Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/323830343a373530343a343030303a3a2f33342d3334203d3e20323731303138.roa
File:                     323830343a373530343a343030303a3a2f33342d3334203d3e20323731303138.roa (raw, json)
Hash identifier:          zsHnLyDC8u/zPgAcplh8S/8ZGB+tbgzHpJbXS/YlEj8=
Subject key identifier:   C4:53:B9:19:81:00:8B:2F:58:5E:2B:B2:D1:C7:BA:5C:91:DD:72:F3
Certificate issuer:       /CN=AA607E5E454F44A3D5284D9663DCB35738F2672D
Certificate serial:       072C182021C6FBDFE5FE39859AB813F1B21E3417
Authority key identifier: AA:60:7E:5E:45:4F:44:A3:D5:28:4D:96:63:DC:B3:57:38:F2:67:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA607E5E454F44A3D5284D9663DCB35738F2672D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/323830343a373530343a343030303a3a2f33342d3334203d3e20323731303138.roa
Signing time:             Thu 23 Feb 2023 14:40:23 +0000
ROA not before:           Thu 23 Feb 2023 14:35:23 +0000
ROA not after:            Thu 22 Feb 2024 14:40:23 +0000
asID:                     271018
IP address blocks:        2804:7504:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:2c:18:20:21:c6:fb:df:e5:fe:39:85:9a:b8:13:f1:b2:1e:34:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA607E5E454F44A3D5284D9663DCB35738F2672D
        Validity
            Not Before: Feb 23 14:35:23 2023 GMT
            Not After : Feb 22 14:40:23 2024 GMT
        Subject: CN=C453B91981008B2F585E2BB2D1C7BA5C91DD72F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e4:c8:d0:12:d1:c0:b1:0b:b8:ec:3f:60:3c:
                    09:12:5e:78:3e:46:36:d5:48:51:ff:d6:30:8e:b6:
                    ab:2c:6c:e5:7f:66:05:bf:aa:66:80:f0:4e:0c:6a:
                    35:36:75:68:60:52:5a:04:ce:49:9d:b9:d5:7c:70:
                    be:c7:df:a1:20:ea:e8:0d:15:16:89:ac:7b:36:76:
                    b1:62:81:f0:15:45:cd:8d:4a:32:35:07:f2:c4:6a:
                    f2:36:71:49:6f:f1:a6:2a:6f:ed:42:f4:82:ce:7e:
                    c9:4e:3d:94:85:51:b2:ba:de:10:9f:43:7b:a1:e2:
                    2c:a9:df:82:3d:bb:48:8e:ee:df:15:d3:9e:e3:ac:
                    9d:54:50:59:b8:3f:4e:63:1e:e7:55:5b:68:cd:73:
                    28:44:45:b9:3a:35:e8:e7:3b:b8:01:a8:84:6b:5a:
                    d8:ef:ba:d3:a2:3e:8d:c5:d5:b9:f6:f2:07:b5:eb:
                    9e:70:06:3c:bf:44:3e:80:09:47:c7:cb:2d:93:83:
                    1b:d3:8f:c7:d5:95:cb:52:bc:b4:6a:23:ab:47:1f:
                    09:35:0e:d7:9c:72:90:82:f6:5a:12:75:34:ce:44:
                    ea:a6:5a:4d:7c:b5:64:28:50:82:60:0a:9a:07:42:
                    d5:87:30:17:3b:57:df:cb:d3:82:1b:5a:21:77:d1:
                    91:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:53:B9:19:81:00:8B:2F:58:5E:2B:B2:D1:C7:BA:5C:91:DD:72:F3
            X509v3 Authority Key Identifier:
                keyid:AA:60:7E:5E:45:4F:44:A3:D5:28:4D:96:63:DC:B3:57:38:F2:67:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/AA607E5E454F44A3D5284D9663DCB35738F2672D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA607E5E454F44A3D5284D9663DCB35738F2672D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/323830343a373530343a343030303a3a2f33342d3334203d3e20323731303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7504:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         97:fb:70:e9:6a:f3:ca:07:e4:e1:71:66:18:30:fe:e9:46:c4:
         ea:91:ee:44:27:4b:06:4b:7a:0a:40:4b:93:cd:2c:4f:8b:c5:
         e5:91:88:ec:c3:8d:3c:b6:78:52:ec:2e:b5:b3:a9:de:84:2f:
         83:00:8d:05:d1:3f:fc:f7:5a:38:49:88:11:15:ab:39:bb:39:
         2d:cd:8c:e0:b1:29:37:a2:0a:69:84:97:ac:9a:39:b1:44:99:
         06:f1:60:6e:fd:47:b1:41:51:2c:ac:f8:38:8f:f2:1f:7d:d7:
         a9:52:44:d4:c5:9d:7b:ef:b3:d7:da:a1:ab:bd:15:5e:ac:dd:
         dc:e7:f0:e4:b0:b2:ea:bf:c9:f7:cc:eb:cd:8b:04:2c:1e:6e:
         5d:35:d3:4d:9a:7e:b9:b2:33:f0:16:03:6b:09:5a:16:d3:c9:
         f0:64:e6:db:d6:a3:2f:6f:f4:c2:66:24:16:24:86:98:a5:2c:
         c7:87:93:14:be:5f:f0:10:11:50:8b:5f:c2:49:85:75:37:4c:
         e4:03:b2:30:e7:a5:42:9a:b1:26:3c:dc:61:17:0d:6c:91:31:
         de:fd:a4:aa:68:d2:fd:08:ad:ca:7c:c6:b7:3a:c6:dd:42:aa:
         e2:c0:9c:77:3f:47:95:e1:b9:61:e8:9e:8b:1a:fc:bb:eb:61:
         76:00:4f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org