Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/1/323830343a343237303a343030303a3a2f33342d3334203d3e20323637353030.roa
File:                     323830343a343237303a343030303a3a2f33342d3334203d3e20323637353030.roa (raw, json)
Hash identifier:          VFrXTQcqRV79l6Utx/VqRu6t0aHbh7BpYDXEMAYzR+4=
Subject key identifier:   63:B5:71:5C:72:AB:F5:EA:9E:83:93:71:71:B3:17:DA:71:92:19:13
Certificate issuer:       /CN=0EA76B48B04B070E9B34381990B56558D874A94F
Certificate serial:       7BDD669B912CC0E74FBC2C03A5BDA8030251D502
Authority key identifier: 0E:A7:6B:48:B0:4B:07:0E:9B:34:38:19:90:B5:65:58:D8:74:A9:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EA76B48B04B070E9B34381990B56558D874A94F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/1/323830343a343237303a343030303a3a2f33342d3334203d3e20323637353030.roa
Signing time:             Thu 04 Apr 2024 16:37:02 +0000
ROA not before:           Thu 04 Apr 2024 16:32:02 +0000
ROA not after:            Thu 03 Apr 2025 16:37:02 +0000
asID:                     267500
IP address blocks:        2804:4270:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:dd:66:9b:91:2c:c0:e7:4f:bc:2c:03:a5:bd:a8:03:02:51:d5:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EA76B48B04B070E9B34381990B56558D874A94F
        Validity
            Not Before: Apr  4 16:32:02 2024 GMT
            Not After : Apr  3 16:37:02 2025 GMT
        Subject: CN=63B5715C72ABF5EA9E83937171B317DA71921913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2c:02:07:01:09:52:9d:e2:54:bd:a5:71:54:
                    17:7c:9f:c4:7e:2d:00:e0:9c:3a:de:8e:03:7e:fb:
                    e4:5e:6a:cb:82:cc:df:80:38:2a:df:a1:81:c8:2f:
                    62:1b:47:02:a5:57:ee:d5:49:b6:80:8a:26:9b:45:
                    c6:4b:b1:b0:a4:86:04:e5:58:bd:78:14:0b:58:ec:
                    19:e5:38:be:49:b7:9e:51:2f:34:70:ec:2b:9f:97:
                    a2:05:1f:82:e2:98:40:99:37:57:14:6a:53:fd:da:
                    4f:63:24:55:96:a1:70:e3:33:03:4c:46:eb:9d:da:
                    45:b5:a1:5f:0f:3f:04:df:c7:52:a4:a5:4b:ee:63:
                    03:6f:63:33:4a:a4:79:af:5d:6e:0b:cc:be:33:97:
                    db:d9:8a:cc:2c:0b:47:55:54:85:34:79:95:4b:ae:
                    1e:b5:84:a0:3f:95:93:67:05:03:20:7f:2b:d1:04:
                    3b:4b:e4:d3:8e:1a:8c:ad:8a:92:34:53:bd:87:0d:
                    29:f4:ca:a8:f1:d9:57:3c:d9:b2:15:b1:20:37:bd:
                    02:c9:35:20:33:bf:d2:d2:9e:50:25:e5:02:c9:f6:
                    22:de:38:c8:56:35:4c:73:95:f0:4a:0b:23:a1:c5:
                    25:40:72:cc:65:b6:e5:3c:e2:39:a8:f3:32:a8:09:
                    74:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B5:71:5C:72:AB:F5:EA:9E:83:93:71:71:B3:17:DA:71:92:19:13
            X509v3 Authority Key Identifier:
                keyid:0E:A7:6B:48:B0:4B:07:0E:9B:34:38:19:90:B5:65:58:D8:74:A9:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/1/0EA76B48B04B070E9B34381990B56558D874A94F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EA76B48B04B070E9B34381990B56558D874A94F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/1/323830343a343237303a343030303a3a2f33342d3334203d3e20323637353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4270:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         2c:98:25:c1:b6:d4:b4:8b:d6:50:81:fa:b8:29:4a:08:3d:ff:
         a5:53:86:e7:bd:86:f9:5e:bc:5c:6e:a4:b9:a3:23:ad:7f:5c:
         ef:e6:ee:a2:c7:dd:f7:9f:ef:40:0e:a6:44:47:ee:14:61:34:
         7e:fa:33:d2:7a:bf:65:d8:82:37:00:3e:8d:c4:9f:58:cf:1a:
         db:47:bb:28:19:84:0b:40:8c:64:2a:ac:67:5b:1f:98:bb:0f:
         2e:40:f4:d2:f1:a3:cc:15:89:3f:bb:d7:90:dc:cf:af:54:aa:
         7e:f5:b9:bf:23:e2:1b:34:a8:86:71:9f:36:1d:a2:05:f7:f7:
         d3:98:df:b5:56:05:e1:43:7c:a9:90:5b:47:ad:64:2a:ce:64:
         78:12:c8:07:1d:f1:45:b4:22:84:13:2e:68:bb:dc:fe:b4:fd:
         e2:24:fa:57:69:3d:e5:39:77:fa:7b:dc:c2:72:b2:10:db:42:
         2c:c5:b8:e5:2d:8b:01:34:8d:c1:26:6b:56:4e:f6:ed:02:d0:
         e4:8d:42:22:12:f4:eb:1c:c7:1b:c8:06:eb:f0:80:6e:c1:f9:
         af:6e:6f:ad:9a:4f:bd:d1:93:ef:19:ca:1c:77:7f:32:59:35:
         cc:0d:e6:2a:f1:76:48:e2:85:1d:28:08:13:96:f5:13:e4:a8:
         3a:f5:f8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org