Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/323830343a366537633a3a2f33322d3438203d3e20323730363030.roa
File:                     323830343a366537633a3a2f33322d3438203d3e20323730363030.roa (raw, json)
Hash identifier:          UhzuydHcRoSE+tibDfeoOc0iJkP9rhlZQALCNNPSFGs=
Subject key identifier:   D1:7E:D1:3A:92:37:AA:94:7C:CB:FF:58:72:81:FA:7E:D7:BB:98:E1
Certificate issuer:       /CN=77AFF1CE4893AC787B68CB24A4DB4164337CA8E0
Certificate serial:       60F866644F6DF26025AFC840022061F51D369FA9
Authority key identifier: 77:AF:F1:CE:48:93:AC:78:7B:68:CB:24:A4:DB:41:64:33:7C:A8:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77AFF1CE4893AC787B68CB24A4DB4164337CA8E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/323830343a366537633a3a2f33322d3438203d3e20323730363030.roa
Signing time:             Fri 24 Nov 2023 18:33:31 +0000
ROA not before:           Fri 24 Nov 2023 18:28:31 +0000
ROA not after:            Fri 22 Nov 2024 18:33:31 +0000
asID:                     270600
IP address blocks:        2804:6e7c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:f8:66:64:4f:6d:f2:60:25:af:c8:40:02:20:61:f5:1d:36:9f:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77AFF1CE4893AC787B68CB24A4DB4164337CA8E0
        Validity
            Not Before: Nov 24 18:28:31 2023 GMT
            Not After : Nov 22 18:33:31 2024 GMT
        Subject: CN=D17ED13A9237AA947CCBFF587281FA7ED7BB98E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2a:34:da:1e:fb:88:2a:d7:0a:31:5b:7d:87:
                    b4:76:c2:14:8e:06:03:d4:85:3b:72:2b:b7:d5:38:
                    a1:0f:4a:f7:18:5d:7a:c0:5a:55:b6:69:a0:60:35:
                    90:4e:79:24:44:d6:45:8f:c5:46:bb:3f:41:2e:b5:
                    fa:ff:81:9c:25:6b:99:eb:5f:ca:1b:5e:4b:0f:df:
                    bc:84:28:38:cb:2e:0f:bf:d4:9f:c7:b9:f6:d6:6e:
                    8a:70:86:71:ed:96:82:27:af:13:ff:d0:83:38:9b:
                    d6:d8:6a:48:45:03:ca:84:d5:0b:dc:1e:0f:f0:9e:
                    d8:00:e5:d0:f8:bb:85:cb:4f:f4:82:73:8d:7c:3c:
                    93:fa:25:d7:b2:f4:ae:35:68:5c:d8:c5:c2:aa:4b:
                    0e:cf:b1:ed:4a:90:09:14:54:d1:c7:43:c8:d8:85:
                    19:98:5c:f9:3b:09:29:1f:52:f0:70:d1:db:84:1c:
                    dd:ea:c5:03:4b:48:55:da:8c:1f:66:51:b2:cd:5f:
                    92:be:6f:ac:0f:04:fd:f8:cb:7a:fc:9a:f4:91:f3:
                    35:0a:27:80:1f:39:ce:02:79:ae:d1:3a:33:88:8a:
                    7d:f6:45:e6:e3:7b:fc:06:ab:9e:a5:d6:dd:8c:a8:
                    6e:bd:2f:50:00:cb:90:23:a9:c3:d2:18:de:81:96:
                    00:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7E:D1:3A:92:37:AA:94:7C:CB:FF:58:72:81:FA:7E:D7:BB:98:E1
            X509v3 Authority Key Identifier:
                keyid:77:AF:F1:CE:48:93:AC:78:7B:68:CB:24:A4:DB:41:64:33:7C:A8:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/77AFF1CE4893AC787B68CB24A4DB4164337CA8E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77AFF1CE4893AC787B68CB24A4DB4164337CA8E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/323830343a366537633a3a2f33322d3438203d3e20323730363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:52:11:70:24:c2:a1:2e:97:51:db:15:e1:1a:8d:60:51:98:
         bb:6d:b8:5d:5e:e4:96:ea:07:66:f7:91:5a:91:d6:a9:e8:9c:
         16:80:25:cf:52:f0:4b:b1:16:52:79:42:d4:b4:a7:8b:77:dd:
         ab:cb:94:64:fe:ac:b1:03:85:37:7a:ce:de:5f:52:de:de:50:
         d1:64:51:11:d6:f0:dd:4c:47:ec:f4:19:ef:d9:a3:4e:c5:61:
         f0:da:7c:d5:a6:f9:c6:9d:19:98:59:40:c6:d0:c1:f0:68:16:
         73:f2:82:9c:8d:d1:20:93:47:7c:88:4c:1b:95:e1:fd:e5:87:
         b4:cd:c9:d9:21:21:1f:d1:74:5d:9b:54:79:b7:9b:12:d1:b2:
         d9:05:4a:e5:fc:fb:42:d5:7f:d7:26:80:69:75:3e:fc:cb:cb:
         38:7d:c2:e3:e7:b4:8b:6f:2e:4e:37:05:ef:c7:6f:33:e4:3e:
         69:a8:3c:22:62:ea:9b:ee:e6:61:c2:b5:a3:d8:0e:35:fc:a9:
         a5:f3:39:fb:79:d8:3b:7c:2c:45:0d:e0:e1:56:b0:df:ef:0a:
         01:b4:00:ff:7b:f1:36:c1:12:aa:c7:e3:8e:0f:5b:fa:ad:ea:
         f2:f4:2f:ee:42:7d:91:f3:90:b5:ef:ca:2d:5d:5c:49:62:f3:
         c8:3b:02:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:05 2024 by rpki-client on console-ams.rpki-client.org