Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/323830343a316131343a313030303a3a2f33362d3336203d3e203238313533.roa
File:                     323830343a316131343a313030303a3a2f33362d3336203d3e203238313533.roa (raw, json)
Hash identifier:          Ggya+42DT7zSM1twbhKNX0VLUBQ9PVsjjrbdtjYdUpk=
Subject key identifier:   71:D9:50:97:90:69:B2:9A:83:D0:A9:7B:F5:A0:63:BF:F1:DE:9E:39
Certificate issuer:       /CN=78C34AD0C3CD6C4545413ACDE88A0E20A1D6694F
Certificate serial:       640F3DE7DBCAF9BDBC741C7497FED067ADB8722C
Authority key identifier: 78:C3:4A:D0:C3:CD:6C:45:45:41:3A:CD:E8:8A:0E:20:A1:D6:69:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78C34AD0C3CD6C4545413ACDE88A0E20A1D6694F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/323830343a316131343a313030303a3a2f33362d3336203d3e203238313533.roa
Signing time:             Tue 12 Jul 2022 13:47:47 +0000
ROA not before:           Tue 12 Jul 2022 13:42:47 +0000
ROA not after:            Tue 11 Jul 2023 13:47:47 +0000
asID:                     28153
IP address blocks:        2804:1a14:1000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:0f:3d:e7:db:ca:f9:bd:bc:74:1c:74:97:fe:d0:67:ad:b8:72:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78C34AD0C3CD6C4545413ACDE88A0E20A1D6694F
        Validity
            Not Before: Jul 12 13:42:47 2022 GMT
            Not After : Jul 11 13:47:47 2023 GMT
        Subject: CN=71D950979069B29A83D0A97BF5A063BFF1DE9E39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:94:3b:62:a2:82:96:bb:a8:3a:0e:4f:53:53:
                    07:b4:71:44:06:a9:52:26:36:ee:27:44:64:24:85:
                    ea:09:47:f8:67:3a:62:28:3c:2d:27:a1:ca:92:58:
                    d9:37:8e:7a:1c:0b:e5:43:07:9f:e3:e0:8b:a9:b4:
                    2f:18:c4:bd:8b:54:9a:83:08:52:13:b2:66:4d:83:
                    b1:b1:d1:46:72:a2:9a:6b:44:71:69:47:3d:dd:56:
                    6e:ff:53:75:b6:7c:8b:55:85:b3:3f:78:d5:4a:df:
                    53:e5:a9:03:f9:fd:c2:6d:ba:ed:72:94:c9:19:a9:
                    e4:2b:14:0d:72:0a:3f:0b:2c:58:64:87:ab:6e:ca:
                    90:1a:ac:fa:23:6f:c1:23:f8:20:f8:0c:f3:e7:8c:
                    7e:c1:9e:88:da:a5:5a:59:4c:71:d0:93:f4:6f:09:
                    4c:90:14:07:5c:76:50:09:35:5f:da:b3:1e:f9:ad:
                    b6:93:55:0b:65:9a:c3:5b:39:19:a4:7b:e3:a4:8f:
                    12:69:d5:f4:90:7d:af:fe:c0:ca:8a:51:de:e6:31:
                    0b:56:c0:0d:37:b2:e8:6c:e9:74:b0:ed:54:5d:2a:
                    6d:de:3b:51:65:25:c8:45:bf:a1:dd:48:39:51:3d:
                    14:d9:bf:c7:90:e0:ff:d1:ea:a5:0e:ac:82:9e:63:
                    6f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D9:50:97:90:69:B2:9A:83:D0:A9:7B:F5:A0:63:BF:F1:DE:9E:39
            X509v3 Authority Key Identifier:
                keyid:78:C3:4A:D0:C3:CD:6C:45:45:41:3A:CD:E8:8A:0E:20:A1:D6:69:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/78C34AD0C3CD6C4545413ACDE88A0E20A1D6694F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78C34AD0C3CD6C4545413ACDE88A0E20A1D6694F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/323830343a316131343a313030303a3a2f33362d3336203d3e203238313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a14:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3a:05:de:e1:6b:0e:83:00:8d:e2:7e:d4:77:9f:29:27:2e:bb:
         31:1e:70:ec:3d:92:d4:f0:ac:15:36:3b:d5:94:04:5f:1b:28:
         56:d6:ee:4b:82:3d:65:4c:e5:2c:4e:6f:82:78:c3:43:e4:c1:
         d6:c9:51:15:68:2b:3d:d0:7b:96:26:19:12:b9:68:9f:bd:10:
         ca:cb:83:47:6d:77:51:7a:a9:69:f5:84:c1:ed:6a:f7:a1:a3:
         3b:83:1c:99:ac:a5:2b:1c:7d:83:a3:06:78:a7:02:de:3a:aa:
         cf:4a:61:bc:89:8d:d1:16:04:56:ae:0f:2e:4d:4c:c7:a2:6a:
         9b:28:e8:a9:fa:ca:54:64:2a:83:ce:18:a6:d0:4c:5e:02:70:
         05:6b:94:86:8d:a8:ab:e0:09:31:6f:a0:81:8c:05:76:5e:b9:
         a0:a0:8a:13:07:a2:d7:da:55:63:0b:60:ac:63:9c:13:be:13:
         75:57:6c:42:98:5a:6d:b3:af:d5:50:41:79:26:c6:4d:1a:98:
         0c:8d:c0:bf:be:78:9a:62:ca:7f:fe:51:1a:f1:13:d6:e8:e0:
         ab:11:05:dd:e5:b1:ea:d7:83:a6:e8:d1:df:46:0d:80:08:4f:
         a2:bb:52:ca:dc:48:09:87:3a:b1:f5:2d:b9:ab:ab:e2:64:9c:
         28:d0:ff:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:37 2024 by rpki-client on console-ams.rpki-client.org