Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/323830343a323562343a343030303a3a2f33342d3334203d3e20323634323937.roa
File:                     323830343a323562343a343030303a3a2f33342d3334203d3e20323634323937.roa (raw, json)
Hash identifier:          bmkD+XblWyJ3pXGIX0bs7bq+zqlvXLRhJEG3OYPpRp4=
Subject key identifier:   6D:BC:61:53:21:EA:C8:7E:A9:CB:DD:CE:A1:66:03:AB:44:27:29:D1
Certificate issuer:       /CN=070B1B3AB7E59C42A791E094D81229555D5D0146
Certificate serial:       34BCABAC13948BC21DD0328CBC6A4BF9AF9CDD29
Authority key identifier: 07:0B:1B:3A:B7:E5:9C:42:A7:91:E0:94:D8:12:29:55:5D:5D:01:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/070B1B3AB7E59C42A791E094D81229555D5D0146.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/323830343a323562343a343030303a3a2f33342d3334203d3e20323634323937.roa
Signing time:             Thu 25 Jan 2024 13:01:24 +0000
ROA not before:           Thu 25 Jan 2024 12:56:24 +0000
ROA not after:            Thu 23 Jan 2025 13:01:24 +0000
asID:                     264297
IP address blocks:        2804:25b4:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:bc:ab:ac:13:94:8b:c2:1d:d0:32:8c:bc:6a:4b:f9:af:9c:dd:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=070B1B3AB7E59C42A791E094D81229555D5D0146
        Validity
            Not Before: Jan 25 12:56:24 2024 GMT
            Not After : Jan 23 13:01:24 2025 GMT
        Subject: CN=6DBC615321EAC87EA9CBDDCEA16603AB442729D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1d:cf:73:5f:09:2c:42:bf:a1:e0:f1:4c:b5:
                    32:6a:f4:62:74:b3:15:82:11:af:f4:cb:4b:92:bb:
                    02:51:16:3e:d4:77:a7:50:4e:d1:58:03:01:d7:54:
                    cf:9e:81:56:07:63:0d:86:c5:c6:18:d5:50:ea:ab:
                    91:24:99:c0:2a:1d:47:c9:b6:ad:5d:98:31:74:1d:
                    40:43:bc:ba:df:7d:59:96:bb:81:1c:99:0b:16:7f:
                    76:2f:0e:ac:49:a1:90:07:c1:71:3b:dc:84:d9:5b:
                    1a:b5:8d:2a:84:9a:95:e6:06:8e:61:7f:8d:fe:b5:
                    f9:ae:df:23:85:64:83:ed:29:75:5d:8e:9a:a0:b6:
                    45:2e:06:1b:a5:7c:35:f9:6a:38:ea:ab:54:d1:aa:
                    87:84:98:ab:55:92:05:31:8f:16:f6:67:9a:ea:c0:
                    a5:80:f9:d5:b2:12:c4:10:26:a9:24:f5:39:d5:9f:
                    34:aa:c5:a6:f1:61:a6:fd:3d:fb:00:89:82:9c:5b:
                    7d:27:fa:20:a8:1b:bb:28:6b:57:a4:ca:8b:21:1f:
                    05:3c:18:5f:c3:3e:f5:62:00:82:fb:98:71:b7:bf:
                    99:69:50:05:fc:56:99:82:7d:37:eb:4f:4a:62:99:
                    75:b9:0e:a4:37:be:35:04:9e:4a:6f:d4:f2:ab:91:
                    a8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:BC:61:53:21:EA:C8:7E:A9:CB:DD:CE:A1:66:03:AB:44:27:29:D1
            X509v3 Authority Key Identifier:
                keyid:07:0B:1B:3A:B7:E5:9C:42:A7:91:E0:94:D8:12:29:55:5D:5D:01:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/070B1B3AB7E59C42A791E094D81229555D5D0146.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/070B1B3AB7E59C42A791E094D81229555D5D0146.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/323830343a323562343a343030303a3a2f33342d3334203d3e20323634323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25b4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8a:5c:01:63:da:08:e6:3a:5e:66:b2:95:8a:d4:0d:99:58:1d:
         6d:6b:32:e9:33:13:14:f8:8d:b8:b8:d2:6b:ba:44:73:22:ad:
         3e:bf:12:cd:2c:70:00:f0:c7:f9:14:76:61:be:74:5e:02:09:
         8c:c1:b5:db:0a:38:a7:bc:0d:ae:e1:68:52:ae:54:d4:76:9d:
         51:64:4c:4d:d6:90:ae:86:16:3e:3a:c1:50:45:82:b9:00:9c:
         e0:36:e0:4b:71:e7:e1:4f:e7:e3:b4:bb:9e:a7:c2:cc:3a:c1:
         fe:dc:db:cd:34:ef:e6:1f:39:9b:e8:72:08:fe:f4:5c:10:5c:
         5d:dd:01:0a:8a:04:89:a4:96:7b:0a:c5:95:ed:f4:aa:c3:38:
         22:17:09:81:ff:e7:72:d4:b4:8d:47:e7:97:9f:26:4e:3b:68:
         94:e7:0b:93:f9:98:ac:a3:17:72:43:a7:e2:db:70:ca:d9:2a:
         3c:bf:26:2d:41:2d:b0:bc:33:40:7c:e8:b8:72:80:ae:81:3b:
         10:b7:cc:7a:b1:41:1b:fc:91:8a:e2:1f:cd:b8:58:1f:6b:2e:
         85:51:20:71:57:97:9f:60:6a:f6:68:92:cd:94:fd:d4:58:30:
         56:dd:6c:f7:01:e4:77:b1:b4:eb:c7:97:d1:bf:62:aa:98:15:
         fd:51:94:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org