Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/323830343a383136633a3a2f33322d3332203d3e20323732343533.roa
File:                     323830343a383136633a3a2f33322d3332203d3e20323732343533.roa (raw, json)
Hash identifier:          E7GMnTzT5IZp52nBuGBWdBWSSeMYaKs1PI75qw2tRGg=
Subject key identifier:   CC:C6:6A:08:1B:11:35:DD:5A:99:A4:34:CA:64:C1:34:72:21:CA:01
Certificate issuer:       /CN=71DFC4D7BC2AC3ACAC17FBDFEC95C4469E308992
Certificate serial:       46DD4FA4662DF820B73788748F3A304DEEE65F20
Authority key identifier: 71:DF:C4:D7:BC:2A:C3:AC:AC:17:FB:DF:EC:95:C4:46:9E:30:89:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71DFC4D7BC2AC3ACAC17FBDFEC95C4469E308992.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/323830343a383136633a3a2f33322d3332203d3e20323732343533.roa
Signing time:             Mon 10 Jul 2023 22:00:00 +0000
ROA not before:           Mon 10 Jul 2023 21:55:00 +0000
ROA not after:            Mon 08 Jul 2024 22:00:00 +0000
asID:                     272453
IP address blocks:        2804:816c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:dd:4f:a4:66:2d:f8:20:b7:37:88:74:8f:3a:30:4d:ee:e6:5f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71DFC4D7BC2AC3ACAC17FBDFEC95C4469E308992
        Validity
            Not Before: Jul 10 21:55:00 2023 GMT
            Not After : Jul  8 22:00:00 2024 GMT
        Subject: CN=CCC66A081B1135DD5A99A434CA64C1347221CA01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9f:4a:b4:28:b2:b0:81:29:c3:38:79:42:3f:
                    dc:b7:c7:7a:79:35:f3:16:b2:95:21:eb:4c:32:7a:
                    d0:68:75:63:87:54:85:ef:12:96:6b:76:3c:f1:b8:
                    fe:0d:ec:cf:df:d2:7c:a8:75:d2:66:86:48:83:2f:
                    8f:79:3a:77:98:e1:73:84:28:2b:7a:14:90:1e:cf:
                    6f:d6:d5:4e:04:cf:6a:d7:43:16:74:c6:02:d4:94:
                    84:64:22:03:68:07:3f:00:5b:1d:72:59:f1:4f:75:
                    47:da:aa:50:cf:10:e3:e0:39:0f:e6:74:14:81:3a:
                    64:77:24:7e:fb:0e:0a:1d:07:de:3d:2c:16:1e:f6:
                    72:2f:7b:65:66:74:f3:59:1f:9e:04:2c:9f:9a:29:
                    56:00:27:44:d4:37:a0:d8:a2:16:f1:7c:21:ba:e9:
                    87:28:f3:66:5b:b9:0b:c2:39:ed:81:23:20:c6:10:
                    a1:b4:0f:f4:59:dc:ee:fd:60:e5:17:f3:f4:71:e3:
                    74:a1:72:30:49:2f:26:61:a5:4a:19:39:aa:c1:10:
                    d5:e8:fd:b9:7e:77:ad:4e:f8:c8:db:a9:d9:0d:1e:
                    2b:0f:dd:50:09:36:fc:23:11:ac:a5:a6:4c:1d:e4:
                    22:97:61:6d:ef:7c:86:1d:61:4d:c3:93:1b:64:b8:
                    57:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C6:6A:08:1B:11:35:DD:5A:99:A4:34:CA:64:C1:34:72:21:CA:01
            X509v3 Authority Key Identifier:
                keyid:71:DF:C4:D7:BC:2A:C3:AC:AC:17:FB:DF:EC:95:C4:46:9E:30:89:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/71DFC4D7BC2AC3ACAC17FBDFEC95C4469E308992.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71DFC4D7BC2AC3ACAC17FBDFEC95C4469E308992.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/323830343a383136633a3a2f33322d3332203d3e20323732343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:816c::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:5a:20:81:3d:32:7d:13:cb:3c:83:33:9a:62:6f:bf:88:8f:
         d1:dd:db:80:d1:46:55:81:93:76:d4:97:ea:83:f4:d8:f3:31:
         ce:70:67:be:70:22:b0:c2:c9:06:bd:7c:b0:73:a4:14:11:b3:
         b9:da:ca:df:d2:ad:07:dc:4d:9a:b3:9d:f5:f0:52:16:6e:2a:
         95:ea:8d:85:c8:3c:a7:4a:27:7d:a1:73:31:6d:2e:c4:4d:f4:
         63:0b:7f:57:df:1d:c1:ac:33:eb:15:19:d1:b2:70:02:0a:fd:
         64:62:51:cc:b8:b6:94:33:ae:8e:55:81:95:5a:75:df:0d:e3:
         d8:77:91:c5:a7:00:59:73:5e:ad:7e:d7:3b:ec:7d:b9:b3:05:
         ed:a5:8c:10:f1:e0:38:9c:43:19:0e:cc:cc:b6:bb:89:e1:c4:
         b7:d9:a1:bd:3b:93:a0:bf:be:cb:d3:d2:7b:1b:7f:c5:61:c7:
         4f:c4:9f:98:2a:cd:48:d3:18:b1:4f:17:13:e6:71:df:e7:bf:
         72:de:f2:87:4a:0e:29:58:c8:96:2f:59:31:54:1b:29:a6:c7:
         be:ad:56:7d:60:58:da:68:43:05:61:ca:09:1e:b2:ee:16:ba:
         11:ce:b0:e5:79:dc:13:d0:1c:59:46:b3:6c:99:f7:ee:36:4e:
         ed:4e:61:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org