Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/323830343a323463633a386530303a3a2f34302d3430203d3e20323634323432.roa
File:                     323830343a323463633a386530303a3a2f34302d3430203d3e20323634323432.roa (raw, json)
Hash identifier:          vCi/CT1uPQx2sB1ZDLVyqoCxytFRdTGBgH1XWK7yW/0=
Subject key identifier:   17:1E:A0:52:17:06:11:18:D2:A5:76:15:20:66:72:85:DD:07:A3:6A
Certificate issuer:       /CN=7667A81C6781430B80742CE2AD77D59D4D691FEE
Certificate serial:       14C504FB08F892213F9A4FFE2B2879CDCB98C873
Authority key identifier: 76:67:A8:1C:67:81:43:0B:80:74:2C:E2:AD:77:D5:9D:4D:69:1F:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/323830343a323463633a386530303a3a2f34302d3430203d3e20323634323432.roa
Signing time:             Sun 23 Jul 2023 00:08:23 +0000
ROA not before:           Sun 23 Jul 2023 00:03:23 +0000
ROA not after:            Sun 21 Jul 2024 00:08:23 +0000
asID:                     264242
IP address blocks:        2804:24cc:8e00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:c5:04:fb:08:f8:92:21:3f:9a:4f:fe:2b:28:79:cd:cb:98:c8:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7667A81C6781430B80742CE2AD77D59D4D691FEE
        Validity
            Not Before: Jul 23 00:03:23 2023 GMT
            Not After : Jul 21 00:08:23 2024 GMT
        Subject: CN=171EA05217061118D2A5761520667285DD07A36A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:07:fa:68:dd:4e:74:69:66:db:92:5b:f0:c6:
                    25:a7:ac:48:79:30:a9:96:db:fb:f8:e0:9b:cd:d0:
                    98:d9:74:66:62:86:cb:dd:69:a8:dd:dd:fe:c3:6a:
                    48:7a:07:ee:a0:20:ae:00:64:7e:ab:9f:87:e6:4a:
                    83:19:3b:f2:a4:b4:54:58:5c:56:9e:d0:6c:d3:28:
                    8e:3f:29:82:5f:c6:06:e1:e5:03:52:0a:b6:19:0f:
                    b0:cf:7d:46:bc:7f:8d:a0:27:63:09:07:84:eb:6f:
                    ec:12:06:aa:3a:03:bb:4d:94:92:cd:29:93:82:b6:
                    84:68:cb:cc:2c:83:49:ec:28:3f:be:d8:1f:62:7b:
                    dd:ff:fc:11:5c:f3:8b:2b:0c:d9:a5:9b:0f:2c:06:
                    3f:4b:b7:7e:a0:25:a3:42:90:3b:c2:68:fe:aa:cc:
                    74:ac:06:c9:ba:d3:36:7e:d1:90:ff:db:55:9a:a9:
                    4a:02:fe:8c:d3:b3:4d:45:f9:90:95:b7:f4:2f:f1:
                    d9:5e:72:81:77:46:66:2c:67:7e:f4:bf:dd:02:51:
                    03:63:64:87:38:b2:a8:fc:de:13:26:e4:fe:01:fa:
                    46:66:29:cf:c3:f5:84:3a:8d:b2:5f:eb:74:66:05:
                    6c:42:52:01:3d:42:6e:22:7f:c4:55:d0:a6:94:9e:
                    44:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:1E:A0:52:17:06:11:18:D2:A5:76:15:20:66:72:85:DD:07:A3:6A
            X509v3 Authority Key Identifier:
                keyid:76:67:A8:1C:67:81:43:0B:80:74:2C:E2:AD:77:D5:9D:4D:69:1F:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/323830343a323463633a386530303a3a2f34302d3430203d3e20323634323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24cc:8e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         69:cb:cd:d5:59:9e:82:43:5c:84:e7:08:6d:03:e1:4c:8e:53:
         b5:81:e5:23:08:7c:19:82:fa:48:78:9f:05:37:8a:bf:ce:05:
         0e:f2:e3:81:0e:7f:ad:f5:c7:1e:92:a6:4b:2e:5e:be:f9:69:
         66:00:46:39:68:e9:89:f0:d9:76:bd:97:04:0b:65:97:7f:44:
         a7:11:14:ae:df:9a:47:ab:65:a8:7f:2a:94:07:05:74:8d:13:
         29:0f:81:a0:b1:b5:0a:a6:dc:41:24:47:68:a9:2e:0a:3d:c5:
         3e:46:fe:34:04:10:eb:1c:27:b0:a9:ef:9e:28:3a:cc:75:cc:
         d5:56:f9:b2:a1:a0:d0:ae:58:1d:4f:d2:32:e8:23:79:c7:57:
         af:c1:80:56:d7:f8:99:bf:41:df:1a:4c:6b:6b:26:cf:9e:20:
         03:ed:5f:cf:c2:9f:50:9b:95:ca:19:bc:71:ee:19:0a:e5:3a:
         20:70:70:74:ee:09:52:fc:93:8e:dd:7e:8a:71:90:2c:12:80:
         b7:8e:59:67:7c:78:be:c6:59:c8:50:97:b1:50:a0:06:c5:2c:
         45:8c:1d:5c:3e:92:7f:50:9f:f2:13:62:c1:d8:3d:6a:97:47:
         55:93:b2:be:f5:6c:28:d8:0f:5f:8c:79:d4:6d:5d:7a:da:85:
         1a:4f:3a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org