Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/323830343a366130303a663030303a3a2f33372d3337203d3e20323730333035.roa
File:                     323830343a366130303a663030303a3a2f33372d3337203d3e20323730333035.roa (raw, json)
Hash identifier:          VECYbbPDVEtRbub2wq0ZKoXqLqAeC+s66XAMm7D5d70=
Subject key identifier:   8C:7E:23:D7:02:8E:73:3F:22:BD:00:85:27:1E:C2:C2:C5:F8:A3:4B
Certificate issuer:       /CN=670B53705B1407CC3B30DDA3548CFE22775A41B9
Certificate serial:       06A97DB48FD2AC40A8323FF2C5512061CECF5318
Authority key identifier: 67:0B:53:70:5B:14:07:CC:3B:30:DD:A3:54:8C:FE:22:77:5A:41:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/670B53705B1407CC3B30DDA3548CFE22775A41B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/323830343a366130303a663030303a3a2f33372d3337203d3e20323730333035.roa
Signing time:             Thu 04 Apr 2024 15:50:35 +0000
ROA not before:           Thu 04 Apr 2024 15:45:35 +0000
ROA not after:            Thu 03 Apr 2025 15:50:35 +0000
asID:                     270305
IP address blocks:        2804:6a00:f000::/37 maxlen: 37

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:a9:7d:b4:8f:d2:ac:40:a8:32:3f:f2:c5:51:20:61:ce:cf:53:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=670B53705B1407CC3B30DDA3548CFE22775A41B9
        Validity
            Not Before: Apr  4 15:45:35 2024 GMT
            Not After : Apr  3 15:50:35 2025 GMT
        Subject: CN=8C7E23D7028E733F22BD0085271EC2C2C5F8A34B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:54:a7:c3:ad:26:65:b6:f0:cf:4b:42:47:11:
                    e2:2e:79:32:ae:06:81:97:f9:12:b2:c6:65:b2:9f:
                    ba:63:37:eb:cf:49:d6:b8:28:70:79:84:aa:8f:70:
                    13:17:59:63:9c:37:d0:f9:c9:26:f4:e4:50:f3:e9:
                    c3:d5:a0:54:53:fe:76:3d:67:e7:6c:9f:37:a1:ea:
                    12:16:69:5f:00:63:fb:7f:5b:76:e7:ea:91:75:e8:
                    6a:e9:ca:0f:6e:7d:f5:0a:c5:e4:01:a9:bf:4e:09:
                    e9:25:7f:d7:61:29:4a:23:b7:20:fe:5a:c9:50:59:
                    f5:e2:4e:d7:fc:b8:f1:58:54:67:f7:bc:d3:53:4d:
                    00:f9:df:c0:59:eb:2b:48:36:33:76:c5:69:76:f1:
                    f6:4e:a8:9c:81:f1:bc:2f:1f:2f:ee:2f:92:71:c3:
                    29:8b:8b:9d:87:1a:de:64:5e:5d:70:a6:9e:63:19:
                    42:b1:44:35:90:d0:22:f5:17:cd:cc:af:f5:1a:7d:
                    e0:cf:12:10:4f:ec:36:eb:30:6c:26:91:d1:00:1f:
                    eb:27:f8:ec:e6:54:bd:0d:65:6c:b6:8f:ed:1a:54:
                    98:07:83:d2:51:62:c5:da:11:14:a7:6c:26:8b:45:
                    9f:1d:98:81:7e:08:30:d5:6b:1e:8d:29:27:88:d6:
                    2f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:7E:23:D7:02:8E:73:3F:22:BD:00:85:27:1E:C2:C2:C5:F8:A3:4B
            X509v3 Authority Key Identifier:
                keyid:67:0B:53:70:5B:14:07:CC:3B:30:DD:A3:54:8C:FE:22:77:5A:41:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/670B53705B1407CC3B30DDA3548CFE22775A41B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/670B53705B1407CC3B30DDA3548CFE22775A41B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/323830343a366130303a663030303a3a2f33372d3337203d3e20323730333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a00:f000::/37

    Signature Algorithm: sha256WithRSAEncryption
         03:96:fc:f4:4d:06:fb:83:ff:4c:4b:73:53:5e:35:1c:5b:7e:
         45:ee:50:d7:e4:38:d0:b2:54:2e:56:98:31:54:ed:f9:17:b7:
         7e:12:3d:ca:f7:07:b1:9d:71:f5:bb:58:fc:ec:e9:f4:a2:c1:
         f3:90:34:21:ef:37:63:f4:89:9a:a5:ae:65:1d:aa:2c:ca:2d:
         e4:da:5e:95:ef:14:2e:8a:3b:fa:e5:49:04:2e:0b:6e:78:ae:
         12:ba:c8:3b:cd:8c:1b:95:90:df:2c:14:1c:7d:17:c7:2e:d6:
         58:47:83:6e:6a:0a:d2:45:71:0d:df:1d:d5:2e:9b:be:bb:45:
         57:ae:2c:07:61:16:66:88:11:b5:4a:e7:ce:99:15:00:f9:05:
         e7:e6:d1:c8:ff:93:23:1d:86:4a:db:37:ae:77:66:94:34:9e:
         5a:d5:ac:ab:44:c9:f2:40:63:20:6f:41:aa:37:91:1a:10:b3:
         02:d3:8b:ff:f0:ee:c1:58:8b:45:cc:e3:83:12:f3:34:83:5e:
         a7:3a:d6:18:1a:c2:82:b3:00:05:c3:d3:02:cb:87:28:6f:59:
         76:72:60:9e:62:b6:a6:84:8d:c2:f9:d8:1d:f7:80:7f:a2:6a:
         f2:7b:83:a9:31:43:49:34:05:e3:a2:17:f2:0e:10:fd:c9:e4:
         a7:79:94:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org