Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/323830343a383638343a393030303a3a2f33362d3336203d3e20323732363439.roa
File:                     323830343a383638343a393030303a3a2f33362d3336203d3e20323732363439.roa (raw, json)
Hash identifier:          LnOu5NrrDYWcfoGpOsC0W3SONUXai63MpXhmiO/HmOg=
Subject key identifier:   99:F9:65:01:1E:38:1C:A7:F8:0F:EE:EB:D8:55:4F:F9:4B:32:04:99
Certificate issuer:       /CN=70427113C728F653176866A2E47D9746EA86B842
Certificate serial:       601E30B2398B2ED419E883A5DA2A626770840D9D
Authority key identifier: 70:42:71:13:C7:28:F6:53:17:68:66:A2:E4:7D:97:46:EA:86:B8:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70427113C728F653176866A2E47D9746EA86B842.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/323830343a383638343a393030303a3a2f33362d3336203d3e20323732363439.roa
Signing time:             Tue 21 Nov 2023 15:11:20 +0000
ROA not before:           Tue 21 Nov 2023 15:06:20 +0000
ROA not after:            Tue 19 Nov 2024 15:11:20 +0000
asID:                     272649
IP address blocks:        2804:8684:9000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:1e:30:b2:39:8b:2e:d4:19:e8:83:a5:da:2a:62:67:70:84:0d:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70427113C728F653176866A2E47D9746EA86B842
        Validity
            Not Before: Nov 21 15:06:20 2023 GMT
            Not After : Nov 19 15:11:20 2024 GMT
        Subject: CN=99F965011E381CA7F80FEEEBD8554FF94B320499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6b:f4:36:4a:48:7d:c7:23:24:5f:d4:17:54:
                    06:28:38:d6:02:81:dd:30:ff:5e:d5:e4:87:09:6a:
                    be:95:cd:98:1b:77:84:55:de:7e:8e:05:ac:c7:0c:
                    2d:d1:be:51:e4:dc:0c:f9:a6:19:46:7f:5c:70:e2:
                    54:99:26:5c:48:bc:38:81:36:c2:f9:d5:8b:7d:f5:
                    5d:1e:75:50:ec:96:26:fb:cb:2d:49:58:f8:41:85:
                    b8:02:09:17:6a:14:04:56:69:72:78:d7:42:bd:af:
                    4c:11:59:a1:fd:0b:96:23:ae:d8:04:18:d6:9f:d2:
                    90:46:bd:7a:69:c5:4e:ff:22:1b:60:37:89:4a:6f:
                    3c:56:d0:09:fe:ca:6e:ac:ab:95:f2:14:76:3e:d6:
                    ff:1b:56:6b:8b:83:d0:4a:3e:7b:bc:5c:13:5d:c8:
                    be:35:f5:1e:c4:ee:be:ac:56:48:63:56:99:9f:88:
                    29:3b:16:ba:0d:97:a8:4d:2a:84:5c:f7:ca:c1:3c:
                    bf:8a:8f:20:2f:3d:37:2f:8b:99:3e:66:64:2b:8e:
                    32:39:11:76:a0:95:9f:6e:f0:f9:41:12:68:cd:67:
                    e2:cc:43:28:77:77:10:42:60:ac:21:fc:40:97:4b:
                    56:f1:1a:2c:03:f6:ac:40:7d:c5:b0:e2:72:47:ee:
                    d1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F9:65:01:1E:38:1C:A7:F8:0F:EE:EB:D8:55:4F:F9:4B:32:04:99
            X509v3 Authority Key Identifier:
                keyid:70:42:71:13:C7:28:F6:53:17:68:66:A2:E4:7D:97:46:EA:86:B8:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/70427113C728F653176866A2E47D9746EA86B842.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70427113C728F653176866A2E47D9746EA86B842.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/323830343a383638343a393030303a3a2f33362d3336203d3e20323732363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8684:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         49:ef:10:1a:2f:df:87:95:ab:5e:19:30:70:81:c8:54:17:cc:
         31:36:8e:d9:e1:6e:72:35:9a:e7:6f:c7:60:64:c2:7a:36:6d:
         68:48:c9:56:ed:16:91:74:50:9d:96:aa:55:1f:03:96:94:23:
         ab:df:91:19:79:33:ac:47:b5:44:a0:f9:39:fe:95:6a:08:45:
         dc:5f:95:f0:51:91:7e:c2:89:03:6b:b9:69:a7:48:56:39:84:
         e9:32:6e:ab:c2:44:66:a4:16:36:82:ce:71:7e:36:45:39:c8:
         57:97:ce:bd:25:5b:f9:5e:b2:ec:18:52:97:41:b3:90:fc:6c:
         ae:a6:42:c2:ad:2c:7a:19:6c:a2:f6:66:c7:93:0b:e7:9f:79:
         84:c3:8e:2a:e8:10:88:2b:ce:c3:70:0d:e6:c5:00:13:4a:05:
         28:08:5a:60:0c:a6:f2:48:e9:5e:7b:65:c6:aa:85:27:e5:e1:
         3c:84:de:83:0f:f8:2e:7c:b5:4b:de:ee:2c:33:77:51:37:8e:
         38:7e:9d:80:2b:7c:35:b7:5e:a4:da:57:9f:16:a1:05:d9:8d:
         ba:be:15:23:0b:06:99:2a:fe:e0:cb:d7:53:7e:55:a0:d7:07:
         c9:34:84:4e:bd:1f:f5:56:05:fa:41:97:8b:56:07:1a:cb:c5:
         1b:77:e6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org