Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/1/323830343a346265383a383030303a3a2f33332d3333203d3e20323637333336.roa
File:                     323830343a346265383a383030303a3a2f33332d3333203d3e20323637333336.roa (raw, json)
Hash identifier:          jG642Ut8jXdWfB4Hl4Hl2aIWcBPrPhYHxGcnaLxvGBw=
Subject key identifier:   74:98:90:3C:7B:93:89:D0:B7:31:E4:CD:AE:47:6E:42:C5:53:9E:C2
Certificate issuer:       /CN=B6BD74F4A1DF60FCC3DB4867CA1CE84EF643889D
Certificate serial:       39BBBE1A0B209930A112BDC68735CE7CC8DB62C5
Authority key identifier: B6:BD:74:F4:A1:DF:60:FC:C3:DB:48:67:CA:1C:E8:4E:F6:43:88:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6BD74F4A1DF60FCC3DB4867CA1CE84EF643889D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/1/323830343a346265383a383030303a3a2f33332d3333203d3e20323637333336.roa
Signing time:             Tue 18 Apr 2023 18:11:59 +0000
ROA not before:           Tue 18 Apr 2023 18:06:59 +0000
ROA not after:            Tue 16 Apr 2024 18:11:59 +0000
asID:                     267336
IP address blocks:        2804:4be8:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:bb:be:1a:0b:20:99:30:a1:12:bd:c6:87:35:ce:7c:c8:db:62:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6BD74F4A1DF60FCC3DB4867CA1CE84EF643889D
        Validity
            Not Before: Apr 18 18:06:59 2023 GMT
            Not After : Apr 16 18:11:59 2024 GMT
        Subject: CN=7498903C7B9389D0B731E4CDAE476E42C5539EC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:06:a3:63:24:8c:3c:29:af:1f:9a:46:94:cb:
                    92:24:2f:a3:a3:8d:33:59:b5:8b:bb:d6:bf:d5:b4:
                    b4:68:47:66:38:9b:d0:d2:22:28:42:01:e1:48:5f:
                    4d:54:cb:a0:c7:b6:c8:ee:9a:1a:32:db:88:4d:52:
                    79:71:f1:03:13:7c:16:19:34:95:cb:b8:17:53:59:
                    4d:ad:64:d1:36:3b:b7:c0:5e:7e:b3:b5:2d:03:74:
                    62:ad:a4:79:15:da:bd:e1:07:36:7a:8a:38:fd:b8:
                    06:cf:be:34:c0:8c:d3:c0:ab:f7:7e:b8:b4:27:58:
                    15:fa:48:f1:72:f1:b7:4f:fa:38:45:f2:5e:65:fa:
                    2f:fb:5b:aa:1c:e0:66:9b:ad:40:08:8e:c5:b7:2b:
                    a2:e2:83:30:24:d1:62:21:4e:31:a5:a0:54:8c:e2:
                    3d:d0:d6:a5:e9:83:53:c3:92:55:16:35:74:bb:81:
                    2f:81:6a:78:a2:26:c1:a4:a8:40:cc:14:c3:bb:0f:
                    51:c0:41:4e:92:c1:56:e5:f4:96:9d:f8:14:fe:dd:
                    75:8a:74:1b:17:90:f8:84:8d:80:3b:72:6a:53:da:
                    0a:8f:73:0e:52:6f:c9:0a:1b:a8:ec:33:14:38:4c:
                    50:75:c5:44:5a:fe:f3:b6:d0:49:33:72:5d:e9:ea:
                    48:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:98:90:3C:7B:93:89:D0:B7:31:E4:CD:AE:47:6E:42:C5:53:9E:C2
            X509v3 Authority Key Identifier:
                keyid:B6:BD:74:F4:A1:DF:60:FC:C3:DB:48:67:CA:1C:E8:4E:F6:43:88:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/1/B6BD74F4A1DF60FCC3DB4867CA1CE84EF643889D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6BD74F4A1DF60FCC3DB4867CA1CE84EF643889D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/1/323830343a346265383a383030303a3a2f33332d3333203d3e20323637333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4be8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         9d:49:df:c4:52:a0:87:b9:1c:22:57:ff:43:5c:bd:76:2f:78:
         6d:8c:9a:bf:c2:47:37:9b:f2:09:d5:02:fb:56:75:72:e3:9b:
         c5:2e:e2:81:d2:1f:3b:95:4b:0c:fd:15:a4:a9:43:f3:e0:68:
         b7:05:88:28:1d:a7:e9:45:c4:00:ef:c8:fa:90:e7:b5:3a:31:
         2d:04:13:08:c5:58:31:32:0e:08:3e:30:60:d3:ce:57:a6:e3:
         f2:7a:bc:8a:56:ca:ea:81:fe:a2:51:2e:de:90:41:03:ae:17:
         12:22:62:c2:e6:29:dc:22:48:9d:c2:cd:e7:fd:0f:54:7c:2c:
         0e:f3:8b:70:84:2a:af:1f:97:09:18:e2:fb:b8:cc:6d:fa:52:
         12:43:40:72:14:37:ab:58:03:bf:0f:d8:ea:c1:99:59:5f:ec:
         3c:92:fa:b7:61:80:cf:9f:a6:5d:8b:44:ba:f4:78:2b:26:ed:
         1d:fe:e9:48:de:94:f4:eb:05:48:cc:5a:34:d2:be:fb:4f:be:
         52:aa:e3:e1:59:02:ba:ee:b6:d8:7f:9d:f1:9d:54:e6:ee:f9:
         fb:04:1d:79:49:fb:21:3b:56:89:57:df:97:d4:eb:2d:b8:59:
         3a:64:73:33:c3:77:46:6e:e0:95:eb:53:94:6a:d9:a0:17:f7:
         61:0d:f6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:37 2024 by rpki-client on console-fra.rpki-client.org