Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kQ1ndqczByoXhWr2vvWnfzxMuyAZwpReh6RcUeMMveA/0/323830343a326232383a3a2f33322d3332203d3e20323635313338.roa
File:                     323830343a326232383a3a2f33322d3332203d3e20323635313338.roa (raw, json)
Hash identifier:          Bu7NV2PH+IIzNNonTKUH8zrwG41eE9Ped2+ZQcWBDQo=
Subject key identifier:   A9:F5:61:24:81:BA:F0:A3:97:33:56:5A:DE:95:0E:47:48:4D:B8:38
Certificate issuer:       /CN=B6CD24F925D5B02BA9586C5598202D5DE275A1ED
Certificate serial:       35B8CED2A29C1477951831573A0458BCE8AE6CAF
Authority key identifier: B6:CD:24:F9:25:D5:B0:2B:A9:58:6C:55:98:20:2D:5D:E2:75:A1:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6CD24F925D5B02BA9586C5598202D5DE275A1ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kQ1ndqczByoXhWr2vvWnfzxMuyAZwpReh6RcUeMMveA/0/323830343a326232383a3a2f33322d3332203d3e20323635313338.roa
Signing time:             Tue 07 Feb 2023 00:23:55 +0000
ROA not before:           Tue 07 Feb 2023 00:18:55 +0000
ROA not after:            Tue 06 Feb 2024 00:23:55 +0000
asID:                     265138
IP address blocks:        2804:2b28::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:b8:ce:d2:a2:9c:14:77:95:18:31:57:3a:04:58:bc:e8:ae:6c:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6CD24F925D5B02BA9586C5598202D5DE275A1ED
        Validity
            Not Before: Feb  7 00:18:55 2023 GMT
            Not After : Feb  6 00:23:55 2024 GMT
        Subject: CN=A9F5612481BAF0A39733565ADE950E47484DB838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:a3:44:20:62:43:17:c4:63:09:3d:e1:53:57:
                    c7:e8:e2:4c:e2:cd:42:c0:b4:bc:76:4c:d7:f6:1f:
                    ab:ab:b2:43:9b:0b:2b:8e:2d:d4:d9:3d:3a:9e:50:
                    f4:e7:39:ad:0b:32:72:85:9f:51:9b:80:d0:86:22:
                    af:01:39:5a:14:e0:2a:71:e2:41:34:d4:8a:b6:d9:
                    d7:54:29:56:f5:5e:b4:b4:7f:b2:5a:d5:fb:0e:c4:
                    6c:7e:5f:1e:0d:6c:97:6d:85:a4:63:2f:29:fc:0d:
                    0d:08:0a:22:32:c2:22:30:75:cf:22:5f:66:08:de:
                    1d:f5:51:b6:39:48:fe:dd:d0:e3:1b:6e:59:9b:cc:
                    69:1d:e2:2c:ee:df:09:fb:05:aa:c3:b0:e3:44:bb:
                    25:43:0b:59:68:35:1f:3f:ab:53:74:a4:d1:13:8f:
                    06:40:95:75:84:2f:b3:2c:5d:80:d7:65:dd:08:80:
                    53:7b:0b:23:e9:75:26:f5:50:55:0f:e4:e9:b2:e3:
                    dc:c4:c9:39:9b:c7:e3:e8:b7:9f:16:1b:f6:9e:d9:
                    37:83:dd:ed:fe:2f:79:b9:ba:76:b4:53:52:13:06:
                    88:48:49:df:4c:60:9d:0b:e6:dd:61:ba:17:62:f4:
                    57:d2:00:92:d3:9f:55:68:0f:59:77:e2:21:95:ee:
                    c0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F5:61:24:81:BA:F0:A3:97:33:56:5A:DE:95:0E:47:48:4D:B8:38
            X509v3 Authority Key Identifier:
                keyid:B6:CD:24:F9:25:D5:B0:2B:A9:58:6C:55:98:20:2D:5D:E2:75:A1:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kQ1ndqczByoXhWr2vvWnfzxMuyAZwpReh6RcUeMMveA/0/B6CD24F925D5B02BA9586C5598202D5DE275A1ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6CD24F925D5B02BA9586C5598202D5DE275A1ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kQ1ndqczByoXhWr2vvWnfzxMuyAZwpReh6RcUeMMveA/0/323830343a326232383a3a2f33322d3332203d3e20323635313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b28::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:70:28:73:95:c3:c3:df:a7:57:34:6f:3f:e0:d1:81:7a:86:
         49:da:3c:b9:64:4a:b7:b7:e5:ea:10:17:5b:62:30:f3:7d:f4:
         fa:fe:b0:ca:1f:2e:5b:0f:c3:35:b7:fe:ce:45:13:51:7f:10:
         99:25:76:cc:d6:ac:61:08:da:fd:8b:b6:97:82:d0:3f:0a:7b:
         51:5b:75:88:f3:9a:2d:6d:65:57:56:61:c7:59:8e:47:37:97:
         57:2c:b9:69:5f:1f:5f:22:b1:7e:b3:1a:89:85:cf:ed:fe:00:
         ba:f6:ae:f5:bd:ad:75:38:0e:c0:cc:8a:e8:41:01:0d:29:29:
         9a:59:93:0d:48:63:5b:ba:01:ca:b4:75:b4:b6:c9:4f:3a:28:
         63:c9:00:ac:75:64:0f:39:ff:f8:82:25:09:3b:56:63:ee:0d:
         46:56:69:5d:c1:32:99:2d:79:df:b7:86:5c:a6:ad:19:54:4b:
         4d:ce:fe:fc:28:23:39:3d:f9:59:87:df:f6:2f:27:81:da:10:
         9e:72:b6:b6:b6:7d:df:73:72:8d:0f:fd:e0:e1:12:83:2f:51:
         4b:76:7f:e2:21:24:b3:9e:c5:78:1b:b9:73:8e:5d:fc:70:fa:
         b2:73:02:16:5c:17:b0:13:6a:49:1f:fd:cd:9d:0a:e4:c2:9d:
         b8:d9:ac:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org