Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/0/323830343a343931343a383130303a3a2f34302d3430203d3e20323637313633.roa
File:                     323830343a343931343a383130303a3a2f34302d3430203d3e20323637313633.roa (raw, json)
Hash identifier:          1pM51VHArcur3oH7P8kiC65EZ72ynT3qEoh6W7lUU0Y=
Subject key identifier:   7F:F8:48:0A:63:A7:9B:16:EC:CB:FE:FB:6E:52:20:C7:05:29:7A:2A
Certificate issuer:       /CN=76018B67F11DFF340AFE07EF575B4CCA68E2ECA2
Certificate serial:       3DE6E8D14F1B9AF135AE678B9FD8D294D082F596
Authority key identifier: 76:01:8B:67:F1:1D:FF:34:0A:FE:07:EF:57:5B:4C:CA:68:E2:EC:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/76018B67F11DFF340AFE07EF575B4CCA68E2ECA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/0/323830343a343931343a383130303a3a2f34302d3430203d3e20323637313633.roa
Signing time:             Fri 22 Apr 2022 10:46:17 +0000
ROA not before:           Fri 22 Apr 2022 10:41:17 +0000
ROA not after:            Fri 21 Apr 2023 10:46:17 +0000
asID:                     267163
IP address blocks:        2804:4914:8100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e6:e8:d1:4f:1b:9a:f1:35:ae:67:8b:9f:d8:d2:94:d0:82:f5:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76018B67F11DFF340AFE07EF575B4CCA68E2ECA2
        Validity
            Not Before: Apr 22 10:41:17 2022 GMT
            Not After : Apr 21 10:46:17 2023 GMT
        Subject: CN=7FF8480A63A79B16ECCBFEFB6E5220C705297A2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:2b:66:d5:17:3d:54:4e:34:64:d7:1d:51:b5:
                    95:62:d2:f2:65:00:c6:47:d4:8c:5b:a5:5a:bb:db:
                    2a:93:c2:24:38:4a:cc:57:d0:ae:e2:24:be:cc:5f:
                    6a:2e:54:08:4f:69:d6:76:2f:ae:63:b9:21:8f:f7:
                    ce:e0:17:7c:c9:d5:16:10:a7:6d:13:b0:b6:f8:41:
                    3f:96:b7:66:2e:a7:10:ad:2f:9c:87:7c:54:82:f4:
                    b9:9b:87:f3:10:7a:fc:6c:fc:8d:3e:a4:05:dd:c9:
                    3e:3d:5c:a4:2d:d0:67:a9:0a:db:21:57:c7:9e:72:
                    2c:8d:75:5f:32:5f:45:a0:32:5f:9e:17:54:5b:07:
                    80:e5:9f:25:a9:8d:83:30:e8:bd:70:88:94:8d:01:
                    21:f8:db:33:7a:bd:03:98:2d:19:0e:b6:4f:b0:b2:
                    c2:48:ad:59:6f:cc:6b:23:48:a7:ac:16:28:8a:a5:
                    60:2d:b9:14:bb:38:d3:bb:28:db:1d:33:54:d3:ff:
                    18:0c:d5:10:9c:81:bf:db:cb:58:15:c5:c2:f3:9e:
                    18:a1:c4:68:0f:08:19:75:4d:22:6a:45:d8:29:36:
                    71:5a:63:15:8f:48:79:84:14:65:3d:12:a3:a2:2c:
                    6a:41:28:33:c5:16:1e:44:f5:fd:2a:f0:0f:11:33:
                    a8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F8:48:0A:63:A7:9B:16:EC:CB:FE:FB:6E:52:20:C7:05:29:7A:2A
            X509v3 Authority Key Identifier:
                keyid:76:01:8B:67:F1:1D:FF:34:0A:FE:07:EF:57:5B:4C:CA:68:E2:EC:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/0/76018B67F11DFF340AFE07EF575B4CCA68E2ECA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/76018B67F11DFF340AFE07EF575B4CCA68E2ECA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/0/323830343a343931343a383130303a3a2f34302d3430203d3e20323637313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4914:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         2a:97:63:43:83:1d:d8:97:66:4b:26:56:b1:7c:3d:5b:6d:55:
         cc:aa:85:04:c2:05:c7:70:16:b4:96:ea:5a:d5:2c:60:cb:83:
         8d:e9:c3:2a:c6:48:20:df:ab:18:87:76:0e:94:d4:34:0d:d9:
         ef:1b:c4:3f:8a:8e:3c:65:25:8f:ae:dc:f4:42:cb:15:be:5c:
         b5:dd:21:3d:8f:7e:8e:d9:4c:6a:d6:50:63:0e:24:e4:b9:66:
         ec:6c:ab:99:ab:d6:57:a5:6d:87:eb:da:44:e2:34:46:70:80:
         4f:b0:07:59:99:d5:a4:52:ab:33:f1:0b:2a:3a:37:64:2e:4b:
         70:38:06:93:67:f5:06:a4:3a:f8:9d:af:71:cd:1c:ef:2b:a6:
         7b:20:9e:1d:08:58:42:a9:27:18:d3:75:a6:79:cf:49:e0:45:
         e3:aa:6c:0b:53:01:46:8f:e8:5a:f6:bf:a3:9e:5f:6a:f6:2d:
         cb:26:85:86:79:3f:be:40:67:a1:3c:78:8e:87:ae:69:e0:54:
         d3:0d:da:b6:1a:6a:35:1a:1e:af:6c:40:07:32:0e:1c:f8:70:
         80:33:31:31:7b:d8:94:e5:8f:10:f7:9d:c5:3e:9d:ec:9b:5d:
         ef:4c:b5:37:21:2e:9b:0f:9e:76:e5:29:23:66:d5:c5:dd:04:
         2e:f9:17:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org