Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/323830343a323463633a386230303a3a2f34302d3430203d3e20323634323432.roa
File:                     323830343a323463633a386230303a3a2f34302d3430203d3e20323634323432.roa (raw, json)
Hash identifier:          pAJ6llvSujXhcKuNH8TxoPhVs1ID0NiegcGOgh1kevk=
Subject key identifier:   1E:4E:18:96:D9:89:B6:DB:28:F1:8A:49:69:44:15:F1:5F:C4:22:D1
Certificate issuer:       /CN=7667A81C6781430B80742CE2AD77D59D4D691FEE
Certificate serial:       7D76B66848F9C58A22BE66D35484CC775D59612B
Authority key identifier: 76:67:A8:1C:67:81:43:0B:80:74:2C:E2:AD:77:D5:9D:4D:69:1F:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/323830343a323463633a386230303a3a2f34302d3430203d3e20323634323432.roa
Signing time:             Sun 23 Jul 2023 00:08:24 +0000
ROA not before:           Sun 23 Jul 2023 00:03:24 +0000
ROA not after:            Sun 21 Jul 2024 00:08:24 +0000
asID:                     264242
IP address blocks:        2804:24cc:8b00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:76:b6:68:48:f9:c5:8a:22:be:66:d3:54:84:cc:77:5d:59:61:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7667A81C6781430B80742CE2AD77D59D4D691FEE
        Validity
            Not Before: Jul 23 00:03:24 2023 GMT
            Not After : Jul 21 00:08:24 2024 GMT
        Subject: CN=1E4E1896D989B6DB28F18A49694415F15FC422D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4c:68:08:bc:76:42:46:03:bd:86:1b:b3:4a:
                    80:69:74:17:79:2a:d4:17:86:a8:01:55:63:c6:eb:
                    3c:6d:60:b6:6f:89:f7:32:e0:16:d2:6c:fc:f5:4b:
                    7c:ce:9b:2c:d0:9b:5b:30:03:87:47:6a:f8:2d:1e:
                    79:5a:1f:ba:bb:25:b7:2f:b5:1c:44:72:66:06:e4:
                    7f:6d:75:12:81:13:8d:37:e7:85:88:7b:65:5a:03:
                    0a:21:af:74:28:c2:12:cc:80:56:bc:11:a8:4e:97:
                    b0:4f:30:8d:49:5c:88:e1:90:26:cb:e3:5e:cf:b2:
                    da:3e:91:0b:0d:d4:ad:9c:11:55:b9:e9:40:50:b2:
                    fb:46:06:3c:57:1e:36:ea:92:00:61:4c:71:ba:ba:
                    f3:b3:e1:f3:e7:03:f9:ac:b6:12:7f:2e:6e:e5:a3:
                    d1:6b:9c:56:1c:ac:8a:e3:14:2b:c6:66:ed:8e:8c:
                    88:8f:1b:73:54:79:1c:c8:76:c9:d6:ab:47:49:33:
                    66:90:f1:a3:52:eb:4c:c1:8c:57:12:8b:e3:f1:bf:
                    f8:d7:84:fb:6f:af:20:57:f6:11:bd:3f:a0:19:64:
                    17:f2:d6:0f:c3:c9:ed:1d:36:3b:7e:1c:b6:8f:f0:
                    82:af:be:26:0d:fb:a8:45:51:46:2f:f9:0c:83:20:
                    62:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:4E:18:96:D9:89:B6:DB:28:F1:8A:49:69:44:15:F1:5F:C4:22:D1
            X509v3 Authority Key Identifier:
                keyid:76:67:A8:1C:67:81:43:0B:80:74:2C:E2:AD:77:D5:9D:4D:69:1F:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/323830343a323463633a386230303a3a2f34302d3430203d3e20323634323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24cc:8b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         73:0a:57:32:6e:ae:8b:ac:57:40:eb:25:0e:93:48:18:4d:c2:
         de:2c:07:d8:bf:47:35:86:ad:20:59:6e:9c:cf:66:42:38:d1:
         5b:da:18:93:1b:ec:8d:69:ba:14:4d:9a:d1:44:8b:20:ad:88:
         81:2e:ba:62:e4:09:50:57:8a:0b:8a:ac:2b:86:40:8e:c2:31:
         9f:30:86:fa:31:65:9d:70:78:e2:36:61:32:b3:02:8c:ca:4d:
         3e:7e:c2:d0:73:8e:43:8c:74:f7:c5:e8:50:95:3a:8c:b0:7f:
         6b:0f:16:98:e1:8f:a9:7d:18:45:b5:12:5a:62:38:1e:6d:0e:
         5f:c1:d8:7e:73:e8:49:47:c2:eb:40:24:96:40:c8:f9:4c:06:
         33:01:0f:30:3c:e4:2a:46:19:df:ff:47:6e:59:b3:ca:10:31:
         00:11:60:7e:a2:6a:76:1a:5b:92:53:0d:e1:ce:af:5e:7e:89:
         d6:4e:8b:c1:6d:a1:ff:f0:f4:20:c1:1f:58:96:f5:8a:7c:df:
         1d:98:ae:04:69:09:b3:c5:73:64:a3:d1:48:b1:66:b4:20:2f:
         c7:de:1f:a3:a2:8e:bb:76:e6:bf:a3:bb:80:6e:05:1c:81:68:
         37:69:be:c0:17:4f:b8:2e:9a:fa:5a:57:70:0f:cd:a7:2e:ae:
         67:93:f2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org