Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/323830343a363339633a343030303a3a2f33342d3334203d3e20323639333732.roa
File:                     323830343a363339633a343030303a3a2f33342d3334203d3e20323639333732.roa (raw, json)
Hash identifier:          eycAyvIEkrkLHx5T+yH0Ujp/zJDXWxc7CYgRlJwRCIY=
Subject key identifier:   16:8C:BE:A5:8E:B0:FF:9A:95:72:6D:19:B4:1E:C4:25:0A:F9:38:DD
Certificate issuer:       /CN=B0DB8E204286BBFA4692145BA2D8CFAB9D810F29
Certificate serial:       4D366F0394FE3FAA8A6CBD90F03D11FBA378F3CD
Authority key identifier: B0:DB:8E:20:42:86:BB:FA:46:92:14:5B:A2:D8:CF:AB:9D:81:0F:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B0DB8E204286BBFA4692145BA2D8CFAB9D810F29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/323830343a363339633a343030303a3a2f33342d3334203d3e20323639333732.roa
Signing time:             Mon 18 Dec 2023 19:14:59 +0000
ROA not before:           Mon 18 Dec 2023 19:09:59 +0000
ROA not after:            Mon 16 Dec 2024 19:14:59 +0000
asID:                     269372
IP address blocks:        2804:639c:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:36:6f:03:94:fe:3f:aa:8a:6c:bd:90:f0:3d:11:fb:a3:78:f3:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0DB8E204286BBFA4692145BA2D8CFAB9D810F29
        Validity
            Not Before: Dec 18 19:09:59 2023 GMT
            Not After : Dec 16 19:14:59 2024 GMT
        Subject: CN=168CBEA58EB0FF9A95726D19B41EC4250AF938DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:89:33:e3:56:d8:a0:82:31:43:a9:ad:5e:9d:
                    b3:cc:93:3f:28:3f:67:76:01:9d:d4:bb:06:0b:c4:
                    c0:6f:e6:ea:56:4c:12:cc:97:e5:77:74:b6:b1:f1:
                    1c:f7:c9:49:52:ac:ad:55:e9:f1:77:86:cd:25:c1:
                    4b:f1:d7:cf:86:8f:e6:ff:79:f3:9a:ee:82:92:8e:
                    23:26:85:5e:66:ca:e4:05:c1:d3:b0:8d:bd:54:00:
                    75:31:97:14:5f:fb:7a:6e:bb:cc:e6:2a:97:31:32:
                    4c:81:28:7f:b1:27:a1:10:ec:7a:56:53:ba:cc:97:
                    1c:85:0c:e5:0b:ea:a1:eb:6e:e1:60:b0:1e:56:9c:
                    a6:43:38:ab:f5:51:4b:67:3f:66:25:76:32:4e:43:
                    1a:e6:a2:61:0d:64:25:0c:2f:aa:d1:ca:fa:cf:1f:
                    f2:33:c8:21:16:cd:0a:f6:8a:2f:9c:eb:0c:30:1d:
                    ab:8d:aa:ee:a1:ea:6c:a6:70:f5:fe:4c:6c:01:28:
                    bc:9a:fb:78:06:7b:01:65:6b:a2:13:c0:6e:7f:14:
                    96:80:12:70:f9:08:79:c8:cb:bf:ef:eb:71:25:21:
                    82:eb:02:97:d7:35:f4:94:2e:ff:42:b7:de:24:50:
                    d8:da:b6:e6:76:2d:50:8a:b7:64:7d:e0:2b:be:65:
                    35:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:8C:BE:A5:8E:B0:FF:9A:95:72:6D:19:B4:1E:C4:25:0A:F9:38:DD
            X509v3 Authority Key Identifier:
                keyid:B0:DB:8E:20:42:86:BB:FA:46:92:14:5B:A2:D8:CF:AB:9D:81:0F:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/B0DB8E204286BBFA4692145BA2D8CFAB9D810F29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B0DB8E204286BBFA4692145BA2D8CFAB9D810F29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/323830343a363339633a343030303a3a2f33342d3334203d3e20323639333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:639c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         2b:9b:9e:1a:f7:fd:5a:02:01:64:a3:93:54:69:4e:e4:38:3c:
         33:63:32:c0:8a:4a:b5:30:8e:47:df:f4:46:52:e2:d5:6f:20:
         b0:30:07:2e:71:62:2e:2a:81:f6:8b:73:9d:fb:96:4d:34:e4:
         5f:a3:8a:a9:13:ea:82:5b:d2:ab:09:c2:7e:7c:d6:a0:ec:0f:
         7d:6a:70:42:72:51:cf:b8:57:da:3c:3d:55:af:c7:40:19:65:
         57:37:a7:81:52:92:92:13:ef:7e:21:c5:7f:65:8f:7c:0b:70:
         72:da:9b:4a:48:2f:41:df:56:0a:bd:e3:13:3a:8a:6c:b0:86:
         b2:47:bd:81:ed:67:e7:a2:a4:0e:2b:78:5d:bf:11:6e:24:1f:
         2b:fe:6b:29:a6:fb:3b:c8:c2:89:ac:dd:f6:98:ad:94:83:86:
         88:ab:ea:90:41:0f:8a:3c:f1:e8:8e:31:25:68:2c:cd:17:9a:
         79:ac:b8:47:2e:2f:cb:dc:c0:66:ba:b5:e2:eb:43:23:29:95:
         50:18:5e:77:c7:47:8d:09:b9:0f:b1:bd:2e:db:5a:b4:4e:ad:
         33:a9:50:a1:bf:60:09:c1:2c:ef:25:ba:d0:b2:05:ef:5f:a7:
         e0:95:4e:0b:51:d3:b1:55:c0:26:bd:d6:bf:9f:d4:0b:22:0a:
         08:14:9b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org