Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/323830343a383136633a3a2f33322d3438203d3e20323732343533.roa
File:                     323830343a383136633a3a2f33322d3438203d3e20323732343533.roa (raw, json)
Hash identifier:          0oT9QCV/maa1SPnqNt/Tq7wag5IbtCBOqGGhq8llgE8=
Subject key identifier:   34:4F:0E:58:56:69:F1:AF:FC:65:0E:6E:01:8E:A7:0E:BC:0F:FA:ED
Certificate issuer:       /CN=71DFC4D7BC2AC3ACAC17FBDFEC95C4469E308992
Certificate serial:       2D45631D6561780C66168CFE10B41C6C953D8A4E
Authority key identifier: 71:DF:C4:D7:BC:2A:C3:AC:AC:17:FB:DF:EC:95:C4:46:9E:30:89:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71DFC4D7BC2AC3ACAC17FBDFEC95C4469E308992.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/323830343a383136633a3a2f33322d3438203d3e20323732343533.roa
Signing time:             Wed 01 Nov 2023 14:20:12 +0000
ROA not before:           Wed 01 Nov 2023 14:15:12 +0000
ROA not after:            Wed 30 Oct 2024 14:20:12 +0000
asID:                     272453
IP address blocks:        2804:816c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:45:63:1d:65:61:78:0c:66:16:8c:fe:10:b4:1c:6c:95:3d:8a:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71DFC4D7BC2AC3ACAC17FBDFEC95C4469E308992
        Validity
            Not Before: Nov  1 14:15:12 2023 GMT
            Not After : Oct 30 14:20:12 2024 GMT
        Subject: CN=344F0E585669F1AFFC650E6E018EA70EBC0FFAED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:11:22:ff:76:08:ea:28:ad:13:29:2c:4a:ff:
                    80:1f:d3:44:b1:2d:5f:85:f2:6f:3a:4a:6f:cd:87:
                    f1:88:44:ba:23:b6:31:9b:29:4c:c2:e4:c7:54:18:
                    77:bb:d7:a1:88:46:7c:48:cc:86:a6:7e:8a:e0:0d:
                    d0:28:a5:4c:e8:71:26:a6:6d:8c:b7:ca:3a:d7:45:
                    e2:e3:6a:64:c2:40:0e:03:41:b2:e8:16:1e:17:e9:
                    20:e9:32:6c:26:f8:66:2f:9a:9d:ac:f1:ef:30:68:
                    79:0d:0d:21:e1:eb:ea:48:50:67:70:24:4a:02:cc:
                    59:f5:57:7a:f7:36:06:f5:39:20:56:e2:8a:0b:15:
                    7e:d7:9a:31:1e:1b:5a:eb:a0:2f:58:5a:d8:82:79:
                    82:5f:a7:00:f3:4d:aa:67:4f:d3:8b:68:12:21:f5:
                    ad:a0:4b:94:37:44:c2:67:3b:02:1f:26:fa:35:2c:
                    39:48:ed:a2:62:62:74:4f:1b:f6:cb:34:34:12:1f:
                    29:63:f1:33:32:49:08:1f:0a:5c:3f:6f:86:01:c1:
                    87:76:1d:1a:e5:89:8e:57:dd:72:a3:e5:4c:8a:c2:
                    d9:6a:5c:0e:79:ab:ca:ae:21:2b:ac:c3:18:f3:9b:
                    96:36:0f:57:12:4a:2e:cf:48:e7:69:ad:db:52:40:
                    d7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:4F:0E:58:56:69:F1:AF:FC:65:0E:6E:01:8E:A7:0E:BC:0F:FA:ED
            X509v3 Authority Key Identifier:
                keyid:71:DF:C4:D7:BC:2A:C3:AC:AC:17:FB:DF:EC:95:C4:46:9E:30:89:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/71DFC4D7BC2AC3ACAC17FBDFEC95C4469E308992.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71DFC4D7BC2AC3ACAC17FBDFEC95C4469E308992.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/323830343a383136633a3a2f33322d3438203d3e20323732343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:816c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:05:84:aa:91:21:ad:22:8d:47:9e:df:9c:0a:de:47:a2:aa:
         a9:12:a4:89:10:86:08:30:f3:d8:d8:aa:ad:4d:b6:14:9a:4f:
         5c:72:52:75:fd:1c:11:a6:f4:7e:6e:2f:da:01:53:3b:bb:0e:
         aa:ff:cd:fc:d2:1f:f8:97:48:06:27:8f:6e:5e:27:30:5c:17:
         de:f1:31:0a:b4:6d:74:f6:eb:15:77:ee:97:e5:2a:0e:e0:4e:
         bd:f2:84:ca:fc:99:d8:d8:74:ab:b9:8c:cb:8d:69:b6:3f:6b:
         48:cf:08:4d:57:d6:f8:bd:89:92:46:31:57:4b:72:ad:9d:93:
         f0:fa:8e:9a:6e:1a:e8:a4:e5:db:57:de:f0:6e:a5:75:53:44:
         80:af:a6:46:ed:63:b6:64:04:1a:1c:9b:83:25:e9:9b:51:67:
         fc:66:f1:97:f2:7e:08:2f:61:d7:89:01:01:c4:0b:84:c6:29:
         86:54:4a:2a:10:67:8f:b3:3c:59:49:a3:0b:41:e5:f9:52:15:
         8c:fc:b9:fd:ac:30:69:b6:40:26:47:cf:c8:2b:ff:9b:01:61:
         e0:15:18:a5:27:3f:74:bf:d9:b6:b7:2e:be:aa:98:11:53:74:
         f7:84:fc:ff:01:c5:17:b9:2f:bb:d5:6c:2d:c5:6d:46:bf:b6:
         62:10:b3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org