Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/323830343a363339633a383030303a3a2f33342d3334203d3e20323639333732.roa
File:                     323830343a363339633a383030303a3a2f33342d3334203d3e20323639333732.roa (raw, json)
Hash identifier:          cvRYxJgzP/p2bJTxyFaLXkVY0n0CLxk281pmXEMvVD0=
Subject key identifier:   22:BA:A9:33:42:EA:62:64:C8:91:E4:8E:74:11:55:2E:18:9F:22:2D
Certificate issuer:       /CN=B0DB8E204286BBFA4692145BA2D8CFAB9D810F29
Certificate serial:       7AA2BE3415F15DDE579EF06123EC5E2F8D840671
Authority key identifier: B0:DB:8E:20:42:86:BB:FA:46:92:14:5B:A2:D8:CF:AB:9D:81:0F:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B0DB8E204286BBFA4692145BA2D8CFAB9D810F29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/323830343a363339633a383030303a3a2f33342d3334203d3e20323639333732.roa
Signing time:             Mon 18 Dec 2023 19:14:59 +0000
ROA not before:           Mon 18 Dec 2023 19:09:59 +0000
ROA not after:            Mon 16 Dec 2024 19:14:59 +0000
asID:                     269372
IP address blocks:        2804:639c:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:a2:be:34:15:f1:5d:de:57:9e:f0:61:23:ec:5e:2f:8d:84:06:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0DB8E204286BBFA4692145BA2D8CFAB9D810F29
        Validity
            Not Before: Dec 18 19:09:59 2023 GMT
            Not After : Dec 16 19:14:59 2024 GMT
        Subject: CN=22BAA93342EA6264C891E48E7411552E189F222D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9b:97:6c:8c:99:8a:3a:9d:b4:69:16:c7:e2:
                    bf:51:76:12:8d:f3:84:37:d4:57:44:1e:de:c3:25:
                    4b:ab:9b:55:ad:a3:a1:f4:f4:2a:6d:cd:01:42:0c:
                    e3:39:93:ed:ef:e9:a4:95:32:dd:8c:8c:9b:cc:0d:
                    b2:25:e3:da:1a:59:5c:a6:76:12:53:37:c4:ec:21:
                    f2:8c:90:9b:02:50:05:94:dd:06:80:c6:e1:41:f9:
                    cd:b7:fe:80:23:4a:55:86:30:6a:d3:7d:12:4e:d0:
                    d1:15:b2:e8:2a:f6:b8:06:65:b0:99:67:55:3d:25:
                    97:e5:b1:b7:4c:89:93:1c:8b:1e:bc:ec:4b:62:bd:
                    5f:83:57:6e:8b:ed:58:b4:a3:86:a7:ef:76:b7:d0:
                    ea:6d:a0:3b:fb:52:03:3f:72:69:a4:c8:18:f3:c0:
                    ef:d4:7f:89:c1:ca:8d:77:9b:88:ae:62:47:08:ce:
                    88:3d:e2:60:ed:09:82:44:ce:4c:9c:f9:56:72:89:
                    b0:16:49:17:68:9c:f8:b3:76:8a:c7:b2:fb:41:f9:
                    2a:53:a7:2a:2e:0a:cb:e3:1f:e2:eb:4f:87:a5:d0:
                    00:32:fe:e5:65:7e:50:a6:19:20:7d:27:20:23:98:
                    4b:22:00:a2:1d:73:25:c7:f0:ab:aa:f3:4d:d6:40:
                    86:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:BA:A9:33:42:EA:62:64:C8:91:E4:8E:74:11:55:2E:18:9F:22:2D
            X509v3 Authority Key Identifier:
                keyid:B0:DB:8E:20:42:86:BB:FA:46:92:14:5B:A2:D8:CF:AB:9D:81:0F:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/B0DB8E204286BBFA4692145BA2D8CFAB9D810F29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B0DB8E204286BBFA4692145BA2D8CFAB9D810F29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/323830343a363339633a383030303a3a2f33342d3334203d3e20323639333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:639c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         53:2e:09:d9:3f:8f:5d:dd:50:d6:a2:e4:78:a4:40:15:af:42:
         8e:4c:42:3b:60:15:67:19:02:8b:1f:94:4a:bb:08:3c:ae:04:
         58:32:19:56:8e:4b:04:6c:7b:62:ad:7c:df:bc:d8:ba:ee:cd:
         1c:6d:08:91:74:42:42:6c:d6:48:32:b3:df:2c:6f:e5:b4:24:
         09:e5:38:6b:7c:63:8d:c2:be:8e:9b:37:2c:b5:5c:b4:52:54:
         6f:4f:e4:29:21:cd:6f:e0:4c:4a:43:ee:94:7f:e1:ef:18:83:
         78:bc:5b:41:1b:99:cc:9c:a5:75:f4:2e:22:b5:74:c3:fc:2b:
         c2:d1:9b:6c:85:8d:45:46:bf:18:fb:97:3b:e6:e6:7c:70:06:
         c1:87:f8:6c:05:3c:bf:97:81:0c:af:c6:44:97:4c:e8:9e:20:
         07:33:7c:ce:4a:f6:f4:00:0f:f8:6f:ce:58:3d:24:1d:d8:9c:
         f9:06:f5:7e:5a:57:fc:f4:d2:7c:99:95:a4:00:cb:3f:03:ae:
         b9:b7:e7:3c:33:f4:c2:16:9c:10:90:d2:ed:20:a1:19:c5:78:
         f8:39:ff:30:0b:9a:0f:07:f2:4f:64:ac:6d:87:6a:8d:54:58:
         f6:16:1a:c0:f9:43:e8:c7:7f:84:67:a5:58:92:d6:cb:a0:89:
         1e:d8:e6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:39 2024 by rpki-client on console-ams.rpki-client.org