Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/323830343a363339633a633030303a3a2f33342d3334203d3e20323639333732.roa
File:                     323830343a363339633a633030303a3a2f33342d3334203d3e20323639333732.roa (raw, json)
Hash identifier:          tyMgKo5GxGCgw0+6yEoaAxsMDkPKqHtGUjuSziUz1fI=
Subject key identifier:   05:0D:0A:46:2F:42:27:49:12:DA:68:24:94:56:7D:57:C5:AC:35:21
Certificate issuer:       /CN=B0DB8E204286BBFA4692145BA2D8CFAB9D810F29
Certificate serial:       7436A00CFB70F8AEAE3A2308D76655D975E86BDF
Authority key identifier: B0:DB:8E:20:42:86:BB:FA:46:92:14:5B:A2:D8:CF:AB:9D:81:0F:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B0DB8E204286BBFA4692145BA2D8CFAB9D810F29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/323830343a363339633a633030303a3a2f33342d3334203d3e20323639333732.roa
Signing time:             Mon 18 Dec 2023 19:14:59 +0000
ROA not before:           Mon 18 Dec 2023 19:09:59 +0000
ROA not after:            Mon 16 Dec 2024 19:14:59 +0000
asID:                     269372
IP address blocks:        2804:639c:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:36:a0:0c:fb:70:f8:ae:ae:3a:23:08:d7:66:55:d9:75:e8:6b:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0DB8E204286BBFA4692145BA2D8CFAB9D810F29
        Validity
            Not Before: Dec 18 19:09:59 2023 GMT
            Not After : Dec 16 19:14:59 2024 GMT
        Subject: CN=050D0A462F42274912DA682494567D57C5AC3521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:97:c2:43:ae:f0:51:8b:db:f3:9d:87:b5:2c:
                    ca:84:cb:fb:ae:bf:b6:59:fc:2f:d9:84:7a:2c:13:
                    6f:42:72:7a:e5:dc:a1:f5:1e:66:0f:d4:7b:8e:71:
                    a4:79:b9:37:75:29:b4:20:04:e6:ac:b7:f2:52:32:
                    4a:c6:87:73:71:3b:0e:bd:ec:b4:49:ff:9f:f2:ae:
                    2a:5c:15:8f:93:32:0b:57:ee:bf:56:f5:9f:2e:8f:
                    78:30:13:f8:6a:92:11:d6:45:aa:d7:5c:39:53:37:
                    61:b0:15:b2:7b:22:17:2d:78:66:16:82:e5:d6:7f:
                    28:d5:a7:33:e6:53:ab:a0:69:7f:2a:30:01:ac:16:
                    f8:da:40:8f:fd:5f:b4:5c:8b:33:26:b6:ad:86:09:
                    fb:61:12:9a:a5:a6:56:13:84:7e:15:25:98:a9:cb:
                    48:88:bc:02:24:1c:a5:b8:12:ef:56:27:ae:83:40:
                    d8:2f:af:d6:50:ce:c8:3b:8f:e4:13:99:d4:18:ef:
                    8b:ab:3d:ec:bd:c6:f1:26:df:59:3e:fc:ae:d3:6c:
                    f0:8f:14:a2:f3:2b:d3:7f:7e:89:17:eb:44:99:5f:
                    4e:c3:b1:1b:32:53:02:68:91:d9:6b:a3:ee:36:b8:
                    df:4e:5f:a3:a8:9d:fa:ad:5a:62:ad:d7:b1:03:dd:
                    80:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:0D:0A:46:2F:42:27:49:12:DA:68:24:94:56:7D:57:C5:AC:35:21
            X509v3 Authority Key Identifier:
                keyid:B0:DB:8E:20:42:86:BB:FA:46:92:14:5B:A2:D8:CF:AB:9D:81:0F:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/B0DB8E204286BBFA4692145BA2D8CFAB9D810F29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B0DB8E204286BBFA4692145BA2D8CFAB9D810F29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/323830343a363339633a633030303a3a2f33342d3334203d3e20323639333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:639c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         c5:98:0a:28:eb:a5:57:3e:b5:31:52:79:84:f2:6a:34:ec:73:
         ea:15:29:54:0a:f4:7b:83:7a:15:41:dd:2b:64:e2:d5:f1:46:
         25:c4:96:64:08:14:30:20:a7:05:fb:2d:dc:b0:0d:0c:d1:c6:
         e4:40:dc:81:09:19:1d:80:1f:db:8a:14:91:fd:7d:ee:ec:2f:
         ed:c6:50:f1:89:34:c2:0b:fd:cd:dd:5b:83:0a:5c:d3:ff:31:
         ad:19:a7:e0:24:51:84:b0:7f:f2:a0:04:c7:46:6c:21:e5:2a:
         c1:76:c5:a7:0c:37:a4:64:fc:fd:e8:2e:a3:00:23:79:35:b3:
         9e:30:ec:a9:5a:0b:8d:49:09:cc:a3:9c:7c:d3:48:d5:7f:d6:
         9a:da:09:ac:03:6e:7a:f2:56:d9:59:f2:87:91:18:0f:27:6b:
         a5:28:0b:32:82:6f:de:3f:7e:40:d8:8f:68:9e:a0:b9:b8:79:
         1b:b2:7e:10:48:33:b7:af:20:73:68:4f:cb:ef:37:9a:b2:8d:
         f1:ac:b6:7d:eb:cd:19:41:3a:92:30:66:36:2e:06:dc:21:a0:
         8e:40:3b:82:62:aa:f7:f5:92:a5:4b:87:3f:f4:ee:3c:15:cf:
         5d:c3:1a:54:7b:1a:80:b6:2c:8a:09:67:56:c6:ed:b6:3c:68:
         03:57:76:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org