Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DabpVK4ptvKPrV5ZUA6GrrS1NBZ1omtagugy7kj6H6jQ/0/323830343a353534383a383030303a3a2f34302d3430203d3e20323638373030.roa
File:                     323830343a353534383a383030303a3a2f34302d3430203d3e20323638373030.roa (raw, json)
Hash identifier:          6ZpbM9ge/AJLw3N07cdGmzFTDbKc8B+o8n0rjBr2LB4=
Subject key identifier:   E5:2F:49:0A:3F:B6:33:E9:2E:38:81:D4:53:71:7D:86:21:95:FA:65
Certificate issuer:       /CN=074E7C5399BF0B4BA92B7F57D419D9A3D05F05F1
Certificate serial:       6CB9C25D9C1065A5F19DECA54337809D26F94AFE
Authority key identifier: 07:4E:7C:53:99:BF:0B:4B:A9:2B:7F:57:D4:19:D9:A3:D0:5F:05:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/074E7C5399BF0B4BA92B7F57D419D9A3D05F05F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DabpVK4ptvKPrV5ZUA6GrrS1NBZ1omtagugy7kj6H6jQ/0/323830343a353534383a383030303a3a2f34302d3430203d3e20323638373030.roa
Signing time:             Fri 12 Apr 2024 17:00:00 +0000
ROA not before:           Fri 12 Apr 2024 16:55:00 +0000
ROA not after:            Fri 11 Apr 2025 17:00:00 +0000
asID:                     268700
IP address blocks:        2804:5548:8000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:b9:c2:5d:9c:10:65:a5:f1:9d:ec:a5:43:37:80:9d:26:f9:4a:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=074E7C5399BF0B4BA92B7F57D419D9A3D05F05F1
        Validity
            Not Before: Apr 12 16:55:00 2024 GMT
            Not After : Apr 11 17:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3c:4d:79:17:22:61:43:20:9e:78:46:8a:f5:
                    6e:e2:bd:88:d6:89:87:61:6e:06:43:29:50:e8:81:
                    64:43:c0:d8:26:60:ef:26:35:bd:06:08:7c:f2:9e:
                    6b:50:7e:36:4f:bc:df:41:90:80:60:11:0d:bf:d3:
                    1c:b8:ec:e7:09:72:6d:12:b6:43:96:cb:cd:64:c6:
                    6c:7e:51:0b:29:b4:6e:02:c6:49:af:5d:f0:c0:03:
                    2b:d3:67:e6:05:a6:97:78:8c:df:50:e8:ae:26:4c:
                    60:5d:2d:f8:c1:a0:0d:02:2c:0d:b6:33:2c:1e:aa:
                    22:b3:7d:99:05:8a:50:a1:f5:23:49:16:b5:a1:f8:
                    8f:29:3c:0f:fe:5a:b4:a3:04:03:cb:39:c4:4c:72:
                    9d:e0:2d:c7:c5:f3:22:e2:16:14:36:b1:e1:17:c2:
                    4b:fc:88:a1:71:99:12:9b:63:bd:ce:46:ea:6a:ee:
                    65:50:c4:a4:e2:c9:b3:2c:3a:84:34:b1:4f:71:be:
                    82:d6:4e:cf:92:c5:c6:06:2c:5a:71:06:7d:98:62:
                    65:33:f8:13:d1:28:86:ec:92:f2:c9:18:12:f0:db:
                    8e:35:ef:fb:a0:12:af:02:c1:97:e6:72:cd:d8:cd:
                    bf:3b:39:77:d9:ee:2b:02:ef:7d:bc:b2:22:74:b5:
                    ca:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:2F:49:0A:3F:B6:33:E9:2E:38:81:D4:53:71:7D:86:21:95:FA:65
            X509v3 Authority Key Identifier:
                keyid:07:4E:7C:53:99:BF:0B:4B:A9:2B:7F:57:D4:19:D9:A3:D0:5F:05:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DabpVK4ptvKPrV5ZUA6GrrS1NBZ1omtagugy7kj6H6jQ/0/074E7C5399BF0B4BA92B7F57D419D9A3D05F05F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/074E7C5399BF0B4BA92B7F57D419D9A3D05F05F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DabpVK4ptvKPrV5ZUA6GrrS1NBZ1omtagugy7kj6H6jQ/0/323830343a353534383a383030303a3a2f34302d3430203d3e20323638373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5548:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         a8:ca:8c:cb:df:7a:e6:78:22:30:38:60:4d:48:49:e5:3f:de:
         54:e6:c3:99:72:14:57:2c:ac:e9:f5:d2:cc:a1:a9:5d:69:5b:
         88:a6:bf:4e:9a:58:98:73:e2:5e:d5:69:a2:1d:9b:91:ae:df:
         43:e6:3c:df:55:cb:65:f3:35:b4:4e:45:ab:6a:e1:d0:14:8f:
         62:92:43:80:6d:97:6b:bc:5f:36:52:37:8d:32:42:86:93:17:
         d6:0a:cb:f8:3b:35:e1:5f:9f:b9:74:0e:5c:3c:6b:10:ec:59:
         fb:0a:96:8c:97:35:dd:50:a5:e4:2e:d2:e8:f5:47:72:c5:1c:
         20:24:8a:c3:dd:32:2d:6f:ba:0a:54:45:18:bc:b7:30:3a:53:
         36:6a:9e:f6:79:0a:2d:7d:02:bb:e3:ad:46:c0:11:ab:79:b1:
         5c:21:27:80:c9:04:68:21:6a:11:16:fb:36:64:e6:fc:b5:20:
         0d:f4:a0:e1:24:58:25:98:e0:ed:9a:0e:87:1a:04:94:cd:51:
         9b:a7:a1:cb:8c:b7:4e:26:9c:69:db:af:5e:f6:c5:a1:e8:9a:
         54:58:20:52:5c:06:0f:ce:19:4f:bb:88:75:8e:10:31:8f:c6:
         40:2a:92:34:90:ec:cf:89:4f:6e:89:c5:6a:70:8c:a7:23:0d:
         32:8d:da:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org