Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/323830343a373537303a3a2f33332d3333203d3e20323731303436.roa
File:                     323830343a373537303a3a2f33332d3333203d3e20323731303436.roa (raw, json)
Hash identifier:          BzmxPxslYqW0YjAjC0HiTwGEYzuzYx7H0Y1e0IBbwd4=
Subject key identifier:   17:8A:07:5E:BA:A0:2C:F0:9D:7A:D5:0C:CE:4B:8F:C9:28:66:02:4B
Certificate issuer:       /CN=1B7E5F56163E3F2FC1B0452A93C5F9613099DB45
Certificate serial:       3F2BAF3B6BF423C76A8B82597464C5D53A7E3F97
Authority key identifier: 1B:7E:5F:56:16:3E:3F:2F:C1:B0:45:2A:93:C5:F9:61:30:99:DB:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B7E5F56163E3F2FC1B0452A93C5F9613099DB45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/323830343a373537303a3a2f33332d3333203d3e20323731303436.roa
Signing time:             Wed 25 Aug 2021 23:04:32 +0000
ROA not before:           Wed 25 Aug 2021 22:59:32 +0000
ROA not after:            Wed 24 Aug 2022 23:04:32 +0000
asID:                     271046
IP address blocks:        2804:7570::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:2b:af:3b:6b:f4:23:c7:6a:8b:82:59:74:64:c5:d5:3a:7e:3f:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B7E5F56163E3F2FC1B0452A93C5F9613099DB45
        Validity
            Not Before: Aug 25 22:59:32 2021 GMT
            Not After : Aug 24 23:04:32 2022 GMT
        Subject: CN=3082010A0282010100ED57347D92204DE8DAF469164BDEC528F4E1CF5626A2DB623A03AF5F6C353EFAA198222F325E5A7A5A1A2E02964F43AED41C803A5E43B112863AE0CFB8DC5A96E320161DA7A0530A2842BE3857DAA4513D55EDE910187783FA53CA56F4814D5EF7CE9B15863BDA3189448A33D47EDB2A2BC30852520D1563FBEB79D725FA543C3C6C54D13FE42ECDEF402D553A6D5C1261F105CFB5D9E861B33469FB03A5E103C7BA04BF63182F22832A8388CCC9A081B9F69FC36CF5EFCBEBB02FEE97EC990C6A085C28A2DD84732B705C6E8DF97E06AFB82E070545CCED4E78D8E481F93AF698D70E3C02F2C7E434909537DA2D1A7F70F2D90C94E194B5BC0269B213F4464B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:57:34:7d:92:20:4d:e8:da:f4:69:16:4b:de:
                    c5:28:f4:e1:cf:56:26:a2:db:62:3a:03:af:5f:6c:
                    35:3e:fa:a1:98:22:2f:32:5e:5a:7a:5a:1a:2e:02:
                    96:4f:43:ae:d4:1c:80:3a:5e:43:b1:12:86:3a:e0:
                    cf:b8:dc:5a:96:e3:20:16:1d:a7:a0:53:0a:28:42:
                    be:38:57:da:a4:51:3d:55:ed:e9:10:18:77:83:fa:
                    53:ca:56:f4:81:4d:5e:f7:ce:9b:15:86:3b:da:31:
                    89:44:8a:33:d4:7e:db:2a:2b:c3:08:52:52:0d:15:
                    63:fb:eb:79:d7:25:fa:54:3c:3c:6c:54:d1:3f:e4:
                    2e:cd:ef:40:2d:55:3a:6d:5c:12:61:f1:05:cf:b5:
                    d9:e8:61:b3:34:69:fb:03:a5:e1:03:c7:ba:04:bf:
                    63:18:2f:22:83:2a:83:88:cc:c9:a0:81:b9:f6:9f:
                    c3:6c:f5:ef:cb:eb:b0:2f:ee:97:ec:99:0c:6a:08:
                    5c:28:a2:dd:84:73:2b:70:5c:6e:8d:f9:7e:06:af:
                    b8:2e:07:05:45:cc:ed:4e:78:d8:e4:81:f9:3a:f6:
                    98:d7:0e:3c:02:f2:c7:e4:34:90:95:37:da:2d:1a:
                    7f:70:f2:d9:0c:94:e1:94:b5:bc:02:69:b2:13:f4:
                    46:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:8A:07:5E:BA:A0:2C:F0:9D:7A:D5:0C:CE:4B:8F:C9:28:66:02:4B
            X509v3 Authority Key Identifier:
                keyid:1B:7E:5F:56:16:3E:3F:2F:C1:B0:45:2A:93:C5:F9:61:30:99:DB:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/1B7E5F56163E3F2FC1B0452A93C5F9613099DB45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B7E5F56163E3F2FC1B0452A93C5F9613099DB45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/323830343a373537303a3a2f33332d3333203d3e20323731303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7570::/33

    Signature Algorithm: sha256WithRSAEncryption
         66:fe:11:4a:d9:c5:f4:18:cc:cb:87:f9:b9:c2:34:82:e0:c3:
         45:22:90:ce:18:e2:84:be:85:42:fc:f5:43:dc:7c:3c:7c:27:
         76:06:02:99:f9:ae:93:46:34:bb:7e:98:91:86:16:eb:bd:a9:
         82:eb:db:01:95:d1:1b:e7:39:59:c3:84:1f:d0:1c:f5:83:17:
         ee:09:34:9d:51:44:63:40:49:9e:50:ea:90:95:d1:58:ff:63:
         a3:53:17:c2:01:bc:30:87:59:bf:42:2d:c5:59:60:88:90:53:
         ac:b8:b9:fd:ea:bb:b9:4f:59:83:8c:78:ee:75:01:1d:15:ad:
         28:71:5b:ec:d9:d0:a0:75:c3:52:3a:ba:12:5f:8c:de:1b:fa:
         d9:65:77:1f:8c:2d:52:44:4c:d7:04:1c:fa:95:35:10:98:6a:
         6d:8c:de:73:b5:1f:12:e4:af:f8:9c:87:86:00:2d:b1:45:ba:
         34:fd:51:76:32:df:a8:bc:a3:6c:63:1b:84:31:9a:58:0e:05:
         ef:8e:73:d8:f1:2d:c7:27:2c:98:99:a8:a6:cf:9a:fe:78:d9:
         3f:f1:28:c8:9a:0a:ec:d1:e4:bf:6f:a7:d9:0a:28:b6:10:d0:
         3c:ba:a7:ee:59:26:2e:a6:57:5d:0a:e5:5b:31:c6:f9:a7:85:
         7f:b4:a0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org