Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/323830343a383136633a383030303a3a2f33332d3333203d3e20323732343533.roa
File:                     323830343a383136633a383030303a3a2f33332d3333203d3e20323732343533.roa (raw, json)
Hash identifier:          vL3rfxP0Z86ltx1u+UxBtSZ6w6PrSneZnPkBn1M9rkA=
Subject key identifier:   A2:6B:75:39:F8:04:45:16:53:71:6A:65:46:47:AF:F0:4C:EA:74:10
Certificate issuer:       /CN=71DFC4D7BC2AC3ACAC17FBDFEC95C4469E308992
Certificate serial:       2605F93804D4DB6B5F8C21B73170B3C269FAF4D1
Authority key identifier: 71:DF:C4:D7:BC:2A:C3:AC:AC:17:FB:DF:EC:95:C4:46:9E:30:89:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71DFC4D7BC2AC3ACAC17FBDFEC95C4469E308992.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/323830343a383136633a383030303a3a2f33332d3333203d3e20323732343533.roa
Signing time:             Mon 13 Nov 2023 13:00:00 +0000
ROA not before:           Mon 13 Nov 2023 12:55:00 +0000
ROA not after:            Mon 11 Nov 2024 13:00:00 +0000
asID:                     272453
IP address blocks:        2804:816c:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:05:f9:38:04:d4:db:6b:5f:8c:21:b7:31:70:b3:c2:69:fa:f4:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71DFC4D7BC2AC3ACAC17FBDFEC95C4469E308992
        Validity
            Not Before: Nov 13 12:55:00 2023 GMT
            Not After : Nov 11 13:00:00 2024 GMT
        Subject: CN=A26B7539F804451653716A654647AFF04CEA7410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:66:e5:53:5e:3a:67:57:78:d0:97:11:cd:db:
                    9e:dd:9b:65:8f:13:f5:fa:86:7e:7b:56:5a:fd:fa:
                    75:b5:43:35:15:8b:5d:6e:45:2c:43:f3:bd:df:cb:
                    32:ee:10:52:4b:36:06:e0:8a:67:f7:c2:f1:68:b5:
                    86:9d:b0:bf:02:cd:a4:bf:82:01:ad:2d:c7:71:b8:
                    f2:d3:e5:03:57:44:51:81:cc:b1:7f:24:51:63:5d:
                    a9:9e:8c:f0:ff:9c:11:45:5c:a7:d9:63:5f:e2:3c:
                    f6:2e:da:30:a8:ab:8b:1a:9a:05:1f:03:5f:bc:24:
                    6b:a3:9f:de:e5:fb:e5:c2:e6:cf:8b:02:20:28:87:
                    38:e7:16:5f:90:9a:0c:a4:68:27:cd:40:df:c4:72:
                    3a:32:f0:78:d3:7a:29:7c:37:55:fe:a7:38:8f:76:
                    77:b3:69:57:83:b3:75:63:06:6f:d4:81:78:80:a1:
                    be:00:98:e1:87:5b:3a:6c:82:04:f4:d0:3a:42:7b:
                    a7:4c:e2:a9:d2:bf:fc:c6:aa:81:b0:74:10:88:fe:
                    50:22:38:dd:e7:58:1e:cc:89:df:d2:82:54:ed:22:
                    52:7e:24:94:c8:e6:05:24:b5:d2:d6:15:bd:0e:49:
                    02:f9:81:37:a3:f6:eb:a6:78:cd:ff:34:55:eb:fc:
                    14:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:6B:75:39:F8:04:45:16:53:71:6A:65:46:47:AF:F0:4C:EA:74:10
            X509v3 Authority Key Identifier:
                keyid:71:DF:C4:D7:BC:2A:C3:AC:AC:17:FB:DF:EC:95:C4:46:9E:30:89:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/71DFC4D7BC2AC3ACAC17FBDFEC95C4469E308992.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71DFC4D7BC2AC3ACAC17FBDFEC95C4469E308992.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/323830343a383136633a383030303a3a2f33332d3333203d3e20323732343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:816c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         22:2e:e4:87:f1:4b:d5:e6:34:bf:8e:58:ca:41:50:47:82:05:
         ca:3a:10:dc:69:d0:eb:af:30:85:0b:ad:d6:5e:fe:3b:27:36:
         04:8d:6d:e3:0b:af:2b:e4:90:89:2f:0e:87:38:cf:79:7a:12:
         d7:53:7e:f7:26:9b:a4:b8:50:cd:b8:20:19:f5:9f:dd:a3:d5:
         c1:01:7c:35:03:50:b5:48:97:55:a0:9e:58:15:d6:91:df:fa:
         a4:3a:d3:61:a2:f9:4c:69:2f:25:26:7f:7b:9c:6d:87:59:2c:
         d2:84:b4:bf:d0:46:55:2a:5f:33:7d:dd:b3:c9:59:68:58:7d:
         ed:20:70:36:f8:03:1a:5c:5c:aa:2e:48:f8:f6:11:b9:e9:77:
         d4:59:6a:dd:04:5e:f2:60:97:6f:aa:31:32:a4:21:8c:24:79:
         87:1c:a1:aa:bc:40:b8:58:fc:e9:d1:f5:2e:a1:0a:b9:e0:ac:
         c6:16:6b:31:e2:7c:91:f7:d0:e5:c1:61:d9:d5:b2:e7:c2:83:
         16:dd:e5:b7:fa:e9:5f:6e:d4:01:9f:64:97:ad:ed:23:eb:fa:
         9a:3d:2a:6c:af:da:d0:5b:7e:1e:f2:e4:ac:42:38:43:be:a6:
         ea:5e:40:a2:62:b4:28:97:d9:82:48:23:e7:4b:bc:e2:d4:ab:
         d8:aa:62:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org