Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/323830343a323463633a396630303a3a2f34302d3430203d3e20323634323432.roa
File:                     323830343a323463633a396630303a3a2f34302d3430203d3e20323634323432.roa (raw, json)
Hash identifier:          H1U6lzdrP1vMxz5hpZz+YCBCNuBv3Fqps2SHYrQiFjw=
Subject key identifier:   D7:AB:9C:C0:0E:37:48:8F:D1:22:AA:5B:6B:7B:E6:85:DD:51:99:64
Certificate issuer:       /CN=7667A81C6781430B80742CE2AD77D59D4D691FEE
Certificate serial:       61B44F0B042FD8825A9ECB8C9C5601E11618339F
Authority key identifier: 76:67:A8:1C:67:81:43:0B:80:74:2C:E2:AD:77:D5:9D:4D:69:1F:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/323830343a323463633a396630303a3a2f34302d3430203d3e20323634323432.roa
Signing time:             Sun 23 Jul 2023 00:00:07 +0000
ROA not before:           Sat 22 Jul 2023 23:55:07 +0000
ROA not after:            Sun 21 Jul 2024 00:00:07 +0000
asID:                     264242
IP address blocks:        2804:24cc:9f00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b4:4f:0b:04:2f:d8:82:5a:9e:cb:8c:9c:56:01:e1:16:18:33:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7667A81C6781430B80742CE2AD77D59D4D691FEE
        Validity
            Not Before: Jul 22 23:55:07 2023 GMT
            Not After : Jul 21 00:00:07 2024 GMT
        Subject: CN=D7AB9CC00E37488FD122AA5B6B7BE685DD519964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:36:e1:d8:06:ac:93:66:7c:c8:6f:f7:be:a3:
                    ee:fd:bd:61:07:5b:9c:67:de:99:61:ec:93:e4:1b:
                    f6:f1:e1:86:fa:de:65:ef:fa:4e:1b:92:7c:4f:69:
                    44:c7:8a:04:6f:24:97:55:17:98:30:17:71:dc:2e:
                    d2:96:e4:c9:78:f9:a1:83:8e:e1:b0:85:f4:5f:fe:
                    1c:64:8a:44:a6:d3:01:09:17:a0:60:8b:ff:1f:30:
                    00:ea:31:00:32:ef:fe:af:8d:93:77:a1:f5:18:aa:
                    f3:73:e1:81:bb:00:0f:5a:d3:6b:ba:81:5e:53:71:
                    32:d1:0c:d4:e5:0e:d8:e5:23:96:6f:2f:d2:b7:b9:
                    a2:ba:db:38:f5:d1:36:75:78:12:35:49:3a:83:a5:
                    20:bc:5b:59:40:69:4f:f9:65:89:7f:fc:cb:4a:a9:
                    37:40:0b:08:96:19:8b:c7:c0:28:a4:26:dd:2a:41:
                    9f:ce:1f:bc:9d:69:54:1b:66:62:d0:2f:14:e5:04:
                    7f:97:b5:81:46:e0:ff:12:40:79:6f:f7:94:30:32:
                    0f:19:80:4a:48:f7:d0:af:c1:c3:d4:11:1b:67:e4:
                    a7:fc:d4:f4:da:ae:f7:b2:2e:40:88:d0:7c:a2:90:
                    22:4b:f1:15:95:7b:d4:32:ae:23:83:1a:17:5d:d1:
                    67:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:AB:9C:C0:0E:37:48:8F:D1:22:AA:5B:6B:7B:E6:85:DD:51:99:64
            X509v3 Authority Key Identifier:
                keyid:76:67:A8:1C:67:81:43:0B:80:74:2C:E2:AD:77:D5:9D:4D:69:1F:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/323830343a323463633a396630303a3a2f34302d3430203d3e20323634323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24cc:9f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         56:a9:0a:37:f9:48:44:03:0a:fd:9f:fe:63:ff:f8:dc:96:9c:
         80:d5:09:c6:62:88:be:6b:7d:a0:8b:2d:7d:3b:9b:33:ff:59:
         e6:98:57:3e:5e:d0:a1:ad:44:01:d8:d4:c2:b4:d6:5b:1a:9e:
         ae:a4:86:6f:9d:23:a7:da:33:ef:56:79:de:06:56:a6:0b:b9:
         d2:26:a9:d5:12:d6:f0:3b:ea:35:b5:09:b6:2a:14:81:16:9e:
         45:eb:2f:db:41:4f:77:f8:03:10:c0:d8:b6:99:14:aa:75:29:
         88:f3:68:2b:3f:03:4f:31:ee:39:df:c2:8e:2f:f7:21:eb:13:
         ad:1f:07:96:92:f8:3c:95:e5:99:ff:92:17:80:d1:f7:c7:be:
         ea:cb:c8:bc:b5:06:fe:57:27:7d:e3:6c:83:a1:0e:1c:29:71:
         dc:cf:9e:73:08:f6:5a:36:38:b9:24:9a:f0:85:58:69:8d:e7:
         79:91:bb:3c:a5:1c:d5:07:9f:2e:91:b0:dc:5c:f7:0c:dd:90:
         a5:80:9c:ab:c2:c9:4b:12:c3:3d:d5:80:0f:36:7b:8e:bb:09:
         dc:99:b2:1f:90:f1:31:0b:7b:59:bf:6b:45:66:99:1c:25:6d:
         c6:18:fb:42:8d:26:1c:fb:c0:8e:f4:05:ea:93:1f:6f:9f:33:
         66:87:c3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org