Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/323830343a326265633a343030303a3a2f33342d3334203d3e20323637353735.roa
File:                     323830343a326265633a343030303a3a2f33342d3334203d3e20323637353735.roa (raw, json)
Hash identifier:          lDNJdIF/X2m0iHQFLNFR1n8rx4np6vWJ7m1eFcnYPrI=
Subject key identifier:   B7:2A:36:F7:7C:12:E3:40:7F:BF:EE:D0:5F:EE:DA:3D:8C:5C:C7:2A
Certificate issuer:       /CN=0727C862E1F4A9A7C5919CB00CB891419AC68012
Certificate serial:       67F8E86514652758843C9901C7D39EE66BF8A1F9
Authority key identifier: 07:27:C8:62:E1:F4:A9:A7:C5:91:9C:B0:0C:B8:91:41:9A:C6:80:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0727C862E1F4A9A7C5919CB00CB891419AC68012.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/323830343a326265633a343030303a3a2f33342d3334203d3e20323637353735.roa
Signing time:             Fri 06 Jan 2023 12:43:10 +0000
ROA not before:           Fri 06 Jan 2023 12:38:10 +0000
ROA not after:            Fri 05 Jan 2024 12:43:10 +0000
asID:                     267575
IP address blocks:        2804:2bec:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:f8:e8:65:14:65:27:58:84:3c:99:01:c7:d3:9e:e6:6b:f8:a1:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0727C862E1F4A9A7C5919CB00CB891419AC68012
        Validity
            Not Before: Jan  6 12:38:10 2023 GMT
            Not After : Jan  5 12:43:10 2024 GMT
        Subject: CN=B72A36F77C12E3407FBFEED05FEEDA3D8C5CC72A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:dc:bc:35:43:5b:4e:b1:62:ac:dd:36:15:54:
                    2f:ac:48:50:7e:6f:90:0a:6c:61:ef:ce:cf:36:87:
                    33:6c:44:5a:4b:e7:f3:13:c7:ea:1d:31:fe:89:6b:
                    b9:fd:ad:21:27:fa:6c:3f:74:05:4e:c9:07:39:f4:
                    e8:9f:e7:9b:95:ad:84:fb:3f:ab:61:5d:42:91:d2:
                    c3:7d:db:62:b7:c0:96:0b:0d:70:01:b2:c1:95:b5:
                    d3:db:ca:92:fc:d5:87:63:02:34:46:d4:2e:78:be:
                    ca:da:5e:68:1f:53:ee:3e:65:21:bd:a1:e6:8d:c3:
                    15:c5:25:b0:b4:e3:20:f9:07:29:33:73:d8:04:96:
                    33:a0:af:f6:aa:48:dc:fd:b2:c2:12:01:7d:eb:aa:
                    93:c1:cd:94:2f:be:58:48:26:b3:48:08:26:04:c5:
                    ff:ab:cc:6c:90:30:f9:f8:2b:b5:a1:77:11:c7:e5:
                    b1:7a:46:ff:57:dc:86:5f:f8:34:07:ab:20:8e:ce:
                    aa:28:05:36:bf:75:b4:a9:2d:bb:c3:29:ca:8d:e8:
                    6a:f2:02:d3:de:78:97:35:72:38:2a:58:05:52:67:
                    1c:2c:4d:41:ca:2c:fe:4f:3c:28:ce:55:54:8c:17:
                    8a:8b:f6:be:de:7c:c5:20:d8:78:ec:5a:a5:83:b5:
                    fa:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:2A:36:F7:7C:12:E3:40:7F:BF:EE:D0:5F:EE:DA:3D:8C:5C:C7:2A
            X509v3 Authority Key Identifier:
                keyid:07:27:C8:62:E1:F4:A9:A7:C5:91:9C:B0:0C:B8:91:41:9A:C6:80:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/0727C862E1F4A9A7C5919CB00CB891419AC68012.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0727C862E1F4A9A7C5919CB00CB891419AC68012.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/323830343a326265633a343030303a3a2f33342d3334203d3e20323637353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bec:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         33:d4:06:5e:ce:06:50:73:a0:71:fe:eb:d5:4d:d9:f3:cf:f4:
         49:48:de:ba:c7:b2:9d:04:bb:e0:27:9b:4c:e4:3f:18:6f:6a:
         c3:89:8f:10:22:08:df:3c:f9:9d:94:2e:08:7a:59:21:ce:ed:
         e0:2a:cd:49:1f:f8:92:18:ea:28:7c:58:f2:46:a2:73:b9:db:
         f3:4d:24:43:48:e5:ec:1f:ce:93:55:b7:ec:4a:67:e2:fa:71:
         d0:75:fe:60:ee:b7:5b:21:74:0f:96:50:33:44:7d:b3:12:43:
         b8:5d:60:f8:ef:61:c3:24:1f:1b:ee:1a:df:01:2c:5b:dd:e0:
         11:d5:29:42:36:97:87:72:2d:36:8b:29:13:33:a5:73:86:64:
         0c:ec:00:a6:eb:a2:85:39:53:6d:4b:84:b5:ac:70:0c:12:cb:
         4b:ac:f8:f2:a6:3f:8d:24:40:a7:a1:74:57:32:49:a5:4b:a7:
         15:b0:6a:db:72:64:31:86:65:c9:84:13:52:44:4b:71:ff:8c:
         8d:9f:b1:5f:90:6e:01:89:23:f0:0b:16:e2:76:a2:58:dd:09:
         15:e0:25:af:fc:42:cf:b2:72:f2:79:e1:2b:f3:88:97:1f:79:
         eb:ea:92:3a:10:c9:cc:de:db:3d:35:db:d1:10:92:1f:b3:44:
         1f:f8:62:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org