Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7n7JhEsGrwnddSxjuWu64x5bPpBF7Kx7AnpC8YnErAqR/0/323830343a346336303a633030303a3a2f33342d3334203d3e20323637333637.roa
File:                     323830343a346336303a633030303a3a2f33342d3334203d3e20323637333637.roa (raw, json)
Hash identifier:          LJg5JNt0PEs5fYCtheXSmbhZQQLYJbP5E0nhocTV73I=
Subject key identifier:   D1:0E:AB:31:DA:18:12:82:EF:ED:9A:16:09:54:56:67:5B:58:2D:8C
Certificate issuer:       /CN=5D5C6E4C3EC02C344E2F9E2BC4C0B6D7879896B9
Certificate serial:       2C9E0D004CCCE082BF207190D547E639F8B77097
Authority key identifier: 5D:5C:6E:4C:3E:C0:2C:34:4E:2F:9E:2B:C4:C0:B6:D7:87:98:96:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D5C6E4C3EC02C344E2F9E2BC4C0B6D7879896B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7n7JhEsGrwnddSxjuWu64x5bPpBF7Kx7AnpC8YnErAqR/0/323830343a346336303a633030303a3a2f33342d3334203d3e20323637333637.roa
Signing time:             Tue 18 Jan 2022 20:34:13 +0000
ROA not before:           Tue 18 Jan 2022 20:29:13 +0000
ROA not after:            Tue 17 Jan 2023 20:34:13 +0000
asID:                     267367
IP address blocks:        2804:4c60:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:9e:0d:00:4c:cc:e0:82:bf:20:71:90:d5:47:e6:39:f8:b7:70:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D5C6E4C3EC02C344E2F9E2BC4C0B6D7879896B9
        Validity
            Not Before: Jan 18 20:29:13 2022 GMT
            Not After : Jan 17 20:34:13 2023 GMT
        Subject: CN=D10EAB31DA181282EFED9A16095456675B582D8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b3:63:4b:a7:10:79:42:19:08:5e:3a:c9:26:
                    04:77:ba:f0:92:97:a6:75:d7:56:33:cb:17:6f:ed:
                    0e:33:8c:25:4a:3b:0a:dd:a2:9f:32:cd:4e:e7:ae:
                    5d:b2:c7:cc:5a:b8:bf:52:93:e0:d0:24:42:98:9d:
                    76:0b:d4:61:b7:0d:f4:fe:d4:6b:fa:b9:90:70:3d:
                    a4:03:a1:52:75:86:2f:da:9d:d1:f9:b8:a1:1b:9d:
                    30:5a:8b:89:0b:c7:21:7e:49:64:20:8b:42:7a:5c:
                    d6:14:4a:01:7a:04:09:7e:e4:35:01:ad:db:12:a1:
                    48:99:0f:31:01:d9:c8:3e:25:c0:60:8e:a7:a8:aa:
                    08:81:cf:0d:63:2a:74:bf:4b:15:2d:15:2c:8c:0b:
                    16:c3:44:60:b4:15:6f:58:97:47:0a:89:93:5a:59:
                    e2:38:40:5e:aa:b3:0c:e0:40:0e:26:95:37:92:58:
                    42:a9:4f:24:6c:3c:ce:6f:60:34:75:07:1f:6e:ce:
                    9e:12:ce:13:39:ec:5b:5f:dc:1b:02:e4:f8:15:96:
                    53:fd:9b:01:9f:47:06:70:bf:c5:a0:08:b7:af:cf:
                    ba:a1:c3:f8:9f:c6:4f:1e:d9:3b:51:0b:29:24:37:
                    62:b2:73:ba:91:3e:e9:45:61:4c:4e:53:a9:30:47:
                    6e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:0E:AB:31:DA:18:12:82:EF:ED:9A:16:09:54:56:67:5B:58:2D:8C
            X509v3 Authority Key Identifier:
                keyid:5D:5C:6E:4C:3E:C0:2C:34:4E:2F:9E:2B:C4:C0:B6:D7:87:98:96:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7n7JhEsGrwnddSxjuWu64x5bPpBF7Kx7AnpC8YnErAqR/0/5D5C6E4C3EC02C344E2F9E2BC4C0B6D7879896B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D5C6E4C3EC02C344E2F9E2BC4C0B6D7879896B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7n7JhEsGrwnddSxjuWu64x5bPpBF7Kx7AnpC8YnErAqR/0/323830343a346336303a633030303a3a2f33342d3334203d3e20323637333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c60:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5c:12:06:75:22:7c:70:dd:c7:95:99:2a:9e:58:6f:8a:1e:17:
         7f:cf:9d:17:8f:21:1a:dd:ad:f8:1a:c7:b8:ee:c8:e2:52:d9:
         26:50:ba:2a:f6:49:f6:79:3e:d8:19:3a:b9:66:31:7f:94:4c:
         09:c0:4b:bf:9e:c6:e6:f7:4c:cd:bc:68:c2:98:5e:01:aa:6d:
         7b:59:ef:90:01:09:bd:a9:ea:9b:3c:41:82:92:3c:6d:03:a5:
         73:47:b4:17:d9:ff:95:e3:48:33:36:d6:a1:9f:6a:96:58:ec:
         49:75:57:cf:67:84:c3:5b:3b:aa:d2:b7:ec:43:a5:d2:3c:93:
         74:22:9d:fa:f8:d2:02:6a:e9:d8:67:2e:78:a1:45:bb:cb:f8:
         e6:ef:df:cc:e0:57:53:3f:0d:5d:df:d6:4e:c9:39:bf:00:3e:
         b5:64:61:ef:e9:a2:79:72:77:56:39:d9:8c:4f:5d:85:1a:f9:
         c2:bd:97:f1:4b:6d:21:b9:c8:2f:73:f4:e2:1e:7c:09:52:14:
         e4:35:01:8d:fe:56:17:82:ce:05:71:e1:dd:a6:b2:25:c8:56:
         f2:bf:46:8c:3d:01:66:2f:88:bc:4a:1e:2d:a6:09:4a:a8:5d:
         0a:9a:f9:a5:5d:8b:05:19:69:23:f7:f5:8f:4a:3e:28:08:6a:
         10:be:30:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org