Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/0/323830343a383530633a383030303a3a2f34302d3430203d3e20323732353534.roa
File:                     323830343a383530633a383030303a3a2f34302d3430203d3e20323732353534.roa (raw, json)
Hash identifier:          YGXw/9MCViAsn8JzslWSZvzUfl+TVPebaQlFryoeQgc=
Subject key identifier:   C9:44:96:43:4D:87:85:84:DD:8B:96:92:4F:C4:D3:89:9F:C9:11:ED
Certificate issuer:       /CN=62CDADB2D7C18D435425FA65EF16B8D4634E0CD2
Certificate serial:       022DDFC9FC778659D42EDF9EBA5F497B6D127D66
Authority key identifier: 62:CD:AD:B2:D7:C1:8D:43:54:25:FA:65:EF:16:B8:D4:63:4E:0C:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62CDADB2D7C18D435425FA65EF16B8D4634E0CD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/0/323830343a383530633a383030303a3a2f34302d3430203d3e20323732353534.roa
Signing time:             Thu 23 Nov 2023 22:15:13 +0000
ROA not before:           Thu 23 Nov 2023 22:10:13 +0000
ROA not after:            Thu 21 Nov 2024 22:15:13 +0000
asID:                     272554
IP address blocks:        2804:850c:8000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:2d:df:c9:fc:77:86:59:d4:2e:df:9e:ba:5f:49:7b:6d:12:7d:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62CDADB2D7C18D435425FA65EF16B8D4634E0CD2
        Validity
            Not Before: Nov 23 22:10:13 2023 GMT
            Not After : Nov 21 22:15:13 2024 GMT
        Subject: CN=C94496434D878584DD8B96924FC4D3899FC911ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f9:17:08:18:5e:07:e8:dd:d8:07:fe:d5:e0:
                    e0:e9:b5:4a:7e:69:4f:3f:1c:1b:c4:ff:8a:15:ad:
                    94:80:8b:1b:c9:43:86:66:a1:83:40:5f:3a:c0:77:
                    97:f3:c5:32:59:0e:d1:8a:1b:a2:1d:51:d0:dc:ca:
                    dd:cd:02:2e:2e:7d:dd:13:32:54:79:85:0e:40:4c:
                    5a:7b:3f:a7:60:8f:45:a0:a7:61:98:5d:43:9e:47:
                    97:fa:51:0a:cd:a9:d3:41:1e:c5:6c:2a:09:9f:ef:
                    19:70:80:3d:ec:24:3d:c4:e5:bb:cf:1b:dc:7d:ae:
                    4f:02:0e:eb:3b:01:a4:0a:5f:1f:ba:25:39:c1:c2:
                    d0:ea:74:65:22:81:2d:d5:94:ba:b7:0c:eb:68:aa:
                    e6:49:4d:d9:e9:79:ee:8f:57:e7:f8:73:55:b2:c9:
                    f7:3d:42:74:74:fe:9a:a7:f9:87:1d:7d:78:28:2b:
                    c2:0d:0f:a2:dd:39:6e:21:38:5a:29:62:63:d3:44:
                    e7:1c:8a:8e:7a:e2:40:34:8e:5c:10:b5:c5:ad:45:
                    2c:1d:c4:7f:0b:8e:fc:98:63:c1:16:81:d1:69:c1:
                    6b:eb:15:de:57:0d:53:9f:42:f9:ac:f8:cc:65:27:
                    ec:1d:90:21:c3:30:eb:8f:fe:8d:d2:12:79:17:4c:
                    32:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:44:96:43:4D:87:85:84:DD:8B:96:92:4F:C4:D3:89:9F:C9:11:ED
            X509v3 Authority Key Identifier:
                keyid:62:CD:AD:B2:D7:C1:8D:43:54:25:FA:65:EF:16:B8:D4:63:4E:0C:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/0/62CDADB2D7C18D435425FA65EF16B8D4634E0CD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62CDADB2D7C18D435425FA65EF16B8D4634E0CD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/0/323830343a383530633a383030303a3a2f34302d3430203d3e20323732353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:850c:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         82:5b:ba:d2:e0:d6:9e:57:50:6c:5f:bd:19:23:ee:6c:1d:33:
         47:e7:5e:08:84:50:03:e2:7c:ec:4d:38:20:2a:6b:1a:a0:c2:
         af:c8:80:99:ad:09:d5:aa:2d:aa:7d:ac:ae:37:70:3f:f2:6d:
         2c:ed:9b:03:8d:20:3c:2f:85:ad:1d:df:8e:bf:b6:bd:9e:49:
         13:11:e3:99:1d:86:c9:5d:ac:f5:db:40:b6:9a:f5:bb:72:ba:
         c3:0e:e6:72:43:a3:d9:b7:dc:59:f0:b1:c7:05:04:34:f2:41:
         f8:7a:de:ac:41:33:e6:5f:10:20:b9:4d:b5:0d:c2:2b:b6:87:
         7b:30:e5:58:a9:c7:fc:b9:5c:8c:59:42:42:3b:eb:17:e1:a4:
         cf:8b:14:94:a4:91:92:85:82:a3:8a:e7:a9:aa:be:01:2f:eb:
         39:97:c2:38:ee:ec:24:3f:ee:9c:99:dc:c4:05:21:fe:60:67:
         7b:fc:26:53:d2:13:95:e7:b6:8d:a7:d3:81:d5:55:c0:c8:4b:
         fc:cc:28:0c:7b:11:fc:89:74:4d:50:74:6f:d2:67:df:5b:90:
         c0:b8:f3:f6:3c:e9:d5:b1:9e:55:cb:67:96:d5:92:d9:8b:d9:
         16:9d:e0:58:ca:02:14:ec:3d:55:96:7d:72:77:63:da:ae:1f:
         fc:d2:8e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org