Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/323830343a356466303a633030303a3a2f33342d3334203d3e20323639303032.roa
File:                     323830343a356466303a633030303a3a2f33342d3334203d3e20323639303032.roa (raw, json)
Hash identifier:          f7PY0m6NAYAfAGWgEp1BPYDFXD3711rEwNS7ByMDTuQ=
Subject key identifier:   99:FC:F2:63:F7:CC:0B:50:55:3B:64:63:B5:DE:8E:CF:74:DA:32:70
Certificate issuer:       /CN=8237DDE51B18AADB84750FDA42C6D04EB290CDB7
Certificate serial:       636FCD265B46234E5B1416AC81985A9D45C37732
Authority key identifier: 82:37:DD:E5:1B:18:AA:DB:84:75:0F:DA:42:C6:D0:4E:B2:90:CD:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8237DDE51B18AADB84750FDA42C6D04EB290CDB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/323830343a356466303a633030303a3a2f33342d3334203d3e20323639303032.roa
Signing time:             Sun 24 Jul 2022 22:58:08 +0000
ROA not before:           Sun 24 Jul 2022 22:53:08 +0000
ROA not after:            Sun 23 Jul 2023 22:58:08 +0000
asID:                     269002
IP address blocks:        2804:5df0:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:6f:cd:26:5b:46:23:4e:5b:14:16:ac:81:98:5a:9d:45:c3:77:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8237DDE51B18AADB84750FDA42C6D04EB290CDB7
        Validity
            Not Before: Jul 24 22:53:08 2022 GMT
            Not After : Jul 23 22:58:08 2023 GMT
        Subject: CN=99FCF263F7CC0B50553B6463B5DE8ECF74DA3270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:2c:e2:96:9f:fd:db:0b:f0:73:c4:12:fb:fa:
                    b0:c3:9e:bf:60:e5:54:41:d8:e1:a8:74:ff:07:09:
                    a0:05:58:f2:0a:1c:97:c9:17:46:c1:6f:1f:8c:20:
                    9a:b5:ec:32:ae:93:36:4f:58:27:c1:bd:bc:d8:38:
                    4b:3a:92:39:c7:ea:11:92:de:31:10:75:ea:47:b5:
                    cd:d3:5c:f8:1c:c0:37:d6:63:ec:cc:62:d4:2a:1f:
                    25:43:b9:3d:35:a0:08:01:8d:bb:7c:96:6a:fe:d6:
                    99:ba:db:8b:ba:ac:5c:cf:00:ed:40:2e:60:0e:e8:
                    cd:1d:20:fe:c9:77:b3:6b:e7:f9:64:fb:90:70:26:
                    d1:40:30:a9:d6:2e:ca:48:05:4e:9f:af:45:5c:73:
                    5e:b7:34:b2:06:ed:a4:fd:c3:3d:7d:16:3d:ac:81:
                    ea:09:06:94:5f:e4:91:6f:45:27:54:f1:e9:18:79:
                    42:e4:d7:26:92:02:01:90:90:cd:40:ad:0b:01:d0:
                    13:b9:31:5a:c4:73:26:7b:62:24:74:90:cc:73:89:
                    29:6c:59:21:9f:53:cd:cf:c2:4c:0f:12:34:53:44:
                    18:e3:84:20:30:c0:ee:12:ac:b6:35:7b:ae:b6:f9:
                    3f:55:2e:f7:c0:32:8d:61:7f:dc:9a:22:8a:8f:0e:
                    51:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:FC:F2:63:F7:CC:0B:50:55:3B:64:63:B5:DE:8E:CF:74:DA:32:70
            X509v3 Authority Key Identifier:
                keyid:82:37:DD:E5:1B:18:AA:DB:84:75:0F:DA:42:C6:D0:4E:B2:90:CD:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/8237DDE51B18AADB84750FDA42C6D04EB290CDB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8237DDE51B18AADB84750FDA42C6D04EB290CDB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/323830343a356466303a633030303a3a2f33342d3334203d3e20323639303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5df0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         80:7a:39:4a:f6:7a:64:17:77:2b:fa:15:90:e4:47:3a:be:a4:
         b9:e1:61:b3:3d:05:95:01:ed:b1:52:7e:bc:a4:91:d5:29:85:
         f2:77:ba:de:40:63:d6:e1:44:ae:88:53:17:89:2b:fc:75:60:
         8a:1b:11:ca:a7:66:3c:8b:82:1b:0f:3d:06:6b:06:0c:f7:4f:
         2b:5c:7b:de:e5:6c:8d:08:ff:9b:88:f3:d3:6b:c8:b4:e0:42:
         0b:15:a2:5d:3d:eb:ac:39:1e:a4:f2:18:fc:2b:86:61:7b:98:
         35:a8:ae:7c:4a:da:75:39:60:c3:65:d9:50:2a:b9:26:6d:00:
         e2:c5:37:ab:c4:c1:77:d9:56:98:43:dd:05:61:e9:84:d9:98:
         5d:ea:d3:48:ef:e2:9c:99:a4:a4:9f:13:f8:cf:71:fd:fb:14:
         39:41:80:56:b0:43:d7:7f:6f:b4:d9:77:a4:a7:86:91:ff:e3:
         a6:d9:3c:57:b4:35:89:c4:66:4a:ef:c0:01:d7:24:40:f3:2c:
         36:e5:e1:d3:3c:77:2f:0e:e5:32:f5:d6:50:2d:56:12:48:d5:
         35:13:2b:d5:05:ea:9f:7b:3f:13:48:4d:a7:10:7c:41:60:20:
         bd:9b:e3:55:da:1b:66:09:60:b5:e2:d2:ca:95:67:42:f7:94:
         41:f7:ef:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org