Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/0/323830343a346434343a3a2f33322d3438203d3e20323632393738.roa
File:                     323830343a346434343a3a2f33322d3438203d3e20323632393738.roa (raw, json)
Hash identifier:          LhZIme2FPRhKmFNDYlMP4BZNwKzjJD+aRLY+xzfTCcs=
Subject key identifier:   BB:AF:2A:F1:79:60:B5:71:2B:56:23:B2:9B:6E:F8:0F:FA:F9:42:B0
Certificate issuer:       /CN=6265009F93CC6C26C00FD1D6FEFEB8010A0BDF98
Certificate serial:       1D9D399E3CEF52556EDF310B32530D4A5B448768
Authority key identifier: 62:65:00:9F:93:CC:6C:26:C0:0F:D1:D6:FE:FE:B8:01:0A:0B:DF:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6265009F93CC6C26C00FD1D6FEFEB8010A0BDF98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/0/323830343a346434343a3a2f33322d3438203d3e20323632393738.roa
Signing time:             Thu 04 Aug 2022 13:00:00 +0000
ROA not before:           Thu 04 Aug 2022 12:55:00 +0000
ROA not after:            Thu 03 Aug 2023 13:00:00 +0000
asID:                     262978
IP address blocks:        2804:4d44::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:9d:39:9e:3c:ef:52:55:6e:df:31:0b:32:53:0d:4a:5b:44:87:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6265009F93CC6C26C00FD1D6FEFEB8010A0BDF98
        Validity
            Not Before: Aug  4 12:55:00 2022 GMT
            Not After : Aug  3 13:00:00 2023 GMT
        Subject: CN=3082010A0282010100C09826B91833BF5F9734342F0EABAC1076777FB3CE80CFC8DDC471C072786649C45CAA9AD5B3F1B194FB16D85547DFF66CAFE89E3DEB4A8B286948EB8EEFF9F5BD82015F30FF73C271E81E5C0418F43F370E8CD8A607237078BAB54B6667787C434AA242C485E230B5F1A4813EDDA223A69E8C2585A7BB2C073F9688B1AA01D673B3B58E46659520C79A0641EC3828FBA5A56BA11D3C756086578DD8B18ED19F13EB799EC9DB8687F5A3FE9061D71EDFA0AF3F388D39C80002E67C97DD69942BDC5F81D838C46839B9BD826ACDFDC959F4965A27A3B147DC6BEE7B9371F3E14AB5453E489C2D73836A79471E4FC3A0143784FF111A2E682D5ACB4EDCF9EF907F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:98:26:b9:18:33:bf:5f:97:34:34:2f:0e:ab:
                    ac:10:76:77:7f:b3:ce:80:cf:c8:dd:c4:71:c0:72:
                    78:66:49:c4:5c:aa:9a:d5:b3:f1:b1:94:fb:16:d8:
                    55:47:df:f6:6c:af:e8:9e:3d:eb:4a:8b:28:69:48:
                    eb:8e:ef:f9:f5:bd:82:01:5f:30:ff:73:c2:71:e8:
                    1e:5c:04:18:f4:3f:37:0e:8c:d8:a6:07:23:70:78:
                    ba:b5:4b:66:67:78:7c:43:4a:a2:42:c4:85:e2:30:
                    b5:f1:a4:81:3e:dd:a2:23:a6:9e:8c:25:85:a7:bb:
                    2c:07:3f:96:88:b1:aa:01:d6:73:b3:b5:8e:46:65:
                    95:20:c7:9a:06:41:ec:38:28:fb:a5:a5:6b:a1:1d:
                    3c:75:60:86:57:8d:d8:b1:8e:d1:9f:13:eb:79:9e:
                    c9:db:86:87:f5:a3:fe:90:61:d7:1e:df:a0:af:3f:
                    38:8d:39:c8:00:02:e6:7c:97:dd:69:94:2b:dc:5f:
                    81:d8:38:c4:68:39:b9:bd:82:6a:cd:fd:c9:59:f4:
                    96:5a:27:a3:b1:47:dc:6b:ee:7b:93:71:f3:e1:4a:
                    b5:45:3e:48:9c:2d:73:83:6a:79:47:1e:4f:c3:a0:
                    14:37:84:ff:11:1a:2e:68:2d:5a:cb:4e:dc:f9:ef:
                    90:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:AF:2A:F1:79:60:B5:71:2B:56:23:B2:9B:6E:F8:0F:FA:F9:42:B0
            X509v3 Authority Key Identifier:
                keyid:62:65:00:9F:93:CC:6C:26:C0:0F:D1:D6:FE:FE:B8:01:0A:0B:DF:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/0/6265009F93CC6C26C00FD1D6FEFEB8010A0BDF98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6265009F93CC6C26C00FD1D6FEFEB8010A0BDF98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/0/323830343a346434343a3a2f33322d3438203d3e20323632393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d44::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:53:95:cf:92:39:4e:37:38:f3:51:82:5f:65:57:44:61:fb:
         4f:d5:a3:f0:d0:ad:1d:ad:84:c0:48:11:f4:37:db:6a:2a:2b:
         1d:0b:fe:77:a6:f1:89:76:ae:54:12:10:53:76:2f:51:e1:ae:
         04:2f:0c:ed:96:51:f8:97:8e:2c:84:46:c7:c5:5e:a9:7c:9a:
         da:4c:f8:2c:42:1b:53:44:1c:05:f2:be:60:a6:49:ef:96:e0:
         05:89:03:28:16:cf:f8:40:58:f5:02:e7:79:76:b3:2c:45:74:
         a1:44:23:f8:d7:93:cf:5b:b4:2f:ff:7b:af:2e:28:08:87:33:
         a0:9d:45:48:1f:73:59:54:c6:7d:b4:76:05:94:d4:a3:9b:3a:
         7d:c1:56:a2:78:a4:c8:d9:59:72:e9:68:d3:5e:6c:41:82:40:
         41:a7:21:db:e4:3c:fc:5e:f7:59:7a:63:cf:c3:25:f1:51:46:
         25:b2:ae:10:41:c3:52:c4:bb:16:f1:49:ca:6d:c2:23:66:34:
         f0:ea:09:19:3c:84:e4:ba:65:92:27:c2:ae:16:02:d5:16:2f:
         16:6a:db:b1:2a:b0:03:cf:1f:5f:86:72:ea:b1:e4:dd:4e:20:
         57:6e:b7:b2:e4:c8:24:67:37:56:20:fc:c3:5f:c9:af:66:4c:
         fa:bb:9c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org