Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2cb2EoyNrUB2CmFP5xzvrSw9W4ApGERRYbsuJz88Z8eW/0/323830343a313763383a3a2f33322d3335203d3e20323633323531.roa
File:                     323830343a313763383a3a2f33322d3335203d3e20323633323531.roa (raw, json)
Hash identifier:          z7TcrabUjxEyelKDThOa1pdnRxkBF3Is2BHJRIdvl1A=
Subject key identifier:   4A:67:AD:55:AE:22:33:B0:99:24:6D:CF:D0:E0:03:FD:B4:35:B0:9B
Certificate issuer:       /CN=B822CC933A04C9F69A5B81CB369EDAD052C060B4
Certificate serial:       5C221B2A77295BB0D8FAD2945C5ABD539D7AA5DD
Authority key identifier: B8:22:CC:93:3A:04:C9:F6:9A:5B:81:CB:36:9E:DA:D0:52:C0:60:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B822CC933A04C9F69A5B81CB369EDAD052C060B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2cb2EoyNrUB2CmFP5xzvrSw9W4ApGERRYbsuJz88Z8eW/0/323830343a313763383a3a2f33322d3335203d3e20323633323531.roa
Signing time:             Mon 16 Oct 2023 16:00:01 +0000
ROA not before:           Mon 16 Oct 2023 15:55:01 +0000
ROA not after:            Mon 14 Oct 2024 16:00:01 +0000
asID:                     263251
IP address blocks:        2804:17c8::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:22:1b:2a:77:29:5b:b0:d8:fa:d2:94:5c:5a:bd:53:9d:7a:a5:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B822CC933A04C9F69A5B81CB369EDAD052C060B4
        Validity
            Not Before: Oct 16 15:55:01 2023 GMT
            Not After : Oct 14 16:00:01 2024 GMT
        Subject: CN=3082010A0282010100B5A7F4CFC5D63D253B3A4C8025ED4D23FA937E99392BC924421709351CFBEE273DC58A22D6AF76363CDEBFD01E053953A42D82D6D6DD4AF50F37BDA9EB26AAA425E292064AD3DFBCC9CE56899C51680F9D2E61385B4F1B8F4438E66C735D72D34DFD7BB66337A29BEC8A08C706A97B6C55B5C03E0ACADB3F894BD68F2514D566D2F185F2772AA296F8AEF7887501409AA28853208B4A17BA5EB37622FF6D49B9CC7910EF2646B543F6045C3276B5DC726AA70914D72DD9DD442F28F946B2ECB4645719CB512997E70E1E271C67B4955CD21BC9D0A6FC38E331E268448F059A38042A990AB4C297888FD7443C42D9C0A270F92B2A7A1129AC759693FA222F828B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a7:f4:cf:c5:d6:3d:25:3b:3a:4c:80:25:ed:
                    4d:23:fa:93:7e:99:39:2b:c9:24:42:17:09:35:1c:
                    fb:ee:27:3d:c5:8a:22:d6:af:76:36:3c:de:bf:d0:
                    1e:05:39:53:a4:2d:82:d6:d6:dd:4a:f5:0f:37:bd:
                    a9:eb:26:aa:a4:25:e2:92:06:4a:d3:df:bc:c9:ce:
                    56:89:9c:51:68:0f:9d:2e:61:38:5b:4f:1b:8f:44:
                    38:e6:6c:73:5d:72:d3:4d:fd:7b:b6:63:37:a2:9b:
                    ec:8a:08:c7:06:a9:7b:6c:55:b5:c0:3e:0a:ca:db:
                    3f:89:4b:d6:8f:25:14:d5:66:d2:f1:85:f2:77:2a:
                    a2:96:f8:ae:f7:88:75:01:40:9a:a2:88:53:20:8b:
                    4a:17:ba:5e:b3:76:22:ff:6d:49:b9:cc:79:10:ef:
                    26:46:b5:43:f6:04:5c:32:76:b5:dc:72:6a:a7:09:
                    14:d7:2d:d9:dd:44:2f:28:f9:46:b2:ec:b4:64:57:
                    19:cb:51:29:97:e7:0e:1e:27:1c:67:b4:95:5c:d2:
                    1b:c9:d0:a6:fc:38:e3:31:e2:68:44:8f:05:9a:38:
                    04:2a:99:0a:b4:c2:97:88:8f:d7:44:3c:42:d9:c0:
                    a2:70:f9:2b:2a:7a:11:29:ac:75:96:93:fa:22:2f:
                    82:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:67:AD:55:AE:22:33:B0:99:24:6D:CF:D0:E0:03:FD:B4:35:B0:9B
            X509v3 Authority Key Identifier:
                keyid:B8:22:CC:93:3A:04:C9:F6:9A:5B:81:CB:36:9E:DA:D0:52:C0:60:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2cb2EoyNrUB2CmFP5xzvrSw9W4ApGERRYbsuJz88Z8eW/0/B822CC933A04C9F69A5B81CB369EDAD052C060B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B822CC933A04C9F69A5B81CB369EDAD052C060B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cb2EoyNrUB2CmFP5xzvrSw9W4ApGERRYbsuJz88Z8eW/0/323830343a313763383a3a2f33322d3335203d3e20323633323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:17c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:7a:e0:00:55:46:a6:13:28:d2:37:5e:f6:86:8a:15:70:c8:
         b6:58:87:85:f3:93:8d:4d:fe:38:e4:32:e4:bf:0d:b4:13:ff:
         60:af:0e:eb:d4:0b:0c:7c:f2:72:d1:1c:14:b0:b7:f6:03:7f:
         e7:f8:b4:c3:63:cd:27:dd:47:ad:c6:9d:3d:3c:09:95:b6:3b:
         8c:d3:6c:ad:64:4f:39:49:73:35:0e:c0:4d:ba:25:4d:1e:5b:
         95:52:2f:c2:0f:b2:bc:34:76:c9:70:f4:6b:23:85:e6:5b:3a:
         49:46:fd:d0:55:e9:ca:58:64:7a:bf:61:1f:44:b6:fd:74:d2:
         7f:4a:87:90:4e:89:50:60:a1:38:c0:b7:48:28:24:02:0e:68:
         02:b0:04:18:29:0f:da:25:b8:06:72:aa:57:8e:91:22:5b:7d:
         6c:83:ce:a6:bc:54:7f:21:9d:f1:c7:32:2f:4e:0f:05:8e:5b:
         2f:ab:65:c3:d1:06:35:8a:83:bb:af:b7:90:2c:00:89:e4:21:
         12:8a:56:fe:96:06:45:63:af:aa:a7:2a:d7:bb:ae:ce:3b:92:
         ca:98:a7:73:4d:22:af:fd:af:0f:91:51:f6:ee:1a:09:60:a2:
         a4:31:44:38:62:db:37:11:26:8b:8f:0e:f4:79:d2:ca:6d:a9:
         97:c6:84:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org