Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/323830343a323562343a633030303a3a2f33342d3334203d3e20323634323937.roa
File:                     323830343a323562343a633030303a3a2f33342d3334203d3e20323634323937.roa (raw, json)
Hash identifier:          u3DdaYcgj+CI1TfFHR8yijtaQddfO0km+7D1+fiZlAY=
Subject key identifier:   65:C5:30:0C:A4:FE:1D:F5:4E:4C:68:BB:73:EB:78:58:39:C3:83:D5
Certificate issuer:       /CN=070B1B3AB7E59C42A791E094D81229555D5D0146
Certificate serial:       3FCFE1638E29FE8E07AD908A580940AE5BEC34F4
Authority key identifier: 07:0B:1B:3A:B7:E5:9C:42:A7:91:E0:94:D8:12:29:55:5D:5D:01:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/070B1B3AB7E59C42A791E094D81229555D5D0146.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/323830343a323562343a633030303a3a2f33342d3334203d3e20323634323937.roa
Signing time:             Thu 25 Jan 2024 13:01:29 +0000
ROA not before:           Thu 25 Jan 2024 12:56:29 +0000
ROA not after:            Thu 23 Jan 2025 13:01:29 +0000
asID:                     264297
IP address blocks:        2804:25b4:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:cf:e1:63:8e:29:fe:8e:07:ad:90:8a:58:09:40:ae:5b:ec:34:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=070B1B3AB7E59C42A791E094D81229555D5D0146
        Validity
            Not Before: Jan 25 12:56:29 2024 GMT
            Not After : Jan 23 13:01:29 2025 GMT
        Subject: CN=65C5300CA4FE1DF54E4C68BB73EB785839C383D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a2:b5:e2:6c:d5:7a:e9:4e:96:59:81:1e:92:
                    7f:f1:ce:b4:85:d1:df:79:69:d6:ca:26:0a:1c:07:
                    71:d4:cc:4e:91:19:83:7b:ab:1d:74:50:eb:1f:e0:
                    1b:62:49:40:66:4c:e4:84:2f:5e:c4:32:6b:84:1b:
                    dd:77:3a:c8:38:75:99:47:9e:59:ca:d2:07:1e:7f:
                    6b:5a:86:59:23:cb:b8:b9:ed:98:2a:91:8a:73:f0:
                    a9:4b:76:43:b5:5d:09:29:87:43:e9:8a:92:5d:e5:
                    65:d5:ab:aa:d4:40:26:fe:01:99:6b:2a:b7:3e:71:
                    9c:6f:42:ea:75:e2:50:c7:9e:9e:f4:b7:34:50:ab:
                    7a:a1:b9:11:c5:66:bd:98:9a:f7:c2:7f:ae:0c:90:
                    f8:60:5f:8a:0d:fc:43:47:16:04:b9:fc:c1:24:66:
                    a0:cc:fc:27:5e:d7:7f:2e:de:ff:29:42:30:d1:07:
                    4b:a1:94:a2:fd:cb:a8:e8:ba:9b:30:43:32:3c:dd:
                    05:a8:df:e9:71:99:a8:d3:a8:1a:e7:e7:53:ed:4b:
                    17:40:32:c2:f4:49:09:07:7a:29:50:d2:3e:cb:aa:
                    8c:0f:30:d2:e0:a9:0f:10:e2:02:23:d2:88:62:aa:
                    80:38:39:b9:b8:76:fc:d4:af:1d:0d:4f:46:4b:b8:
                    05:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C5:30:0C:A4:FE:1D:F5:4E:4C:68:BB:73:EB:78:58:39:C3:83:D5
            X509v3 Authority Key Identifier:
                keyid:07:0B:1B:3A:B7:E5:9C:42:A7:91:E0:94:D8:12:29:55:5D:5D:01:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/070B1B3AB7E59C42A791E094D81229555D5D0146.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/070B1B3AB7E59C42A791E094D81229555D5D0146.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/323830343a323562343a633030303a3a2f33342d3334203d3e20323634323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25b4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1d:78:86:e6:81:29:c5:4d:15:92:db:29:c4:7d:68:82:ca:c8:
         96:af:6e:e0:3b:ad:f5:57:da:f9:40:1e:e8:c9:36:4c:99:ac:
         ea:48:8b:be:ff:27:4e:a7:54:6d:1a:9a:31:da:ed:e3:cc:82:
         10:06:a8:10:eb:97:50:0c:d7:1e:91:1d:03:49:ae:54:81:15:
         25:4c:98:1a:53:f2:23:c0:ed:e2:fd:18:1c:69:b2:06:ea:db:
         af:44:5f:fe:b4:b1:f3:71:99:be:3d:27:7e:9c:a1:e4:e1:c9:
         c1:2e:55:30:54:a5:4b:90:4d:e6:fa:7d:df:e6:6a:3f:68:ce:
         98:c5:83:49:24:f1:e5:20:eb:9d:7f:e3:0a:04:32:d0:5f:6c:
         26:f4:43:62:82:46:1e:89:03:78:ef:d8:a7:9a:b8:55:1b:9e:
         6f:45:01:de:d0:c7:51:1d:91:07:2b:7e:43:71:6f:76:e1:b0:
         d3:eb:79:e4:f4:55:a4:a1:9d:40:b6:ec:f2:1e:71:b2:9e:0f:
         26:4e:eb:68:65:c2:a4:06:5f:3c:09:e3:a6:d5:1c:b6:b8:48:
         4f:f4:49:1f:fd:31:38:31:d5:c4:f5:9e:07:83:95:b3:73:47:
         ca:4d:b4:18:ff:ac:84:ab:5b:6e:95:13:6a:52:21:b9:69:53:
         b4:82:78:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org