Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/0/323830343a343762343a3a2f33322d3332203d3e20323637303732.roa
File:                     323830343a343762343a3a2f33322d3332203d3e20323637303732.roa (raw, json)
Hash identifier:          ipvE4rj5TfD6GVJdnfbs50QEfVNZ8XnH5XZrfLz0weM=
Subject key identifier:   8A:D4:28:75:51:71:76:25:E2:D2:A5:44:E9:4D:F1:C3:45:F3:75:30
Certificate issuer:       /CN=02D248AA52D660570300A2C537102DC174ED8461
Certificate serial:       7F57FABF1B4638C9A6CE5A40FB35AE78CF3232E3
Authority key identifier: 02:D2:48:AA:52:D6:60:57:03:00:A2:C5:37:10:2D:C1:74:ED:84:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/02D248AA52D660570300A2C537102DC174ED8461.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/0/323830343a343762343a3a2f33322d3332203d3e20323637303732.roa
Signing time:             Wed 07 Feb 2024 17:00:01 +0000
ROA not before:           Wed 07 Feb 2024 16:55:01 +0000
ROA not after:            Wed 05 Feb 2025 17:00:01 +0000
asID:                     267072
IP address blocks:        2804:47b4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:57:fa:bf:1b:46:38:c9:a6:ce:5a:40:fb:35:ae:78:cf:32:32:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02D248AA52D660570300A2C537102DC174ED8461
        Validity
            Not Before: Feb  7 16:55:01 2024 GMT
            Not After : Feb  5 17:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d8:0d:a9:a5:d6:c8:54:65:c7:82:da:48:65:
                    8a:1a:c4:f6:22:e9:37:e2:62:ba:3e:5d:d2:c3:4a:
                    56:1a:f7:a9:a6:55:9f:89:f8:92:86:17:bb:8a:dd:
                    0d:8a:3b:e6:d2:28:ca:ff:9c:8b:d0:da:ac:fb:21:
                    47:fa:fd:01:21:77:29:3b:90:aa:a6:cc:58:a1:0f:
                    77:7f:88:fe:5c:ea:f0:1d:f8:65:ae:4e:d5:fa:0a:
                    f2:c2:bf:2b:9b:b0:7e:10:c5:9f:5a:ec:8a:39:37:
                    d6:bf:53:59:e5:ad:23:f2:80:21:34:0d:db:47:71:
                    be:17:2d:ee:11:63:84:26:53:b6:bc:dd:c6:d4:c4:
                    ab:25:25:36:0f:d6:b2:c2:64:43:69:66:e9:94:fb:
                    a3:36:8d:87:c6:25:c3:3a:b4:c1:b4:cf:16:cd:e6:
                    4a:db:5d:11:a9:0b:ee:a5:7f:c6:95:40:38:b0:30:
                    b2:05:fc:d4:48:a1:3e:9d:0b:e9:fb:11:f9:72:69:
                    da:f4:f4:96:3c:e9:9b:7a:8e:26:af:c1:50:1c:27:
                    4a:7b:4e:ca:ba:73:25:58:72:49:81:c6:f4:a2:7e:
                    25:42:5f:eb:98:b1:8d:77:5b:49:7f:d7:5c:ca:8b:
                    ea:25:f2:11:bd:3a:cd:8f:ff:26:a9:c9:26:b3:40:
                    f3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D4:28:75:51:71:76:25:E2:D2:A5:44:E9:4D:F1:C3:45:F3:75:30
            X509v3 Authority Key Identifier:
                keyid:02:D2:48:AA:52:D6:60:57:03:00:A2:C5:37:10:2D:C1:74:ED:84:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/0/02D248AA52D660570300A2C537102DC174ED8461.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/02D248AA52D660570300A2C537102DC174ED8461.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/0/323830343a343762343a3a2f33322d3332203d3e20323637303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:8f:dc:96:b4:19:c4:80:7e:83:cd:9c:f3:d4:85:7e:50:e3:
         e5:5b:be:fa:7a:e8:a6:d6:8f:1b:75:f6:7d:c6:0f:6a:8e:ef:
         37:f4:2a:92:1e:ee:78:6e:11:d3:2a:bc:f3:6f:b3:d9:d2:24:
         55:e5:09:c3:60:e1:8a:75:0c:d8:af:2b:73:9a:b5:5f:68:9d:
         f7:42:71:ee:ed:9b:51:30:04:b2:e6:41:e5:2a:82:39:cd:b0:
         0b:41:7b:2f:d6:f5:7a:b5:08:fc:24:d2:96:61:8c:ba:47:ed:
         61:c1:d5:59:73:96:87:b8:9b:e0:c9:4f:19:e3:46:49:05:e6:
         2c:c9:54:51:b8:c0:cd:6a:26:c2:b5:a7:d8:40:b4:25:fa:54:
         3f:19:6c:17:50:90:81:f5:f4:42:cc:c9:26:2c:ac:60:3b:56:
         8d:8a:b1:4e:1c:44:61:72:58:70:02:f8:b6:d1:d7:84:a3:bb:
         a6:0e:73:67:5a:aa:ee:91:13:01:12:c5:1c:7e:e0:ec:6e:7c:
         bb:ff:69:cb:7b:e1:d3:da:b7:ae:21:ff:ff:84:b4:bd:80:2a:
         c8:d7:e1:05:af:5e:65:f9:5a:21:01:1c:84:c5:f0:eb:7b:f5:
         fa:9c:b6:d5:ad:3c:5a:96:c1:f5:e5:f5:77:8d:6b:3b:20:5f:
         f5:c1:ba:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org