Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/323830343a383638343a623030303a3a2f33362d3336203d3e20323732363439.roa
File:                     323830343a383638343a623030303a3a2f33362d3336203d3e20323732363439.roa (raw, json)
Hash identifier:          9IF0x1cBgkXshq9ZAzsuecVV/PToMKZtftAUZFZEse0=
Subject key identifier:   FE:0F:BD:FB:6B:23:67:8E:CE:08:3C:25:D0:EF:F8:69:05:62:93:F3
Certificate issuer:       /CN=70427113C728F653176866A2E47D9746EA86B842
Certificate serial:       0A736640304050DAF1DAEBE913A89583C48E2F87
Authority key identifier: 70:42:71:13:C7:28:F6:53:17:68:66:A2:E4:7D:97:46:EA:86:B8:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70427113C728F653176866A2E47D9746EA86B842.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/323830343a383638343a623030303a3a2f33362d3336203d3e20323732363439.roa
Signing time:             Tue 21 Nov 2023 15:11:21 +0000
ROA not before:           Tue 21 Nov 2023 15:06:21 +0000
ROA not after:            Tue 19 Nov 2024 15:11:21 +0000
asID:                     272649
IP address blocks:        2804:8684:b000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:73:66:40:30:40:50:da:f1:da:eb:e9:13:a8:95:83:c4:8e:2f:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70427113C728F653176866A2E47D9746EA86B842
        Validity
            Not Before: Nov 21 15:06:21 2023 GMT
            Not After : Nov 19 15:11:21 2024 GMT
        Subject: CN=FE0FBDFB6B23678ECE083C25D0EFF869056293F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:22:cf:b7:e6:d0:75:8f:7d:0e:f6:d2:cc:ce:
                    d0:17:2e:47:20:4e:6e:d1:8f:1b:e2:02:52:5b:20:
                    f4:de:47:cc:65:20:98:43:56:95:2b:e9:f9:80:0a:
                    8b:ce:d4:2b:70:24:9e:a1:e5:28:03:58:3c:c8:61:
                    94:62:86:9b:c1:95:29:48:8f:41:92:b2:68:68:f6:
                    48:6e:8a:5f:58:d2:d9:cc:65:ff:c3:1a:cd:94:e6:
                    47:ff:a4:00:3f:1a:46:5d:33:a7:2f:26:d1:fb:27:
                    0b:d5:11:82:2e:59:54:b8:e5:f9:20:1f:5c:b8:12:
                    4c:d4:c7:70:3b:17:a8:e1:70:fe:65:47:5e:3d:14:
                    91:40:d9:e0:d7:ad:fb:76:a6:01:f5:c3:dc:6a:52:
                    66:8b:f1:ac:d1:0b:a4:54:63:26:66:5c:23:e5:10:
                    17:f3:35:ca:76:f1:40:08:b2:71:f2:1b:bd:31:93:
                    78:1b:21:25:23:4d:f7:58:d5:a2:de:2f:57:2a:8e:
                    fb:13:31:dc:9c:bc:4b:13:1d:38:39:56:2e:56:77:
                    52:87:db:fb:db:6d:c6:fb:d5:c1:57:fa:2c:38:f5:
                    3d:d8:2b:7d:d3:fb:08:da:24:f4:11:92:87:c5:d1:
                    55:f1:2d:1e:ca:cc:f7:2c:e9:6d:09:4d:b1:81:43:
                    06:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:0F:BD:FB:6B:23:67:8E:CE:08:3C:25:D0:EF:F8:69:05:62:93:F3
            X509v3 Authority Key Identifier:
                keyid:70:42:71:13:C7:28:F6:53:17:68:66:A2:E4:7D:97:46:EA:86:B8:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/70427113C728F653176866A2E47D9746EA86B842.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70427113C728F653176866A2E47D9746EA86B842.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/323830343a383638343a623030303a3a2f33362d3336203d3e20323732363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8684:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1d:50:5b:19:bb:25:34:97:ef:70:ab:1a:bb:ac:e8:13:2b:42:
         0e:fb:13:cb:e8:5b:dd:95:62:a7:c0:fa:9b:b4:7c:18:65:4f:
         22:06:fa:a8:83:1b:d0:f6:f5:25:2e:18:12:b5:5e:62:1d:6d:
         75:cc:1e:84:75:4e:4c:a5:04:62:64:71:e8:26:89:63:f7:55:
         d3:2b:86:07:9d:d3:fe:e6:76:c3:0e:83:a3:32:ba:c8:4c:35:
         e5:02:31:2a:02:5c:a4:64:5f:c9:37:6f:ec:0c:4f:ff:39:db:
         47:73:6c:05:f1:53:40:eb:65:cb:2e:73:2a:1a:1d:50:df:31:
         13:50:10:56:81:47:d5:1a:f9:41:5c:7d:72:46:2d:35:8c:93:
         66:3b:9a:8c:82:84:12:8e:ea:af:5a:26:60:cf:9e:e3:b1:b7:
         ff:2e:4e:51:e5:da:04:77:8b:ab:cf:3d:2b:21:df:bb:84:00:
         bb:99:db:51:dd:5c:83:52:fe:e5:3b:46:46:71:bc:05:ba:2f:
         18:6e:19:8f:4f:25:48:93:56:22:57:45:94:1a:6a:da:e0:ae:
         8c:ba:27:41:e6:cf:62:f4:d0:2c:aa:f7:6a:3a:f8:1c:f4:51:
         25:7d:75:25:39:03:39:98:f3:b9:51:34:ca:f7:61:ae:34:8b:
         6a:01:f0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:57 2024 by rpki-client on console-ams.rpki-client.org