:5D:77:A4:BE:47:51:CC:14:8D:EE:CD:07:28:FB:6C:04:8F:43
            X509v3 Authority Key Identifier:
                keyid:64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/323830343a313137633a383030653a3a2f34382d3438203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:117c:800e::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:ba:b2:1d:84:95:3c:7d:20:00:b8:8d:a4:4e:86:18:81:94:
         c8:a1:2b:76:3a:d3:8c:da:78:cf:b0:67:81:25:f4:95:be:af:
         f0:1c:30:61:12:c6:f4:6e:a4:f5:2b:15:33:8f:74:96:3d:e1:
         f7:af:bc:3c:17:3e:58:2e:11:89:2d:b3:aa:51:6c:e1:19:d5:
         52:ff:99:5d:2d:ff:e5:ea:ee:5d:7a:e4:de:4f:0d:dc:f7:7c:
         be:2d:9f:4c:11:42:b7:b4:da:6b:40:97:8a:08:34:e8:54:84:
         8c:f4:25:c4:52:31:cb:5c:ad:e8:78:91:d1:d5:40:18:76:c2:
         24:42:43:ac:aa:41:c3:47:2c:62:ad:f8:8d:1b:92:15:24:0c:
         c9:e4:92:86:c1:99:4d:d5:44:11:56:b6:11:70:f0:f3:92:3e:
         46:f2:c7:54:38:d8:9c:57:bf:42:64:1a:f7:c6:c2:3a:16:82:
         e0:32:5e:81:8a:c6:09:ee:ff:e4:29:17:a6:e9:10:70:cc:cf:
         54:6e:e9:a0:ba:e8:19:a3:7f:af:ad:a1:ee:0c:fc:b0:1d:5c:
         a8:3c:17:54:68:6e:67:76:5d:84:59:17:50:4d:e5:f3:25:88:
         a2:eb:b9:b8:39:91:05:83:ee:c1:f2:41:a2:8a:be:e2:58:e6:
         ac:b7:e0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org