Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/0/323830343a323431633a3a2f33322d313238203d3e20323634323032.roa
File:                     323830343a323431633a3a2f33322d313238203d3e20323634323032.roa (raw, json)
Hash identifier:          V73o97AgWAc+lYMQ0XV9dYnaleY/Bhs8Dix4q5kZ/KQ=
Subject key identifier:   B7:3D:9B:60:4B:A8:1B:5D:A1:98:6D:19:E1:95:01:1E:FE:B1:CC:40
Certificate issuer:       /CN=B9EE2FF3A303D48BAF71B95D7F3272B7D57AD1D5
Certificate serial:       22A1B87CF48FD6E3433C81C1E133B4E457A27AEA
Authority key identifier: B9:EE:2F:F3:A3:03:D4:8B:AF:71:B9:5D:7F:32:72:B7:D5:7A:D1:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9EE2FF3A303D48BAF71B95D7F3272B7D57AD1D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/0/323830343a323431633a3a2f33322d313238203d3e20323634323032.roa
Signing time:             Sat 25 Mar 2023 13:00:59 +0000
ROA not before:           Sat 25 Mar 2023 12:55:59 +0000
ROA not after:            Sat 23 Mar 2024 13:00:59 +0000
asID:                     264202
IP address blocks:        2804:241c::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a1:b8:7c:f4:8f:d6:e3:43:3c:81:c1:e1:33:b4:e4:57:a2:7a:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9EE2FF3A303D48BAF71B95D7F3272B7D57AD1D5
        Validity
            Not Before: Mar 25 12:55:59 2023 GMT
            Not After : Mar 23 13:00:59 2024 GMT
        Subject: CN=B73D9B604BA81B5DA1986D19E195011EFEB1CC40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:40:49:c3:13:37:4c:c6:b5:fb:99:3c:86:e8:
                    6d:e6:a9:8b:67:36:af:27:3c:1a:82:b8:12:fb:01:
                    a5:e4:c6:9b:a1:2c:b2:0a:52:0a:91:70:b7:e1:14:
                    68:fc:a6:d9:19:05:26:d7:2a:2e:8d:20:ee:56:57:
                    01:06:6c:f5:05:26:de:70:6f:00:0b:49:52:e8:39:
                    d6:80:20:6f:f7:75:6e:57:f2:48:cd:71:4b:33:2b:
                    f5:0a:66:d2:aa:58:26:fa:3f:c1:b0:86:5c:c4:b5:
                    57:29:78:60:ae:99:0c:74:3b:d7:60:91:4a:1e:41:
                    8e:ac:a2:1c:4d:3a:1b:92:82:3b:b5:1d:37:ef:82:
                    d0:ee:4b:dc:cb:e1:29:18:52:96:b2:5e:6e:3e:a9:
                    f6:2e:d0:f2:d8:a2:e9:a4:94:a5:b5:c4:75:f4:11:
                    3e:80:a9:93:5d:a4:6b:97:5b:f6:fb:e0:86:7a:a1:
                    ac:c0:75:c7:ca:4d:43:a9:f3:3b:5c:02:f8:f8:ab:
                    65:75:d8:66:e5:1c:67:3d:6e:22:e6:79:1a:5e:7e:
                    4b:c5:fb:0c:6b:cf:29:ef:8e:00:ff:d1:ac:f5:dc:
                    83:31:37:ff:e5:b4:28:7a:cf:39:07:d4:32:37:f5:
                    e3:15:b2:d5:0f:5a:96:f7:f1:5e:3c:d4:a6:52:8a:
                    84:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:3D:9B:60:4B:A8:1B:5D:A1:98:6D:19:E1:95:01:1E:FE:B1:CC:40
            X509v3 Authority Key Identifier:
                keyid:B9:EE:2F:F3:A3:03:D4:8B:AF:71:B9:5D:7F:32:72:B7:D5:7A:D1:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/0/B9EE2FF3A303D48BAF71B95D7F3272B7D57AD1D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9EE2FF3A303D48BAF71B95D7F3272B7D57AD1D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/0/323830343a323431633a3a2f33322d313238203d3e20323634323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:241c::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:fe:c6:28:08:60:1f:b8:0e:79:96:8f:fe:61:6b:37:83:fc:
         8d:b9:a9:54:2b:4e:6f:8f:31:b8:86:68:42:b6:a9:58:22:e9:
         70:f5:90:55:59:51:0b:0a:cd:70:b1:7c:97:54:76:6e:f1:6f:
         cf:b9:ca:ec:c3:df:16:91:b8:12:1d:f7:9c:e0:cc:81:a3:99:
         3f:9b:99:15:5b:86:37:bb:f9:e7:e8:1d:46:ec:7b:89:9f:23:
         d7:5d:b7:53:a9:b2:67:d3:7a:b5:2e:32:ce:ed:e1:fc:75:df:
         06:3d:ac:bc:9d:f1:4e:a6:68:57:41:f6:c9:cd:b7:81:07:5b:
         74:b4:b4:db:41:c4:cf:6e:58:8c:67:de:8d:d3:fb:26:66:b3:
         cb:b2:0f:af:49:d8:43:48:b8:62:e6:3b:ec:1d:16:e5:07:c1:
         91:34:12:ef:58:c3:a3:37:37:aa:29:34:83:5d:5a:f1:83:45:
         d7:fa:4a:36:25:50:54:c1:dd:04:e2:b2:4b:30:5d:66:37:ee:
         d0:9a:19:1e:7b:56:ba:60:b1:0e:8c:42:92:67:ba:82:eb:c5:
         d4:67:b8:4d:5f:4e:c5:4c:4d:68:09:42:84:4a:ce:1d:b2:07:
         20:79:34:96:f8:2d:00:d1:93:95:3a:8d:ef:fa:78:8d:48:18:
         41:3f:41:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org