Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a633030303a3a2f33342d3334203d3e20323730353434.roa
File:                     323830343a366439633a633030303a3a2f33342d3334203d3e20323730353434.roa (raw, json)
Hash identifier:          /X+nPZZ6am1Ol9QbbOw1WLkwr7lBTy4WEz/fIe9svrg=
Subject key identifier:   60:9E:E0:2C:F9:86:80:AE:84:61:02:57:D1:94:EA:96:B9:18:58:CA
Certificate issuer:       /CN=B224E79ACF8AC68E9C68317AB6507068C8F22F7C
Certificate serial:       528707FC53F705FBBA9EA0C57F5B59D8998407E8
Authority key identifier: B2:24:E7:9A:CF:8A:C6:8E:9C:68:31:7A:B6:50:70:68:C8:F2:2F:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B224E79ACF8AC68E9C68317AB6507068C8F22F7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a633030303a3a2f33342d3334203d3e20323730353434.roa
Signing time:             Mon 30 Oct 2023 12:47:03 +0000
ROA not before:           Mon 30 Oct 2023 12:42:03 +0000
ROA not after:            Mon 28 Oct 2024 12:47:03 +0000
asID:                     270544
IP address blocks:        2804:6d9c:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:87:07:fc:53:f7:05:fb:ba:9e:a0:c5:7f:5b:59:d8:99:84:07:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B224E79ACF8AC68E9C68317AB6507068C8F22F7C
        Validity
            Not Before: Oct 30 12:42:03 2023 GMT
            Not After : Oct 28 12:47:03 2024 GMT
        Subject: CN=609EE02CF98680AE84610257D194EA96B91858CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ca:6d:c3:d4:00:1d:5d:5b:67:c1:c1:40:56:
                    69:bc:a7:b0:73:06:0d:37:35:b0:41:d5:a5:f2:62:
                    71:03:85:b8:f4:bf:22:d4:89:b0:f7:4b:b7:53:a6:
                    27:4e:0e:7d:48:dd:1e:42:7b:fb:fc:9c:bd:14:0b:
                    6f:97:c9:33:70:6a:d9:65:43:76:a4:be:fe:a0:c4:
                    ce:ec:f3:d0:12:5f:96:81:02:37:d7:4d:b4:90:5a:
                    98:49:74:51:04:91:21:d4:29:09:c7:26:0e:4d:bf:
                    b6:d1:16:7e:4a:9a:ac:82:32:8e:3e:5b:19:b7:f8:
                    ca:7a:a9:13:ca:97:05:80:b8:76:b3:6b:cb:42:de:
                    da:5a:7f:d0:9b:cc:52:59:39:de:31:6a:5f:fb:be:
                    ab:6a:5a:a4:e9:72:44:ea:81:88:a4:5d:14:34:5f:
                    59:c2:06:ee:90:10:ce:2d:71:24:2e:ef:13:13:bb:
                    45:4e:7a:41:bf:b4:dc:0a:35:e2:76:1b:40:85:e4:
                    25:3b:c2:01:f8:14:1a:2d:a3:bd:2c:18:a3:3c:3f:
                    46:e9:a9:2e:7d:b0:78:a5:49:0b:7f:34:df:87:f9:
                    85:df:48:f2:f1:c1:62:1a:cc:c9:58:5e:45:3e:58:
                    eb:89:a1:d9:4c:8c:b7:b4:3c:c6:90:f5:08:69:ea:
                    4b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:9E:E0:2C:F9:86:80:AE:84:61:02:57:D1:94:EA:96:B9:18:58:CA
            X509v3 Authority Key Identifier:
                keyid:B2:24:E7:9A:CF:8A:C6:8E:9C:68:31:7A:B6:50:70:68:C8:F2:2F:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/B224E79ACF8AC68E9C68317AB6507068C8F22F7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B224E79ACF8AC68E9C68317AB6507068C8F22F7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a633030303a3a2f33342d3334203d3e20323730353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6d9c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         65:70:61:be:40:bf:ef:1c:e1:9f:cd:ef:50:c5:d3:be:4b:11:
         1e:0c:f7:8f:12:58:e8:fd:42:a5:99:39:3a:df:10:b2:1b:69:
         dd:d8:3e:b6:be:c7:cb:32:b9:94:b9:3a:8e:ba:56:8b:9c:c2:
         3c:c3:b2:b6:cb:a2:d2:9a:76:62:df:85:54:d5:4b:0c:49:f6:
         67:b6:b2:30:ca:0a:e2:7f:e7:0c:94:16:c6:e1:35:c5:3c:b6:
         5a:ce:ff:c4:21:bd:00:37:8d:35:18:0a:8e:c2:08:90:29:f5:
         d8:d0:1c:db:9b:c2:5e:95:e0:69:b9:d0:5f:85:c4:8d:5c:ed:
         42:31:01:0a:ba:05:33:ae:b6:00:01:75:0d:d0:f7:3d:bc:0a:
         10:fe:67:de:cd:e9:78:c2:a5:00:83:80:ac:1a:63:38:1a:71:
         c8:61:a4:b0:14:df:b3:30:e3:d6:e7:2e:dc:96:fd:ef:16:10:
         21:b0:6d:e2:9c:95:fa:69:ec:8c:8b:f6:89:0a:b5:61:bf:58:
         45:3d:f2:2a:bf:9d:47:34:de:63:13:83:ee:98:92:8e:35:e5:
         fd:a4:91:e8:05:5b:b6:e8:2d:fb:02:94:10:2f:ca:ce:66:60:
         23:22:c8:fe:ed:56:6f:8a:91:38:7f:f8:2d:74:d1:8f:7d:52:
         e8:e6:4b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:21 2024 by rpki-client on console.sobornost.net