Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DyQJ11RmTELVGHULCLtaGuxcqxeRtQLgvDC5mQnS9HXG/0/323830343a356435633a343030303a3a2f33342d3334203d3e20323638393637.roa
File:                     323830343a356435633a343030303a3a2f33342d3334203d3e20323638393637.roa (raw, json)
Hash identifier:          ILv+8BJr39wCLOvMvUi7PtIfo3OquDUwAhzNvuqygco=
Subject key identifier:   7F:02:89:52:91:0C:1F:3F:17:B0:51:2C:12:BB:7A:0C:A0:63:62:C9
Certificate issuer:       /CN=7EF676CD4F65991ED086173E64F9E58F84554AD1
Certificate serial:       551C31CE8699C4C307E8A89DA82D83FDFBE5B5EE
Authority key identifier: 7E:F6:76:CD:4F:65:99:1E:D0:86:17:3E:64:F9:E5:8F:84:55:4A:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EF676CD4F65991ED086173E64F9E58F84554AD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DyQJ11RmTELVGHULCLtaGuxcqxeRtQLgvDC5mQnS9HXG/0/323830343a356435633a343030303a3a2f33342d3334203d3e20323638393637.roa
Signing time:             Tue 05 Sep 2023 14:09:34 +0000
ROA not before:           Tue 05 Sep 2023 14:04:34 +0000
ROA not after:            Tue 03 Sep 2024 14:09:34 +0000
asID:                     268967
IP address blocks:        2804:5d5c:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:1c:31:ce:86:99:c4:c3:07:e8:a8:9d:a8:2d:83:fd:fb:e5:b5:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EF676CD4F65991ED086173E64F9E58F84554AD1
        Validity
            Not Before: Sep  5 14:04:34 2023 GMT
            Not After : Sep  3 14:09:34 2024 GMT
        Subject: CN=7F028952910C1F3F17B0512C12BB7A0CA06362C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:85:e7:06:5e:37:51:ba:3a:c7:df:04:32:00:
                    c9:7d:4c:ae:03:bf:7a:28:54:14:85:58:99:cb:cd:
                    1d:36:53:0c:62:38:06:c0:05:fd:12:06:5c:05:4f:
                    4c:c4:41:df:fc:1d:45:28:79:58:6a:fe:4c:bd:09:
                    48:41:14:4f:2a:bd:72:1d:24:58:37:ee:26:88:c0:
                    32:f4:1d:22:fd:5a:53:74:0b:7b:ac:b8:f5:39:6f:
                    76:6e:1f:99:ff:0c:72:22:aa:64:8e:5f:f3:04:d0:
                    26:5e:07:2e:5c:0d:cd:73:72:d3:64:02:80:cf:60:
                    10:d6:b7:fa:50:74:42:f3:af:61:2d:28:b3:08:ab:
                    27:fe:ce:ec:3e:3f:c8:76:8d:83:ec:1d:72:d8:a1:
                    e4:2c:92:04:17:89:60:73:0b:a2:1c:d2:aa:92:e2:
                    79:84:93:e0:30:e9:d4:7c:77:ab:bc:33:54:5e:01:
                    86:54:1c:13:43:cb:64:32:9f:52:4d:89:76:5a:ee:
                    03:05:24:ca:92:b4:aa:40:27:14:e5:9d:2b:3c:27:
                    05:4d:31:c2:73:92:66:a1:26:e8:5b:11:d0:17:fc:
                    8b:b2:8a:05:15:49:46:9c:65:b5:5c:76:07:a4:4a:
                    16:e3:05:8f:13:2f:fb:f8:09:6f:13:04:bc:37:db:
                    a8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:02:89:52:91:0C:1F:3F:17:B0:51:2C:12:BB:7A:0C:A0:63:62:C9
            X509v3 Authority Key Identifier:
                keyid:7E:F6:76:CD:4F:65:99:1E:D0:86:17:3E:64:F9:E5:8F:84:55:4A:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DyQJ11RmTELVGHULCLtaGuxcqxeRtQLgvDC5mQnS9HXG/0/7EF676CD4F65991ED086173E64F9E58F84554AD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EF676CD4F65991ED086173E64F9E58F84554AD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DyQJ11RmTELVGHULCLtaGuxcqxeRtQLgvDC5mQnS9HXG/0/323830343a356435633a343030303a3a2f33342d3334203d3e20323638393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5d5c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         53:0f:cb:36:d0:35:75:e1:8a:81:d1:5d:63:bd:7b:61:a1:07:
         d9:70:34:b5:f3:a8:f1:1c:3d:7f:9b:4a:11:f6:ce:a1:ba:6c:
         20:4f:63:ac:05:f3:93:4f:66:3f:1c:64:cc:b4:d0:7d:43:60:
         d9:b2:00:7e:96:41:3b:b1:ef:0d:28:63:fa:53:c2:dc:83:13:
         39:17:1e:71:b2:71:a8:43:ec:7d:23:a9:92:df:ea:27:ce:77:
         94:59:12:41:08:1e:6e:06:de:dd:91:ea:f6:48:48:15:cb:cb:
         c9:8a:be:2d:66:5c:d8:31:37:99:d6:03:2c:2e:e1:b8:dd:ee:
         93:85:a9:51:a4:5e:e2:1a:f9:34:44:b6:d0:40:87:08:d8:5e:
         87:fe:6d:f0:2b:fe:e1:76:c1:65:17:2a:a4:f7:dc:40:a6:3f:
         1a:d9:36:37:07:ba:4b:46:1b:22:ee:8a:08:81:bc:32:0a:da:
         92:f4:46:13:a7:b3:24:a6:1b:6e:f3:d1:b9:da:84:a4:c1:20:
         1d:3c:06:8b:f3:5c:c2:f7:61:73:38:8a:cb:74:54:a4:b3:0e:
         1a:3a:2b:8c:a7:df:32:7f:4b:b2:78:2e:58:df:a8:ad:a4:04:
         a9:e3:2e:3b:91:18:59:51:48:ce:5f:17:26:ed:bb:5d:04:ac:
         ce:16:47:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org