Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfbAA81sCyYPqAxgjrCJWmr6vy6tCX2iSi77nHLdqRD6/0/323830343a363064303a3a2f33322d3332203d3e20323639313933.roa
File:                     323830343a363064303a3a2f33322d3332203d3e20323639313933.roa (raw, json)
Hash identifier:          1VP78Gp4exgKnnDq0v2H51+v3v1tEYeC0hTeTiqpce0=
Subject key identifier:   A7:9E:06:75:39:8B:94:BA:DB:45:F4:35:FD:CA:39:83:2B:79:18:6F
Certificate issuer:       /CN=7E1C9DFBF956AE58E299A737FBB5A0A6D9B6E04D
Certificate serial:       798B484F2E7B6EB7B67A68EF42EC167AC6E70554
Authority key identifier: 7E:1C:9D:FB:F9:56:AE:58:E2:99:A7:37:FB:B5:A0:A6:D9:B6:E0:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E1C9DFBF956AE58E299A737FBB5A0A6D9B6E04D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfbAA81sCyYPqAxgjrCJWmr6vy6tCX2iSi77nHLdqRD6/0/323830343a363064303a3a2f33322d3332203d3e20323639313933.roa
Signing time:             Tue 12 Oct 2021 14:22:00 +0000
ROA not before:           Tue 12 Oct 2021 14:17:00 +0000
ROA not after:            Tue 11 Oct 2022 14:22:00 +0000
asID:                     269193
IP address blocks:        2804:60d0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:8b:48:4f:2e:7b:6e:b7:b6:7a:68:ef:42:ec:16:7a:c6:e7:05:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E1C9DFBF956AE58E299A737FBB5A0A6D9B6E04D
        Validity
            Not Before: Oct 12 14:17:00 2021 GMT
            Not After : Oct 11 14:22:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f3:6b:c1:4b:4b:86:e1:ee:22:f6:ae:3b:ee:
                    70:f4:b6:64:e7:5f:25:19:e2:cc:ce:05:77:da:dd:
                    ce:0a:05:83:fd:38:29:46:76:33:6c:0b:1c:bc:cc:
                    83:6c:92:60:75:5e:36:eb:73:b3:52:d6:ed:5a:15:
                    1d:8c:21:cb:ed:56:d0:30:fe:ec:6e:08:7d:45:3f:
                    75:62:e8:5b:4a:ce:94:20:0b:f4:b0:52:d2:d2:10:
                    4c:2d:96:8d:2f:cf:44:5c:35:3a:0f:8a:a6:3e:27:
                    89:99:f4:8e:76:1c:6a:ac:b6:81:db:88:09:37:8e:
                    05:2c:9e:35:f0:ad:35:c9:9b:8a:b3:68:cf:ac:67:
                    b4:88:41:70:5d:9e:ed:47:93:22:9f:a8:2b:79:e2:
                    e0:f6:34:34:56:c0:fd:a0:c5:55:bf:9b:43:9a:6a:
                    46:69:a7:5c:a6:99:9c:b5:45:3e:96:f1:7e:6d:58:
                    c4:51:96:17:27:a0:20:69:07:4d:be:09:76:9a:f8:
                    6f:59:de:0d:7a:bd:8e:17:9b:33:6f:79:a3:6f:1e:
                    56:13:bf:fa:c0:00:63:06:3e:bf:89:0b:f6:dc:71:
                    1c:22:44:11:45:29:ab:6b:b9:83:f1:5a:36:ec:db:
                    ea:5b:3e:83:89:3a:1a:fe:c5:72:71:a1:70:e5:95:
                    0d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:9E:06:75:39:8B:94:BA:DB:45:F4:35:FD:CA:39:83:2B:79:18:6F
            X509v3 Authority Key Identifier:
                keyid:7E:1C:9D:FB:F9:56:AE:58:E2:99:A7:37:FB:B5:A0:A6:D9:B6:E0:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfbAA81sCyYPqAxgjrCJWmr6vy6tCX2iSi77nHLdqRD6/0/7E1C9DFBF956AE58E299A737FBB5A0A6D9B6E04D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E1C9DFBF956AE58E299A737FBB5A0A6D9B6E04D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfbAA81sCyYPqAxgjrCJWmr6vy6tCX2iSi77nHLdqRD6/0/323830343a363064303a3a2f33322d3332203d3e20323639313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:4a:e0:5f:1a:68:66:e6:0b:26:27:d1:b1:49:c9:76:e9:c1:
         3c:a0:61:5e:51:5c:59:02:a4:e4:87:63:60:d7:16:a0:a8:e2:
         78:30:f2:8b:d0:b1:b3:07:5b:3e:c6:f3:fe:00:0d:44:f5:ac:
         46:45:5c:28:b9:32:65:af:b0:92:af:63:b4:ac:ed:f5:91:0b:
         8c:08:81:86:cf:98:73:90:ba:4a:64:ed:ba:07:84:e8:72:01:
         1f:d4:40:ea:b0:7b:4e:db:c2:de:d6:f9:3f:2a:60:07:23:61:
         02:d6:7c:e5:54:b2:09:9c:ac:ee:27:35:70:b3:f1:f7:6f:48:
         48:7c:22:6e:cd:77:68:3d:0d:b1:f1:c0:f7:b1:3d:ff:72:b6:
         88:49:1e:4f:7b:23:18:be:d5:19:ff:60:7b:05:52:64:0c:2c:
         93:10:59:cb:78:f9:ce:b8:45:2e:34:78:48:3d:17:c9:21:eb:
         8d:2e:c6:d9:59:72:f4:09:cd:61:34:59:9c:2d:f5:90:c8:05:
         3a:cd:b0:fe:32:70:4e:21:b6:5b:a6:b6:2c:c1:cb:0b:44:55:
         11:f5:1e:a6:a7:66:9a:51:a3:b1:31:bf:7c:32:75:b1:08:43:
         fb:e2:f7:54:3a:4f:38:9e:3d:af:48:02:02:c1:cb:96:78:8e:
         c3:8f:2f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org