Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/0/323830343a366638633a633030303a3a2f33342d3334203d3e20323730363638.roa
File:                     323830343a366638633a633030303a3a2f33342d3334203d3e20323730363638.roa (raw, json)
Hash identifier:          sKE3d1qsOc+WhU9HiX3iW9ZxDxyAgsU6vo0GHnCBrko=
Subject key identifier:   D3:D6:9D:78:D9:B9:61:95:3C:B5:AA:9E:BC:20:75:7B:21:07:85:6C
Certificate issuer:       /CN=070EA8E1952151A5527479507E6D4DB57EAC2C66
Certificate serial:       450F8CEF2675D1A5ED570A112C21E330F743B548
Authority key identifier: 07:0E:A8:E1:95:21:51:A5:52:74:79:50:7E:6D:4D:B5:7E:AC:2C:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/070EA8E1952151A5527479507E6D4DB57EAC2C66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/0/323830343a366638633a633030303a3a2f33342d3334203d3e20323730363638.roa
Signing time:             Wed 22 Nov 2023 13:43:59 +0000
ROA not before:           Wed 22 Nov 2023 13:38:59 +0000
ROA not after:            Wed 20 Nov 2024 13:43:59 +0000
asID:                     270668
IP address blocks:        2804:6f8c:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:0f:8c:ef:26:75:d1:a5:ed:57:0a:11:2c:21:e3:30:f7:43:b5:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=070EA8E1952151A5527479507E6D4DB57EAC2C66
        Validity
            Not Before: Nov 22 13:38:59 2023 GMT
            Not After : Nov 20 13:43:59 2024 GMT
        Subject: CN=D3D69D78D9B961953CB5AA9EBC20757B2107856C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ab:24:70:f9:b5:d2:05:fd:4a:28:01:c1:1c:
                    3b:c0:c0:a6:d0:9e:b4:06:fe:a4:e4:65:72:ce:97:
                    2e:68:73:a1:5f:cc:20:bf:c7:0d:9a:f7:ed:fc:36:
                    b8:dd:5b:6d:59:83:51:d2:be:09:e1:76:57:0a:1d:
                    b6:9c:06:25:cb:a4:c2:d8:4b:32:c9:f7:82:9b:38:
                    0f:55:c8:3c:50:f3:75:e4:f0:2d:ac:69:13:9b:8e:
                    02:45:47:d7:72:69:98:c6:bd:5c:5e:de:be:83:80:
                    1b:57:0d:ca:40:39:7b:3d:95:e0:dd:ae:9f:22:c8:
                    06:67:15:a5:87:c1:39:f7:31:80:61:ce:f3:d4:93:
                    a3:72:20:42:d8:45:bf:0c:dc:43:d6:16:b3:5b:09:
                    a2:49:58:33:74:a9:84:de:a4:26:f8:dd:f8:78:53:
                    24:8c:11:14:15:96:91:8d:ce:7a:df:60:4e:31:5e:
                    b0:91:e4:d1:49:ef:cf:ee:db:67:1c:d8:1f:61:7d:
                    26:1b:07:57:ff:53:83:8f:57:cb:56:db:36:7d:e2:
                    a6:dd:de:2c:54:8a:ec:15:69:98:cd:c1:ff:18:db:
                    d9:8b:ca:8c:64:60:18:a8:2a:58:2b:c3:7c:b1:6f:
                    74:9b:b2:79:79:00:56:7b:cc:5a:df:d4:45:e6:26:
                    55:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:D6:9D:78:D9:B9:61:95:3C:B5:AA:9E:BC:20:75:7B:21:07:85:6C
            X509v3 Authority Key Identifier:
                keyid:07:0E:A8:E1:95:21:51:A5:52:74:79:50:7E:6D:4D:B5:7E:AC:2C:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/0/070EA8E1952151A5527479507E6D4DB57EAC2C66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/070EA8E1952151A5527479507E6D4DB57EAC2C66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/0/323830343a366638633a633030303a3a2f33342d3334203d3e20323730363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f8c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         54:65:02:d0:4a:6e:08:d6:48:83:5f:3b:f2:e2:d9:9a:65:66:
         9b:69:e8:a7:7c:68:76:72:a1:6c:56:6c:c4:9f:f1:2a:0d:a1:
         23:00:db:e1:64:90:6b:80:ee:1c:75:3f:62:e3:37:31:4c:26:
         f7:19:57:9f:58:e7:61:08:e6:44:1c:69:58:6b:45:e7:46:ee:
         47:75:2d:8b:58:80:94:12:59:fc:50:d2:cb:30:9a:67:8e:7d:
         35:5f:f5:38:46:74:40:a0:6e:d7:e4:50:f2:a7:b9:29:de:2d:
         b3:7b:d2:b0:5c:bc:a6:af:b6:d2:bf:20:f9:f9:d8:c0:28:03:
         47:eb:75:0a:f5:18:18:9e:0e:63:aa:15:83:8f:ae:07:99:f9:
         0c:b1:18:96:b6:90:26:5e:6c:4f:b5:4f:ae:60:30:ae:a3:fe:
         47:31:0c:88:b0:26:e0:50:fb:93:c3:2c:cc:26:9f:a8:f4:f6:
         8b:9a:4b:38:33:2a:f9:01:15:5c:22:56:e7:86:82:d5:e2:59:
         b5:ce:0f:a3:79:80:a3:1c:ff:f7:8f:57:e5:b5:f8:a5:a4:09:
         7b:8c:57:86:77:3a:aa:6f:6b:3b:27:99:b9:b9:a3:a4:b5:e0:
         b8:52:83:26:cd:b2:ae:82:23:21:09:67:2d:4f:86:47:09:0d:
         9d:7c:3b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org