Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/0/323830343a333534303a3a2f33322d3438203d3e20323636323737.roa
File:                     323830343a333534303a3a2f33322d3438203d3e20323636323737.roa (raw, json)
Hash identifier:          1aAZZ1EqllMHzcvwwUkVtnQ/TgT8Mid4HiowisGECMg=
Subject key identifier:   9A:B2:AD:D9:FB:F6:95:91:5A:CE:9F:B7:D4:8F:C4:09:1C:1E:B4:CA
Certificate issuer:       /CN=C2B39AB73EA83A81BA76D827057DE505232F8600
Certificate serial:       15829A7A946FE6701C838E72A0E22763BA6F4DEB
Authority key identifier: C2:B3:9A:B7:3E:A8:3A:81:BA:76:D8:27:05:7D:E5:05:23:2F:86:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2B39AB73EA83A81BA76D827057DE505232F8600.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/0/323830343a333534303a3a2f33322d3438203d3e20323636323737.roa
Signing time:             Tue 01 Aug 2023 19:34:08 +0000
ROA not before:           Tue 01 Aug 2023 19:29:08 +0000
ROA not after:            Tue 30 Jul 2024 19:34:08 +0000
asID:                     266277
IP address blocks:        2804:3540::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:82:9a:7a:94:6f:e6:70:1c:83:8e:72:a0:e2:27:63:ba:6f:4d:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2B39AB73EA83A81BA76D827057DE505232F8600
        Validity
            Not Before: Aug  1 19:29:08 2023 GMT
            Not After : Jul 30 19:34:08 2024 GMT
        Subject: CN=9AB2ADD9FBF695915ACE9FB7D48FC4091C1EB4CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a7:23:cf:75:02:bf:fe:f2:13:ff:f3:5e:75:
                    55:b4:a5:8d:a2:4d:42:03:92:bf:6f:cf:1d:05:aa:
                    92:0c:71:bb:34:c7:ef:fd:38:f9:86:94:e7:98:c8:
                    44:35:da:1d:9f:db:75:be:3e:30:86:23:b4:42:0e:
                    70:8e:18:0a:48:7c:3a:19:2c:d2:18:84:37:33:4b:
                    1a:0c:36:74:2b:af:a3:73:4d:d9:cd:15:d5:db:e1:
                    68:d1:a5:54:36:7a:b3:1e:f8:b9:67:ea:65:db:c9:
                    3e:9a:fd:22:0c:34:e4:a8:44:e7:4d:6d:ae:b0:d4:
                    64:14:df:78:55:02:26:42:8c:5d:75:21:db:3d:ed:
                    c7:12:7d:2a:36:69:c7:a2:9b:01:2f:38:b0:0d:a8:
                    dd:64:cc:68:0f:02:1f:b3:1a:a8:35:06:39:70:1d:
                    ec:56:d4:ad:36:10:11:a1:68:2a:8f:63:47:d2:7d:
                    ae:bb:e9:c6:c9:c7:1d:6d:92:37:46:0d:73:d7:a6:
                    a1:88:b5:c9:9e:73:56:71:0f:c9:97:ec:30:0a:e8:
                    f4:fc:5b:90:e6:5f:c8:7b:7b:5f:98:6a:f1:f0:3b:
                    08:24:41:b3:6f:a2:b5:4b:c1:1a:49:9a:de:ab:1b:
                    58:46:d2:ca:1b:f9:a3:00:da:0a:72:db:04:79:93:
                    6e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B2:AD:D9:FB:F6:95:91:5A:CE:9F:B7:D4:8F:C4:09:1C:1E:B4:CA
            X509v3 Authority Key Identifier:
                keyid:C2:B3:9A:B7:3E:A8:3A:81:BA:76:D8:27:05:7D:E5:05:23:2F:86:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/0/C2B39AB73EA83A81BA76D827057DE505232F8600.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2B39AB73EA83A81BA76D827057DE505232F8600.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/0/323830343a333534303a3a2f33322d3438203d3e20323636323737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3540::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:38:19:08:5d:69:43:66:59:2b:e9:f5:39:fb:c7:d5:6c:79:
         41:17:ec:a9:d7:25:6f:a9:2f:13:7d:a5:1d:fe:9f:a0:a0:e8:
         ee:d6:38:e7:17:4d:9a:8d:0e:12:48:cb:15:08:83:ef:4c:5d:
         ce:69:32:94:ec:bb:8a:1f:0d:24:7f:b5:47:0b:4e:f7:d8:3a:
         db:6e:c0:28:99:2c:dc:0e:03:ec:61:75:cb:11:17:91:0e:f7:
         16:db:c0:4b:f9:f4:d3:1d:3a:81:df:c0:80:55:95:a7:66:09:
         81:0d:f1:35:1c:92:82:9e:d4:35:5a:d6:8a:a4:42:8d:a2:0f:
         61:8b:c7:50:44:73:3c:9c:05:e7:84:5b:d1:a0:6b:81:ab:01:
         13:e0:d7:78:0c:d9:c1:f1:c7:05:85:10:08:a7:bb:73:c5:e4:
         6a:0b:c2:de:bc:85:0a:ca:73:07:48:b3:b0:51:69:2f:6d:a9:
         e2:70:00:e8:07:47:f9:80:7f:ce:d1:4a:19:98:d0:74:ae:f7:
         b8:ab:f7:83:5c:9b:1b:fc:1f:fa:ba:30:f2:3d:7c:de:7a:33:
         97:6e:5a:f2:8e:2a:03:ca:b1:89:4b:45:fe:c8:fc:6d:8f:81:
         cb:ee:98:1f:a3:e1:a2:d9:8b:ef:3e:00:3d:65:51:27:d9:36:
         35:c9:e6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org