Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0/323830343a373762303a3a2f33322d3334203d3e20323033.roa
File:                     323830343a373762303a3a2f33322d3334203d3e20323033.roa (raw, json)
Hash identifier:          /ddo93MmF778TjPnpTzNC5/r3Plx4lIdgXKvNLHBHMQ=
Subject key identifier:   D6:D6:70:EB:B4:FB:D0:AC:E4:06:D3:7D:B6:14:22:87:08:79:B2:7E
Certificate issuer:       /CN=F21FFE74423AD60B71B14CBC9CD2B803E926BB0F
Certificate serial:       581AC34C2534184BBEE6B517705DA51E43EDE566
Authority key identifier: F2:1F:FE:74:42:3A:D6:0B:71:B1:4C:BC:9C:D2:B8:03:E9:26:BB:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F21FFE74423AD60B71B14CBC9CD2B803E926BB0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0/323830343a373762303a3a2f33322d3334203d3e20323033.roa
Signing time:             Mon 19 Dec 2022 19:06:32 +0000
ROA not before:           Mon 19 Dec 2022 19:01:32 +0000
ROA not after:            Mon 18 Dec 2023 19:06:32 +0000
asID:                     203
IP address blocks:        2804:77b0::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:1a:c3:4c:25:34:18:4b:be:e6:b5:17:70:5d:a5:1e:43:ed:e5:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F21FFE74423AD60B71B14CBC9CD2B803E926BB0F
        Validity
            Not Before: Dec 19 19:01:32 2022 GMT
            Not After : Dec 18 19:06:32 2023 GMT
        Subject: CN=D6D670EBB4FBD0ACE406D37DB61422870879B27E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bc:2d:00:76:c4:f6:62:bc:33:4d:13:90:bc:
                    27:ad:08:45:a2:90:c7:20:7a:49:4e:a1:e3:41:55:
                    d4:76:d0:df:70:1d:84:43:59:06:7a:d2:49:7f:e1:
                    7b:61:87:fe:45:ed:5a:d2:ce:5e:17:52:7e:7a:72:
                    e6:c0:63:e9:8b:95:c6:12:de:bd:3b:74:01:3c:e1:
                    ec:c0:58:a9:95:f6:53:27:ed:51:9b:fc:87:ff:bc:
                    8b:b6:db:05:5f:46:0f:53:f5:85:a5:51:c5:61:15:
                    ce:76:dd:7d:f6:27:57:26:c2:36:67:32:be:ab:3c:
                    13:05:b4:35:33:27:ea:3e:56:6b:72:1c:9b:d5:04:
                    21:e2:e7:77:af:f9:c1:cd:89:1b:7e:83:72:0e:09:
                    49:f9:99:04:d2:e7:11:a2:bf:24:82:17:8d:a5:3e:
                    2b:30:3d:28:5a:63:d6:91:9e:6c:84:5b:a1:08:91:
                    f2:fc:04:11:52:40:12:d6:b8:d8:12:d9:22:af:4a:
                    37:f0:99:00:11:ca:fd:98:92:e3:31:41:3f:e4:a8:
                    2f:fc:37:2c:65:4c:f4:71:0e:ff:90:69:b3:a9:1a:
                    68:8f:51:9f:9d:99:95:d3:38:1e:28:e2:04:bb:14:
                    11:a2:e9:0a:8a:9a:87:41:0c:a6:18:c8:71:21:80:
                    a5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D6:70:EB:B4:FB:D0:AC:E4:06:D3:7D:B6:14:22:87:08:79:B2:7E
            X509v3 Authority Key Identifier:
                keyid:F2:1F:FE:74:42:3A:D6:0B:71:B1:4C:BC:9C:D2:B8:03:E9:26:BB:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0/F21FFE74423AD60B71B14CBC9CD2B803E926BB0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F21FFE74423AD60B71B14CBC9CD2B803E926BB0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0/323830343a373762303a3a2f33322d3334203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:77b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:ec:7b:9a:8d:6d:f1:cb:16:83:7b:db:14:49:bf:8d:81:75:
         ef:55:9a:2d:95:d9:5c:28:6c:92:f9:51:00:4a:19:96:8e:b9:
         1a:28:0e:e6:4a:44:03:be:94:f9:e7:0e:e8:11:14:a2:84:64:
         5c:f1:07:7d:00:0b:78:f4:20:eb:5c:fb:41:d8:13:90:c7:2b:
         19:9c:5e:69:a4:13:56:30:1e:17:5f:a3:d7:2a:73:af:2a:35:
         78:7a:9c:e2:bb:27:62:f8:b4:14:f5:14:f5:92:40:4c:f4:bc:
         36:7d:8a:1c:88:66:d1:18:01:d8:94:ad:3b:b1:b9:20:0c:f2:
         64:a0:4f:c8:13:db:28:7e:8c:81:b7:e3:7d:da:59:dc:a5:1c:
         03:dd:bd:36:41:9d:4f:f4:c8:96:49:a8:f4:2d:b4:15:95:8a:
         22:bb:09:72:a3:5a:a2:39:41:80:d8:ce:23:24:fa:ae:48:5f:
         87:c3:29:78:28:a7:1b:5b:9c:f0:64:e9:b4:f5:43:7d:d8:6c:
         19:19:75:b0:3c:6f:cd:19:3a:8f:ed:64:ea:e7:2d:76:38:41:
         e6:30:ac:68:02:9a:f9:39:71:4a:ac:87:bc:bd:b2:93:0b:81:
         58:d4:03:26:32:91:5a:d8:af:2c:39:e3:6f:44:a6:69:7d:da:
         58:28:7e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org