Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/1/323830343a343237303a633030303a3a2f33342d3334203d3e20323637353030.roa
File:                     323830343a343237303a633030303a3a2f33342d3334203d3e20323637353030.roa (raw, json)
Hash identifier:          aRsVdIcHYEBvUl2ePnTeNgPWWZiebpea+5I+zDy7thM=
Subject key identifier:   E5:48:2F:35:F8:9A:97:B1:4F:62:1C:D6:27:70:76:0D:77:F2:31:BC
Certificate issuer:       /CN=0EA76B48B04B070E9B34381990B56558D874A94F
Certificate serial:       229F6F2C48A31AEABF4352281DFCD722D9C5B347
Authority key identifier: 0E:A7:6B:48:B0:4B:07:0E:9B:34:38:19:90:B5:65:58:D8:74:A9:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EA76B48B04B070E9B34381990B56558D874A94F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/1/323830343a343237303a633030303a3a2f33342d3334203d3e20323637353030.roa
Signing time:             Thu 04 Apr 2024 16:37:02 +0000
ROA not before:           Thu 04 Apr 2024 16:32:02 +0000
ROA not after:            Thu 03 Apr 2025 16:37:02 +0000
asID:                     267500
IP address blocks:        2804:4270:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:9f:6f:2c:48:a3:1a:ea:bf:43:52:28:1d:fc:d7:22:d9:c5:b3:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EA76B48B04B070E9B34381990B56558D874A94F
        Validity
            Not Before: Apr  4 16:32:02 2024 GMT
            Not After : Apr  3 16:37:02 2025 GMT
        Subject: CN=E5482F35F89A97B14F621CD62770760D77F231BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3f:12:5c:ee:49:a6:a0:22:09:3d:80:9d:f5:
                    07:af:8b:60:8f:95:f3:97:3e:7c:0e:17:7e:01:14:
                    43:2d:48:fc:68:72:c5:fd:e4:59:a8:55:ba:1b:2b:
                    d1:1f:97:3b:0b:df:4c:a3:23:ec:a0:d4:b3:86:62:
                    4d:51:12:5e:72:4a:0f:e3:ba:9b:28:2e:dd:da:23:
                    db:a1:27:cc:77:6f:d8:44:e8:0c:77:98:45:8c:6d:
                    2f:97:38:73:31:2d:9f:8c:8d:43:2c:b2:93:73:ea:
                    7a:97:8d:02:38:d7:7c:a4:a5:42:4b:7c:0e:00:79:
                    f8:26:11:fc:10:d9:07:35:04:d0:8b:7b:37:07:e3:
                    bb:71:48:ca:b5:24:eb:f6:7f:b4:22:24:ab:ce:cd:
                    03:65:0f:02:6c:7b:3e:36:72:1d:4d:8d:7b:38:0a:
                    f4:42:0d:20:81:e5:b4:f7:7b:c9:c4:bd:a4:24:99:
                    c5:55:db:0a:e2:7a:08:b3:95:a5:09:83:62:47:c4:
                    85:f4:7f:22:ad:04:fe:30:99:7a:d9:72:f8:bc:57:
                    0e:75:0c:61:e9:26:5e:17:6a:4c:6f:47:0a:da:18:
                    83:69:64:36:44:95:71:02:57:c3:24:44:bc:92:52:
                    89:b4:bc:53:db:d8:87:f4:24:29:31:45:39:89:e7:
                    5b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:48:2F:35:F8:9A:97:B1:4F:62:1C:D6:27:70:76:0D:77:F2:31:BC
            X509v3 Authority Key Identifier:
                keyid:0E:A7:6B:48:B0:4B:07:0E:9B:34:38:19:90:B5:65:58:D8:74:A9:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/1/0EA76B48B04B070E9B34381990B56558D874A94F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EA76B48B04B070E9B34381990B56558D874A94F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/1/323830343a343237303a633030303a3a2f33342d3334203d3e20323637353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4270:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b2:2b:d2:fe:0d:e4:7d:03:5d:86:60:92:98:d7:e7:c4:ec:24:
         96:4b:5d:ac:f1:d8:71:7b:ef:00:89:73:ae:98:c9:c9:ca:99:
         35:84:4c:a9:1d:88:46:2d:95:38:2c:47:9a:86:53:13:69:63:
         e7:38:f7:c5:54:3d:96:e0:0d:29:b3:87:6f:88:62:72:4c:07:
         ea:b6:54:69:70:fa:cb:99:24:97:14:e8:f8:6d:ed:1a:39:3e:
         a5:44:10:11:b9:e2:f5:1b:94:2a:ae:1f:e5:3c:41:42:52:42:
         c8:35:b9:b9:fd:3f:e7:9f:8a:59:a3:3a:56:8a:ba:56:ef:b1:
         f3:7e:a3:bb:ab:a6:30:cd:49:1f:e9:22:87:df:12:51:ad:31:
         5e:fe:67:77:d3:f3:0b:30:ed:76:6a:bd:e3:b0:83:29:63:f8:
         d8:fd:21:a1:51:b8:4d:62:52:4e:d0:10:5a:ee:67:4c:7a:82:
         c0:be:af:68:7f:95:3f:63:42:f3:14:f1:0c:3b:6c:b6:fd:e5:
         f1:f0:89:89:4c:7b:95:21:ac:c9:ea:ac:7e:a8:bf:77:ff:30:
         26:bf:52:8c:ce:25:35:b5:44:a4:54:27:de:33:fa:30:36:f7:
         bd:51:e4:1a:d8:dd:78:df:b2:71:c7:ce:7b:15:c7:e7:41:68:
         bd:c8:90:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org