Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HKsDRAXYhgW9W7tABJurc8fGrRvnnV67bt9MFYwHRDd/0/323830343a373065303a3a2f33322d3335203d3e20323730373533.roa
File:                     323830343a373065303a3a2f33322d3335203d3e20323730373533.roa (raw, json)
Hash identifier:          Bm6GS/XAl8N7NwK0tbaqwIosUYkXsylYKSyY8R26MZ8=
Subject key identifier:   10:68:D3:A6:F9:BE:3A:66:80:6A:51:0E:8A:E3:92:C7:25:03:65:1E
Certificate issuer:       /CN=E6A09958EF9734F0A5F161CEF634AA636C3946BF
Certificate serial:       7EBC3D88847F3D55C982FD6EF2CEA7FBCEC8C649
Authority key identifier: E6:A0:99:58:EF:97:34:F0:A5:F1:61:CE:F6:34:AA:63:6C:39:46:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6A09958EF9734F0A5F161CEF634AA636C3946BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HKsDRAXYhgW9W7tABJurc8fGrRvnnV67bt9MFYwHRDd/0/323830343a373065303a3a2f33322d3335203d3e20323730373533.roa
Signing time:             Tue 10 Oct 2023 22:00:00 +0000
ROA not before:           Tue 10 Oct 2023 21:55:00 +0000
ROA not after:            Tue 08 Oct 2024 22:00:00 +0000
asID:                     270753
IP address blocks:        2804:70e0::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:bc:3d:88:84:7f:3d:55:c9:82:fd:6e:f2:ce:a7:fb:ce:c8:c6:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6A09958EF9734F0A5F161CEF634AA636C3946BF
        Validity
            Not Before: Oct 10 21:55:00 2023 GMT
            Not After : Oct  8 22:00:00 2024 GMT
        Subject: CN=3082010A0282010100C05BE331DE54FB84402F7B3CD02BCCFC26F0659C47AC6C8CB7C876CA331ACEA5BFFDC1E8B216617D8D842782D55EDAC7197B8010B4E708BE56B1EF40B88D4D4DF1AE0FB8B550532271ADBF242DF1202FC909D4ADB8BC91D024EB518D1F602E0433D75791C2FDC56580E893A3F6E568583A18A5F72FD0A746AC5924B75942535A9DAF38D5EF9CBAA5E2F5095FD44F0E9EBD4F0DA76CAAD50654B18FFA96930BA6067E62625F9B9742F2BE1F33E2985B7939EA4342E3E319A67F6E0B3510DE89A3104362583F5980BA6D9A73F2CCC14215BFB08C25723E1348DA3C73EB75E0667F3EE9684692727A72D0A5BFB6574D14597F5DCFDD51D43B0949DCF8DE2D846E950203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5b:e3:31:de:54:fb:84:40:2f:7b:3c:d0:2b:
                    cc:fc:26:f0:65:9c:47:ac:6c:8c:b7:c8:76:ca:33:
                    1a:ce:a5:bf:fd:c1:e8:b2:16:61:7d:8d:84:27:82:
                    d5:5e:da:c7:19:7b:80:10:b4:e7:08:be:56:b1:ef:
                    40:b8:8d:4d:4d:f1:ae:0f:b8:b5:50:53:22:71:ad:
                    bf:24:2d:f1:20:2f:c9:09:d4:ad:b8:bc:91:d0:24:
                    eb:51:8d:1f:60:2e:04:33:d7:57:91:c2:fd:c5:65:
                    80:e8:93:a3:f6:e5:68:58:3a:18:a5:f7:2f:d0:a7:
                    46:ac:59:24:b7:59:42:53:5a:9d:af:38:d5:ef:9c:
                    ba:a5:e2:f5:09:5f:d4:4f:0e:9e:bd:4f:0d:a7:6c:
                    aa:d5:06:54:b1:8f:fa:96:93:0b:a6:06:7e:62:62:
                    5f:9b:97:42:f2:be:1f:33:e2:98:5b:79:39:ea:43:
                    42:e3:e3:19:a6:7f:6e:0b:35:10:de:89:a3:10:43:
                    62:58:3f:59:80:ba:6d:9a:73:f2:cc:c1:42:15:bf:
                    b0:8c:25:72:3e:13:48:da:3c:73:eb:75:e0:66:7f:
                    3e:e9:68:46:92:72:7a:72:d0:a5:bf:b6:57:4d:14:
                    59:7f:5d:cf:dd:51:d4:3b:09:49:dc:f8:de:2d:84:
                    6e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:68:D3:A6:F9:BE:3A:66:80:6A:51:0E:8A:E3:92:C7:25:03:65:1E
            X509v3 Authority Key Identifier:
                keyid:E6:A0:99:58:EF:97:34:F0:A5:F1:61:CE:F6:34:AA:63:6C:39:46:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HKsDRAXYhgW9W7tABJurc8fGrRvnnV67bt9MFYwHRDd/0/E6A09958EF9734F0A5F161CEF634AA636C3946BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6A09958EF9734F0A5F161CEF634AA636C3946BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HKsDRAXYhgW9W7tABJurc8fGrRvnnV67bt9MFYwHRDd/0/323830343a373065303a3a2f33322d3335203d3e20323730373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:74:70:db:7b:fa:a4:3f:1c:ae:a7:e9:e1:12:09:d3:22:c6:
         09:3a:e9:14:14:fa:6a:8b:0a:b1:aa:47:01:14:be:ac:60:ab:
         73:70:ec:2c:8a:d7:26:4a:d4:f4:71:61:89:4d:c9:4c:a1:29:
         bb:80:d4:09:36:1a:2b:a7:53:8a:eb:d7:8b:eb:33:f1:df:8e:
         7e:4f:aa:6d:b0:1b:ca:85:c3:4d:a1:38:95:4f:de:07:ae:17:
         ac:51:74:5d:4f:08:41:7e:f1:54:9f:0d:95:d0:e4:cf:82:14:
         49:ac:8a:1e:53:0b:96:26:06:94:6d:8f:e6:b6:ae:a8:ed:80:
         94:10:96:bd:5e:d6:e2:21:5b:2e:bf:56:be:6f:8c:4f:8f:7b:
         02:b5:ee:1d:45:a8:ae:9c:4d:26:f4:bc:44:b2:52:89:7f:42:
         f7:c4:ec:9a:12:80:07:c6:bd:18:c4:be:1b:28:42:23:bf:23:
         68:1b:3b:1e:2c:57:c1:36:16:20:28:e6:64:07:f8:ec:26:f2:
         b4:71:79:3e:b5:3b:58:9e:b4:92:8e:c3:3d:1e:3f:d0:35:9e:
         35:7b:ba:8f:c5:15:04:73:79:0a:09:d3:78:25:30:21:78:cf:
         50:c6:7c:13:73:d6:ef:dc:a8:ef:73:e9:cf:f2:1c:c0:0c:b5:
         9d:d7:f7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org