Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/323830343a323562343a666630303a3a2f34382d3438203d3e20323634323937.roa
File:                     323830343a323562343a666630303a3a2f34382d3438203d3e20323634323937.roa (raw, json)
Hash identifier:          WxXPHpanDkr5GdrrvIWGKPMPtuKE5WJSNUSVi285IjE=
Subject key identifier:   BB:4B:58:7D:81:0F:64:3D:92:47:86:72:4E:6A:96:40:2A:86:C8:F8
Certificate issuer:       /CN=070B1B3AB7E59C42A791E094D81229555D5D0146
Certificate serial:       79061910C49789EC15E173A2AE589B7503019841
Authority key identifier: 07:0B:1B:3A:B7:E5:9C:42:A7:91:E0:94:D8:12:29:55:5D:5D:01:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/070B1B3AB7E59C42A791E094D81229555D5D0146.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/323830343a323562343a666630303a3a2f34382d3438203d3e20323634323937.roa
Signing time:             Thu 25 Jan 2024 13:01:31 +0000
ROA not before:           Thu 25 Jan 2024 12:56:31 +0000
ROA not after:            Thu 23 Jan 2025 13:01:31 +0000
asID:                     264297
IP address blocks:        2804:25b4:ff00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:06:19:10:c4:97:89:ec:15:e1:73:a2:ae:58:9b:75:03:01:98:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=070B1B3AB7E59C42A791E094D81229555D5D0146
        Validity
            Not Before: Jan 25 12:56:31 2024 GMT
            Not After : Jan 23 13:01:31 2025 GMT
        Subject: CN=BB4B587D810F643D924786724E6A96402A86C8F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d3:51:07:83:b6:64:56:37:21:1c:7f:04:1a:
                    27:d1:30:03:79:d9:c4:36:f1:fc:ec:f0:94:e2:96:
                    2c:ef:60:e9:29:a3:7b:e0:3d:99:b0:d8:1a:8c:90:
                    34:b1:a0:ef:15:fd:4a:94:21:5c:12:d2:88:28:93:
                    a4:b9:20:cd:05:da:af:f1:0c:bc:64:d5:30:23:da:
                    19:8e:9a:d8:d3:90:19:7f:f1:90:96:9e:b4:00:a8:
                    c2:d4:4e:4d:34:60:be:98:9c:2d:02:9a:dd:a1:44:
                    9b:5a:38:70:6f:a5:30:fb:7c:1d:1f:69:36:5d:75:
                    02:27:15:4f:f7:53:5b:51:5d:42:77:b6:1a:da:a2:
                    65:8a:e7:f4:4b:2b:c8:d3:bb:22:0d:22:c6:db:9f:
                    ea:1b:5d:a8:2f:32:29:d6:d1:15:f8:81:b3:13:07:
                    10:37:a3:82:49:9b:ae:9a:03:1a:b7:4a:9c:52:47:
                    3b:47:18:0a:f0:b1:e5:e3:f5:f8:e8:5d:13:f6:59:
                    1f:de:15:52:00:c7:5a:17:b9:05:1e:60:89:cb:94:
                    18:99:0a:04:05:21:aa:91:6a:ec:32:0f:f3:7a:c8:
                    79:0a:30:1b:74:02:70:0d:91:f9:e1:ff:97:3c:57:
                    dc:63:47:6a:29:32:ce:fd:78:2a:68:59:1c:ab:35:
                    eb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:4B:58:7D:81:0F:64:3D:92:47:86:72:4E:6A:96:40:2A:86:C8:F8
            X509v3 Authority Key Identifier:
                keyid:07:0B:1B:3A:B7:E5:9C:42:A7:91:E0:94:D8:12:29:55:5D:5D:01:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/070B1B3AB7E59C42A791E094D81229555D5D0146.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/070B1B3AB7E59C42A791E094D81229555D5D0146.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/323830343a323562343a666630303a3a2f34382d3438203d3e20323634323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25b4:ff00::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:a7:f0:0f:f4:fb:d3:dc:64:b9:df:bc:4c:72:31:17:38:b7:
         ca:f4:c9:39:5a:4e:e4:37:c3:4e:a9:1c:88:2d:8f:66:4a:26:
         9d:d6:cd:30:e7:49:ca:b0:6c:08:3b:e3:dc:e2:88:94:dd:27:
         ad:79:79:30:53:39:66:a0:5d:42:7e:f7:9b:5f:8f:da:80:3b:
         78:aa:cd:ec:cf:cf:1a:81:c5:1c:7a:31:2b:1c:cc:d4:9c:bc:
         30:a2:24:2a:27:ef:06:d0:51:5d:50:ca:a4:56:98:c0:de:52:
         1e:79:11:d5:b7:b7:0c:9b:62:fd:29:b2:e0:a7:da:4d:16:6d:
         18:00:f8:fd:c0:99:02:e7:ef:16:a2:7a:87:e0:f8:c6:04:7c:
         03:8f:81:dd:15:a3:9e:48:4b:56:38:26:16:26:61:b6:25:c2:
         68:e8:da:de:94:91:81:5c:98:73:c2:05:4e:8c:2f:fe:89:8f:
         7b:ae:ef:68:4a:a8:ba:52:42:8c:56:0c:d0:2d:77:60:f9:ca:
         74:21:a8:c5:5e:2a:73:69:8b:d4:79:8c:1a:07:89:b7:4a:76:
         a7:72:37:1c:a6:3d:2d:2b:ac:e8:5f:77:52:ff:11:52:bc:2d:
         54:ba:83:bb:73:d2:fa:ab:8d:46:23:94:4f:9d:9e:47:f7:c3:
         0b:dc:6f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org