Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/323830343a383638343a3a2f33362d3336203d3e20323732363439.roa
File:                     323830343a383638343a3a2f33362d3336203d3e20323732363439.roa (raw, json)
Hash identifier:          TgLJuvzsv4OoadfjnPExzUBGLnXwt42uu7Of+MWkxXU=
Subject key identifier:   64:BC:09:65:39:5B:75:08:9D:87:14:37:07:E1:F8:53:BA:95:7A:70
Certificate issuer:       /CN=70427113C728F653176866A2E47D9746EA86B842
Certificate serial:       0776AB8EFBE10598642244073D7F3303A233915F
Authority key identifier: 70:42:71:13:C7:28:F6:53:17:68:66:A2:E4:7D:97:46:EA:86:B8:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70427113C728F653176866A2E47D9746EA86B842.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/323830343a383638343a3a2f33362d3336203d3e20323732363439.roa
Signing time:             Tue 21 Nov 2023 15:11:18 +0000
ROA not before:           Tue 21 Nov 2023 15:06:18 +0000
ROA not after:            Tue 19 Nov 2024 15:11:18 +0000
asID:                     272649
IP address blocks:        2804:8684::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:76:ab:8e:fb:e1:05:98:64:22:44:07:3d:7f:33:03:a2:33:91:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70427113C728F653176866A2E47D9746EA86B842
        Validity
            Not Before: Nov 21 15:06:18 2023 GMT
            Not After : Nov 19 15:11:18 2024 GMT
        Subject: CN=64BC0965395B75089D87143707E1F853BA957A70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:30:bb:d6:ba:94:e2:bf:3a:b7:dc:37:ee:3a:
                    ad:fa:c3:e5:bc:07:2a:30:f4:1f:f5:fa:a5:f2:72:
                    ad:10:e8:c3:00:22:e9:3e:b2:f1:53:eb:0a:ea:a8:
                    10:b9:88:fe:75:35:59:31:31:97:b0:c1:ca:e3:d1:
                    0d:d7:79:99:ea:a7:b3:c9:83:ca:d2:29:0d:d5:6b:
                    b7:0f:21:cf:2b:0d:98:c5:98:c2:02:48:53:8a:65:
                    b1:51:72:f5:ea:7d:98:cb:e5:ae:b9:9f:82:4e:d7:
                    a5:5e:55:26:ab:09:1c:71:2e:c6:5a:1b:1c:6b:2d:
                    67:e5:67:57:9c:37:3c:bc:66:43:fd:0b:69:09:8d:
                    38:6e:fa:9d:d6:38:cc:43:71:a5:75:25:64:f4:a6:
                    8c:ff:ca:d6:fe:4e:44:b2:eb:86:66:b6:bf:83:ae:
                    de:79:59:c7:3d:79:62:8f:f7:22:aa:68:20:b2:cc:
                    f3:44:04:aa:e8:02:a7:f1:6c:20:89:c5:41:29:c1:
                    f0:3d:29:cf:6f:48:b9:2c:96:f1:68:76:d4:25:6c:
                    e7:e3:80:ca:f0:98:c1:95:23:5e:50:66:6a:5e:53:
                    4b:cd:85:86:f6:c5:85:ce:d8:50:13:67:e5:34:6a:
                    a4:6a:93:00:56:6c:13:7a:71:fc:0c:c2:07:39:09:
                    2f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:BC:09:65:39:5B:75:08:9D:87:14:37:07:E1:F8:53:BA:95:7A:70
            X509v3 Authority Key Identifier:
                keyid:70:42:71:13:C7:28:F6:53:17:68:66:A2:E4:7D:97:46:EA:86:B8:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/70427113C728F653176866A2E47D9746EA86B842.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70427113C728F653176866A2E47D9746EA86B842.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/323830343a383638343a3a2f33362d3336203d3e20323732363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8684::/36

    Signature Algorithm: sha256WithRSAEncryption
         ab:b6:ca:d6:13:7b:01:4f:10:66:c3:01:7a:0f:c9:84:ec:9a:
         f5:e2:be:09:65:62:2c:6a:92:b1:fa:e4:6b:99:f4:0f:2e:be:
         90:83:f8:82:8e:5c:ef:aa:8f:c8:93:fc:a1:48:32:74:5b:ea:
         f9:c1:35:ab:bd:48:63:d7:9e:3a:67:64:27:3c:c9:73:95:2b:
         05:88:1b:ae:68:f9:a7:e7:e9:81:29:aa:bd:48:c8:9d:40:18:
         00:91:6b:b9:1c:af:e1:d9:2d:9d:97:ae:09:8f:a9:91:d7:10:
         d9:3f:36:c9:3b:f4:aa:46:41:31:de:d6:3d:7d:71:dc:d1:f7:
         a9:3f:7c:f2:42:ee:47:4b:68:b5:53:46:a8:73:5b:13:51:53:
         7a:e9:1d:98:fc:b7:58:0a:fa:2b:14:73:90:d8:84:db:11:b9:
         20:65:e4:96:31:06:2e:77:5c:90:0c:5f:81:b3:f1:81:54:e1:
         db:af:b5:fa:5a:64:f3:0a:47:01:ee:e6:d4:28:83:89:f4:15:
         c1:29:97:85:53:dc:3f:e9:cd:5e:34:8a:59:18:bd:0d:1e:16:
         a4:cd:63:e2:9c:8b:0e:0c:6b:a5:d1:16:f1:d3:1a:bd:e1:0e:
         26:d8:b2:27:dc:d5:fb:bf:7d:f8:af:55:a6:12:aa:20:1b:6f:
         ae:e5:69:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org