Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/0/323830343a366137383a383030303a3a2f33332d3333203d3e20323730333338.roa
File:                     323830343a366137383a383030303a3a2f33332d3333203d3e20323730333338.roa (raw, json)
Hash identifier:          65GV/B1cSDRqXuz9OXB3LdIn/LLrJLN6iviKK28EirI=
Subject key identifier:   A6:29:9C:C3:AD:53:7E:F1:77:B2:61:56:85:A4:3A:AB:80:F0:EB:5F
Certificate issuer:       /CN=966322EBF60EAC72722BAA489C53B18FD38FE811
Certificate serial:       709D3364E8E34245CCF4D21E2E748815D1C45F37
Authority key identifier: 96:63:22:EB:F6:0E:AC:72:72:2B:AA:48:9C:53:B1:8F:D3:8F:E8:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/966322EBF60EAC72722BAA489C53B18FD38FE811.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/0/323830343a366137383a383030303a3a2f33332d3333203d3e20323730333338.roa
Signing time:             Mon 18 Dec 2023 15:53:57 +0000
ROA not before:           Mon 18 Dec 2023 15:48:57 +0000
ROA not after:            Mon 16 Dec 2024 15:53:57 +0000
asID:                     270338
IP address blocks:        2804:6a78:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:9d:33:64:e8:e3:42:45:cc:f4:d2:1e:2e:74:88:15:d1:c4:5f:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=966322EBF60EAC72722BAA489C53B18FD38FE811
        Validity
            Not Before: Dec 18 15:48:57 2023 GMT
            Not After : Dec 16 15:53:57 2024 GMT
        Subject: CN=A6299CC3AD537EF177B2615685A43AAB80F0EB5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e0:6f:44:bb:7e:c6:9b:f5:7c:80:34:77:16:
                    c1:93:fa:3c:3e:a6:5e:80:57:f7:36:9f:44:a0:4e:
                    2c:41:44:e1:df:ca:2a:d5:c9:2d:1b:09:98:0e:bc:
                    6a:bd:ed:99:77:13:6a:09:fe:13:80:34:55:cf:64:
                    d1:6f:6d:c8:7c:6c:c6:6b:75:7c:67:7d:dd:71:43:
                    6b:50:80:b6:21:74:a1:f5:3f:bd:37:9f:f0:45:70:
                    c6:4c:82:4f:0e:53:40:b7:30:2e:8c:c4:c9:f0:53:
                    97:7e:12:60:ec:57:5d:9b:32:cf:e2:0a:1e:5a:23:
                    47:2c:ec:0f:c6:01:bc:6a:66:5c:21:38:3f:52:ba:
                    4a:1e:8c:5a:17:23:31:d7:aa:46:a1:e1:0f:e8:94:
                    01:e0:e8:e5:23:24:87:60:32:03:f2:ed:e5:4d:16:
                    50:d7:63:16:cb:3e:07:d2:29:e8:ce:a5:a9:ab:1f:
                    e0:37:d0:2e:55:4b:25:23:2b:51:2a:ed:9a:88:b2:
                    88:38:5d:eb:0f:63:63:eb:b3:57:b5:f5:b1:86:71:
                    55:11:e3:41:58:cf:b8:95:14:2e:ea:b5:b5:a4:c4:
                    54:6c:e2:b7:a6:61:da:7c:31:c2:0e:2e:3b:0f:a7:
                    4d:4b:08:e0:97:36:4a:fa:f0:a5:5a:69:fc:31:ae:
                    15:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:29:9C:C3:AD:53:7E:F1:77:B2:61:56:85:A4:3A:AB:80:F0:EB:5F
            X509v3 Authority Key Identifier:
                keyid:96:63:22:EB:F6:0E:AC:72:72:2B:AA:48:9C:53:B1:8F:D3:8F:E8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/0/966322EBF60EAC72722BAA489C53B18FD38FE811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/966322EBF60EAC72722BAA489C53B18FD38FE811.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/0/323830343a366137383a383030303a3a2f33332d3333203d3e20323730333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a78:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         1e:ad:60:d1:b9:bb:4d:97:cb:03:8b:48:b5:44:40:06:00:93:
         55:dd:78:46:85:0f:0f:9d:3c:88:99:c3:2d:40:09:a7:08:79:
         6b:9b:3d:8a:ca:92:3e:a9:2e:93:64:b3:b8:64:0a:9e:38:9d:
         36:99:e3:a8:50:4d:a1:d7:83:b9:73:e3:94:5b:4c:06:12:ec:
         d7:39:0e:f2:1c:62:22:23:8e:d2:56:55:e0:42:08:55:5d:8e:
         83:76:fe:ac:45:f4:51:26:10:b7:04:1b:f7:00:07:92:e7:7b:
         0c:77:3c:a5:80:02:62:8e:f5:24:5f:b4:90:19:e1:0a:f8:68:
         bc:a7:35:30:d9:18:e4:b9:e3:3f:63:fb:72:54:27:4d:21:a6:
         7b:ca:67:2a:55:c1:4f:e4:db:03:95:39:1a:06:25:c8:df:01:
         66:9e:a8:0c:35:53:c0:b4:13:d0:6f:07:8f:0c:8f:94:38:41:
         fa:9e:06:45:c9:3a:80:ce:08:d2:bb:45:6b:27:35:9d:ae:3a:
         83:6b:44:f7:b4:02:66:15:e5:0a:ad:da:9a:74:5a:cb:b2:41:
         08:33:81:c6:8d:45:cf:c5:cc:a2:08:dd:3c:3a:7d:75:ad:24:
         d6:98:f7:81:ca:06:5a:63:12:8e:1e:55:c5:9f:97:9c:4a:03:
         06:a9:9a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org