Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/0/323830343a366638633a3a2f33342d3334203d3e20323730363638.roa
File:                     323830343a366638633a3a2f33342d3334203d3e20323730363638.roa (raw, json)
Hash identifier:          SX7Q8JSjmWghr+Xd4pJVX9Q1+pqUREki4OKJwLIpEgc=
Subject key identifier:   72:84:AA:F8:59:0F:74:D6:DB:E7:DC:48:CF:7A:31:1C:87:F4:5E:90
Certificate issuer:       /CN=070EA8E1952151A5527479507E6D4DB57EAC2C66
Certificate serial:       43D38F02128E803EAC36A36E89FEC56837844906
Authority key identifier: 07:0E:A8:E1:95:21:51:A5:52:74:79:50:7E:6D:4D:B5:7E:AC:2C:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/070EA8E1952151A5527479507E6D4DB57EAC2C66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/0/323830343a366638633a3a2f33342d3334203d3e20323730363638.roa
Signing time:             Wed 22 Nov 2023 13:43:46 +0000
ROA not before:           Wed 22 Nov 2023 13:38:46 +0000
ROA not after:            Wed 20 Nov 2024 13:43:46 +0000
asID:                     270668
IP address blocks:        2804:6f8c::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:d3:8f:02:12:8e:80:3e:ac:36:a3:6e:89:fe:c5:68:37:84:49:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=070EA8E1952151A5527479507E6D4DB57EAC2C66
        Validity
            Not Before: Nov 22 13:38:46 2023 GMT
            Not After : Nov 20 13:43:46 2024 GMT
        Subject: CN=7284AAF8590F74D6DBE7DC48CF7A311C87F45E90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:dd:92:e3:bd:f0:33:10:82:97:53:13:6f:bb:
                    dd:4a:38:ec:b7:03:cf:4e:6b:a7:d5:3f:b5:d1:b2:
                    5c:ce:e8:6a:63:98:95:b3:3f:59:7b:23:3b:d2:65:
                    ca:96:2e:f3:27:cf:74:6f:dd:f2:3d:79:e1:e9:56:
                    fa:a0:5a:90:48:2c:3e:50:a5:35:08:f5:be:e0:72:
                    d2:04:ef:28:fc:d8:0b:7c:29:1a:da:32:22:19:f9:
                    a8:89:22:98:df:40:3f:3e:96:a8:74:0e:03:53:73:
                    c8:cf:11:b0:d0:bf:ed:ac:84:ed:a3:ee:3f:6e:94:
                    24:8c:80:4c:f4:86:ee:bf:67:ef:5e:b3:1b:0c:20:
                    09:4c:ea:cf:9f:2d:81:17:a6:66:e4:b9:c5:02:f2:
                    cf:c2:18:b7:f0:8e:46:22:a2:36:f7:c0:3b:b7:15:
                    4c:11:d7:ba:98:ef:2d:19:a5:1c:8b:cb:d4:bf:cf:
                    52:0e:4b:57:fb:74:db:f2:44:bb:03:c7:c0:ba:b2:
                    99:de:5b:51:2f:18:bb:d4:f2:47:84:f8:57:91:25:
                    7c:eb:66:c0:dc:6d:28:ce:12:a5:f4:a9:30:07:45:
                    bc:6e:50:18:e0:ef:c3:2a:1e:ca:73:a6:31:e0:67:
                    7f:f5:6d:d0:5f:07:13:d9:42:25:a3:54:41:32:91:
                    d4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:84:AA:F8:59:0F:74:D6:DB:E7:DC:48:CF:7A:31:1C:87:F4:5E:90
            X509v3 Authority Key Identifier:
                keyid:07:0E:A8:E1:95:21:51:A5:52:74:79:50:7E:6D:4D:B5:7E:AC:2C:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/0/070EA8E1952151A5527479507E6D4DB57EAC2C66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/070EA8E1952151A5527479507E6D4DB57EAC2C66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/0/323830343a366638633a3a2f33342d3334203d3e20323730363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f8c::/34

    Signature Algorithm: sha256WithRSAEncryption
         88:d7:0f:39:aa:47:4b:20:a2:1e:b7:47:db:7c:ca:b5:db:92:
         1a:5d:0d:37:49:77:6e:7b:fe:6e:9f:bd:58:83:62:b5:22:cc:
         57:86:4b:49:61:1b:44:12:b5:02:86:d0:ab:1c:cf:3d:a7:57:
         fc:34:10:c2:30:39:32:32:2f:a9:f9:25:7e:11:d7:bd:6f:4f:
         c8:70:0a:09:de:0c:06:ee:86:64:e1:3a:cf:61:28:30:c4:15:
         74:6b:70:58:a4:d4:09:ac:19:f8:74:20:74:90:57:b8:1e:4f:
         c0:04:25:a1:84:7a:06:8e:56:26:1c:5a:eb:38:c2:00:55:bb:
         a0:1a:de:76:39:82:d0:99:b3:08:0f:14:81:3f:e5:e4:fe:22:
         2c:e0:c9:18:fe:20:c8:4b:09:d3:88:46:19:d1:3f:18:9e:bd:
         68:21:5e:06:d7:ed:19:23:71:59:a6:be:a6:6a:1c:64:cf:9d:
         5e:7b:60:20:25:8e:d2:43:a1:8f:0f:da:bc:c9:79:d7:34:9b:
         d3:87:c8:08:06:c6:12:d1:48:63:4d:ef:2a:31:53:97:76:de:
         5a:01:14:db:3b:19:13:0b:7f:37:29:28:cc:e2:11:9b:a3:fd:
         d0:19:96:cc:7e:ac:f6:ff:ed:9f:d9:7c:02:81:62:d7:f2:30:
         b1:26:1e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org