Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/0/323830343a366638633a383030303a3a2f33332d3333203d3e20323730363638.roa
File:                     323830343a366638633a383030303a3a2f33332d3333203d3e20323730363638.roa (raw, json)
Hash identifier:          IT/f8oj9eOobgRrI1AJIkI+u6EG2kNOognaALCP7RFc=
Subject key identifier:   04:AD:DA:BE:01:66:00:D9:7F:B3:31:02:25:EC:05:10:77:FD:5E:B3
Certificate issuer:       /CN=070EA8E1952151A5527479507E6D4DB57EAC2C66
Certificate serial:       369BAD7FEA187ADE467197EDA3DAD81FA41FB106
Authority key identifier: 07:0E:A8:E1:95:21:51:A5:52:74:79:50:7E:6D:4D:B5:7E:AC:2C:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/070EA8E1952151A5527479507E6D4DB57EAC2C66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/0/323830343a366638633a383030303a3a2f33332d3333203d3e20323730363638.roa
Signing time:             Wed 22 Nov 2023 13:43:51 +0000
ROA not before:           Wed 22 Nov 2023 13:38:51 +0000
ROA not after:            Wed 20 Nov 2024 13:43:51 +0000
asID:                     270668
IP address blocks:        2804:6f8c:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:9b:ad:7f:ea:18:7a:de:46:71:97:ed:a3:da:d8:1f:a4:1f:b1:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=070EA8E1952151A5527479507E6D4DB57EAC2C66
        Validity
            Not Before: Nov 22 13:38:51 2023 GMT
            Not After : Nov 20 13:43:51 2024 GMT
        Subject: CN=04ADDABE016600D97FB3310225EC051077FD5EB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4c:c1:f2:40:cc:f9:8f:56:c4:4c:19:02:80:
                    48:06:81:f7:5d:74:c4:96:2e:8f:fc:44:19:ab:50:
                    87:18:f1:9a:f3:ab:25:c0:1e:8c:b8:c9:a3:a0:14:
                    66:ef:04:26:ec:ac:b3:d7:f9:f4:c4:84:76:a7:74:
                    0d:11:a5:6e:2d:f2:e4:0b:37:4c:47:86:1c:b6:46:
                    c1:c3:22:cb:c7:60:20:41:f8:a8:80:ba:cb:50:43:
                    16:36:69:c3:c4:a7:87:97:35:fb:ae:2f:76:23:ec:
                    52:bf:3b:8b:3c:e9:f4:31:2d:18:9a:7d:17:ea:62:
                    bb:e8:54:88:f5:21:49:a0:03:4f:9e:b0:41:47:2b:
                    f3:39:1f:81:76:d0:ca:45:33:31:6f:dd:e7:0e:7b:
                    44:58:4a:ea:9c:e3:c2:aa:3a:eb:07:b5:04:39:03:
                    e7:54:32:cd:67:87:ab:c8:bf:a7:73:17:bf:c3:78:
                    b6:1d:5f:0f:79:a2:c1:72:3f:18:32:f1:b9:ac:12:
                    70:c4:7c:96:05:d5:57:ce:8f:4e:0c:be:b3:bb:c3:
                    c4:ba:d6:eb:1c:d7:54:3b:d5:f6:43:b4:4e:8c:b3:
                    22:7f:eb:37:dd:2a:1f:ee:ae:81:7f:e0:2f:1c:43:
                    d3:1e:94:80:9d:99:63:c9:d9:f7:5f:de:48:55:e5:
                    d2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:AD:DA:BE:01:66:00:D9:7F:B3:31:02:25:EC:05:10:77:FD:5E:B3
            X509v3 Authority Key Identifier:
                keyid:07:0E:A8:E1:95:21:51:A5:52:74:79:50:7E:6D:4D:B5:7E:AC:2C:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/0/070EA8E1952151A5527479507E6D4DB57EAC2C66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/070EA8E1952151A5527479507E6D4DB57EAC2C66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/0/323830343a366638633a383030303a3a2f33332d3333203d3e20323730363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f8c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         22:f3:de:9f:cd:b3:c7:fb:21:70:32:af:3b:e9:2c:52:bf:c8:
         6a:77:ae:a8:a8:d7:88:c5:73:23:49:78:d5:6a:86:fe:42:57:
         bc:3c:e7:ab:24:25:1c:ac:c8:8f:c7:70:e1:dd:a4:e9:a0:ab:
         ca:86:ca:6b:39:86:3c:b5:7d:a7:3f:e1:9f:99:a0:8a:57:48:
         bc:2e:30:98:b8:73:63:9d:64:a4:41:79:2e:71:40:77:37:eb:
         5b:38:f5:0e:59:6b:22:fd:37:43:9c:23:57:3e:32:1d:6f:6f:
         61:a5:71:8a:c5:a8:d9:10:99:d2:37:2f:39:28:1c:3c:dd:bd:
         26:14:9d:ce:1f:91:3f:6c:31:1d:43:95:81:b6:9a:5e:60:30:
         3b:26:21:4c:cc:fe:6f:34:85:dd:7c:74:8d:e7:42:cc:65:10:
         66:16:90:6c:10:f3:7c:e6:46:f7:4b:b4:e1:22:5d:bc:d7:33:
         2f:3d:37:3c:de:c2:52:b0:91:fe:db:16:b8:3d:86:5e:c2:44:
         ee:72:d4:32:dd:48:e9:d3:88:e7:f1:ad:b1:c6:e5:4c:57:ec:
         b3:0f:98:3b:cd:7a:4c:52:80:e9:b9:58:59:69:51:89:c8:fe:
         5d:84:60:8a:10:02:56:51:80:46:f3:5d:54:bb:85:af:f1:ec:
         d3:6b:1b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org