Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/1/323830343a3837633a623a313a3a2f36342d3634203d3e203238323032.roa
File:                     323830343a3837633a623a313a3a2f36342d3634203d3e203238323032.roa (raw, json)
Hash identifier:          TNF/mST0ZF2W1jc+Cbp8fPaFWYrwsVaIKfrLrDpdTKk=
Subject key identifier:   D7:36:EF:AD:57:BD:5B:C4:F0:CF:6C:01:0A:58:CD:DF:EF:16:F6:83
Certificate issuer:       /CN=E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8
Certificate serial:       6C2127A587B9E25BDC493C9B3B0A87F310B0FC04
Authority key identifier: E6:2F:C1:00:81:9A:1A:7B:48:F9:F7:98:18:EF:B6:9B:6B:9A:1F:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/1/323830343a3837633a623a313a3a2f36342d3634203d3e203238323032.roa
Signing time:             Thu 22 Jun 2023 11:20:04 +0000
ROA not before:           Thu 22 Jun 2023 11:15:04 +0000
ROA not after:            Thu 20 Jun 2024 11:20:04 +0000
asID:                     28202
IP address blocks:        2804:87c:b:1::/64 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:21:27:a5:87:b9:e2:5b:dc:49:3c:9b:3b:0a:87:f3:10:b0:fc:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8
        Validity
            Not Before: Jun 22 11:15:04 2023 GMT
            Not After : Jun 20 11:20:04 2024 GMT
        Subject: CN=D736EFAD57BD5BC4F0CF6C010A58CDDFEF16F683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fb:54:6d:17:c8:9e:aa:cc:1a:6f:49:9b:bd:
                    f0:24:94:9e:1e:c4:b2:52:d9:e8:be:a6:7b:bc:d6:
                    21:9b:eb:7d:0d:2d:96:c7:5a:fd:8c:c5:29:0b:32:
                    27:c6:0d:d4:d9:11:02:23:4c:6f:fc:e6:74:99:8a:
                    a0:76:97:38:98:95:26:07:cc:28:34:c6:42:9d:eb:
                    cd:b4:87:89:65:c1:04:ca:24:c6:ac:3f:0a:79:99:
                    99:78:02:5e:31:f8:22:71:d3:01:67:01:a4:2e:d1:
                    95:fb:6c:b7:54:eb:b6:a9:c7:a1:48:8c:88:24:80:
                    4e:e1:b1:3e:63:6b:56:67:51:01:5e:ea:d3:56:2f:
                    56:8f:f8:cd:af:62:07:bc:e0:49:8e:40:9d:4d:ec:
                    07:0e:51:0b:9c:50:3e:a0:c4:e7:26:fe:0a:6f:ff:
                    c1:a7:a3:c0:8c:b7:2c:d9:4f:34:63:0e:df:e1:16:
                    4d:e5:33:44:33:80:da:11:9a:8c:50:d2:db:7e:15:
                    fb:93:1d:70:91:d8:20:a3:d1:57:04:b0:83:af:b1:
                    75:62:b3:4e:3f:7c:43:e5:34:c4:19:94:5d:ab:7e:
                    44:d5:61:8c:54:fa:18:0c:17:19:7c:b3:41:88:3c:
                    e8:b3:f6:dd:eb:0c:01:17:9c:b4:cf:d4:64:d8:5b:
                    de:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:36:EF:AD:57:BD:5B:C4:F0:CF:6C:01:0A:58:CD:DF:EF:16:F6:83
            X509v3 Authority Key Identifier:
                keyid:E6:2F:C1:00:81:9A:1A:7B:48:F9:F7:98:18:EF:B6:9B:6B:9A:1F:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/1/E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/1/323830343a3837633a623a313a3a2f36342d3634203d3e203238323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87c:b:1::/64

    Signature Algorithm: sha256WithRSAEncryption
         5c:c0:10:33:75:85:d3:a2:f0:e0:39:d9:76:7e:64:38:00:62:
         fb:bf:09:b6:f2:72:f4:fa:b8:33:5b:2c:6a:3f:1e:01:7c:86:
         0e:ce:68:69:e8:94:65:14:83:fb:73:e0:b2:9e:5f:93:4d:0a:
         09:eb:a6:64:9c:1f:a9:f9:82:df:3d:f8:03:a3:c1:f7:6b:8e:
         db:f3:f4:7e:c5:e6:e3:65:c8:dd:0e:69:3b:7f:97:fb:97:dc:
         68:f2:d7:1d:73:fe:47:84:4b:61:d1:82:37:aa:f8:cf:8c:28:
         aa:44:80:17:cb:6c:5d:d7:14:3f:ea:59:b0:2f:75:d6:26:d5:
         3a:0c:a2:48:5e:21:95:4f:0c:c2:27:24:65:ed:19:36:88:df:
         9e:cb:5b:d5:b9:d6:6f:3a:ee:41:13:4f:6c:b4:73:a9:1c:a9:
         6f:98:c4:11:5e:54:50:6c:9d:97:29:e5:a6:f1:05:45:ab:f6:
         59:3a:7c:d3:d0:e5:58:40:9c:09:c5:8f:fe:63:49:a1:3c:4a:
         bc:0d:8e:47:df:e4:68:a3:72:e8:10:31:ea:c2:44:d0:af:36:
         73:ff:1d:a4:4b:be:fa:ad:71:78:4c:8f:23:06:74:fa:6a:6d:
         04:67:34:f1:6b:0b:0d:9e:94:18:a0:de:a6:60:cb:e8:63:70:
         bd:d2:9f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:19 2023 by rpki-client on console.sobornost.net