Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VZJTYP65YizWaGfsCaVHHuqCWg1SGxpfQtGref9PtmG/0/323830343a346538633a3a2f33322d3438203d3e20323638323638.roa
File:                     323830343a346538633a3a2f33322d3438203d3e20323638323638.roa (raw, json)
Hash identifier:          PwAayk/yBLxMNiJt/fT2MiQsGCL9ijQYr58G6GBxgwc=
Subject key identifier:   B6:1A:7E:EF:75:4A:06:D0:9E:F6:76:22:21:0D:F1:FC:85:15:32:24
Certificate issuer:       /CN=0D9DF703105BE5C115891358CC9BA0A6E1039C72
Certificate serial:       52372A413BE220548198231AE2A36DC10F84C0BB
Authority key identifier: 0D:9D:F7:03:10:5B:E5:C1:15:89:13:58:CC:9B:A0:A6:E1:03:9C:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D9DF703105BE5C115891358CC9BA0A6E1039C72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VZJTYP65YizWaGfsCaVHHuqCWg1SGxpfQtGref9PtmG/0/323830343a346538633a3a2f33322d3438203d3e20323638323638.roa
Signing time:             Wed 24 May 2023 14:40:00 +0000
ROA not before:           Wed 24 May 2023 14:35:00 +0000
ROA not after:            Wed 22 May 2024 14:40:00 +0000
asID:                     268268
IP address blocks:        2804:4e8c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:37:2a:41:3b:e2:20:54:81:98:23:1a:e2:a3:6d:c1:0f:84:c0:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D9DF703105BE5C115891358CC9BA0A6E1039C72
        Validity
            Not Before: May 24 14:35:00 2023 GMT
            Not After : May 22 14:40:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a5:32:59:ac:70:88:c3:a4:fd:a0:0e:6f:90:
                    73:b9:0f:61:96:13:ed:96:d1:2e:96:72:f6:71:45:
                    89:eb:b1:87:08:f9:e8:08:65:b1:5b:0d:ff:8d:97:
                    a5:86:80:d6:f5:cb:29:8f:44:dc:ee:5d:15:b3:72:
                    26:87:b1:5b:89:cb:4e:f4:54:65:c5:12:1a:16:10:
                    52:b3:4f:7a:2c:72:b2:08:9f:4b:0c:3a:cb:00:dc:
                    e2:79:8f:f0:a2:8a:c9:06:e0:8d:f6:5d:71:40:4a:
                    a6:e4:a9:90:bc:e6:3f:fb:7a:aa:76:4a:cc:61:6c:
                    6b:b8:1e:63:6e:e2:2d:72:d4:fc:d4:80:2e:9c:3b:
                    1a:d2:e4:ae:1b:ac:6b:a3:89:d8:ed:fb:e5:f0:00:
                    83:7e:f3:75:c8:4e:38:47:61:72:77:11:ff:54:98:
                    d2:e3:e0:ab:d0:64:ae:66:41:97:51:74:a7:e1:77:
                    19:a9:5e:ae:cc:a4:e1:f3:38:95:54:1a:25:1c:09:
                    43:a8:0d:3a:51:db:b9:b3:96:71:92:c8:e1:fd:8f:
                    5d:6c:17:12:13:16:38:9d:95:86:07:90:a9:ef:fa:
                    b0:a7:8c:20:eb:a0:c7:d5:4c:6a:aa:92:fa:ff:6f:
                    5f:24:35:c3:ba:92:d4:fb:fd:cc:38:29:66:14:2d:
                    dd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:1A:7E:EF:75:4A:06:D0:9E:F6:76:22:21:0D:F1:FC:85:15:32:24
            X509v3 Authority Key Identifier:
                keyid:0D:9D:F7:03:10:5B:E5:C1:15:89:13:58:CC:9B:A0:A6:E1:03:9C:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VZJTYP65YizWaGfsCaVHHuqCWg1SGxpfQtGref9PtmG/0/0D9DF703105BE5C115891358CC9BA0A6E1039C72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D9DF703105BE5C115891358CC9BA0A6E1039C72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VZJTYP65YizWaGfsCaVHHuqCWg1SGxpfQtGref9PtmG/0/323830343a346538633a3a2f33322d3438203d3e20323638323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e8c::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:f8:31:6d:73:db:ac:9c:96:17:ff:02:70:2a:e8:b5:cd:88:
         92:f1:31:14:4a:78:41:37:60:00:93:74:ce:c3:1d:db:68:83:
         79:c4:13:02:fc:02:21:28:ee:c4:de:91:6c:0e:c0:bd:6a:24:
         81:24:e2:d1:cf:b4:33:76:ce:a1:86:3a:5a:5a:92:83:6f:14:
         be:7f:50:5b:b6:cc:59:a2:3e:fa:59:9b:70:f5:74:97:18:a5:
         82:49:60:0a:34:3b:55:17:b5:a9:06:6c:e2:f0:3d:ee:65:53:
         ab:e0:ac:79:de:8a:0a:07:0e:32:be:c1:74:d2:39:62:8e:31:
         a9:98:41:42:bf:67:a4:b2:c5:e6:b1:75:ad:be:0e:e9:9a:90:
         5d:60:f9:7c:fa:0e:b0:b0:de:48:d5:5e:78:25:60:1f:61:f8:
         bd:87:c2:4d:a7:4d:20:43:39:5b:ce:67:df:8c:a6:2e:c7:0a:
         de:6d:a7:51:a5:7c:55:55:7f:60:02:21:0e:92:97:b7:87:1a:
         d4:9a:e6:bd:bc:0e:8b:cb:52:64:2f:8c:43:1a:f1:f5:14:4c:
         bc:05:01:c0:06:f9:73:37:5c:36:46:04:b1:77:71:09:e3:79:
         c7:ad:97:4a:65:76:01:9c:91:ee:d0:aa:7f:d0:e0:f0:9e:c8:
         c5:ce:fb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org