Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/0/323830343a383530633a3a2f33322d3332203d3e20323732353534.roa
File:                     323830343a383530633a3a2f33322d3332203d3e20323732353534.roa (raw, json)
Hash identifier:          xWpJNlCUmnyd25aY3yIhQkOZfox0UD1FNl4Ouj+E3hk=
Subject key identifier:   A5:DB:8B:0E:67:28:49:33:5B:EA:CE:6F:5A:5E:DC:88:E6:96:09:46
Certificate issuer:       /CN=62CDADB2D7C18D435425FA65EF16B8D4634E0CD2
Certificate serial:       678D60ACC528D1280ED9EDDBA98C21F27D91ADEB
Authority key identifier: 62:CD:AD:B2:D7:C1:8D:43:54:25:FA:65:EF:16:B8:D4:63:4E:0C:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62CDADB2D7C18D435425FA65EF16B8D4634E0CD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/0/323830343a383530633a3a2f33322d3332203d3e20323732353534.roa
Signing time:             Tue 26 Dec 2023 14:12:14 +0000
ROA not before:           Tue 26 Dec 2023 14:07:14 +0000
ROA not after:            Tue 24 Dec 2024 14:12:14 +0000
asID:                     272554
IP address blocks:        2804:850c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:8d:60:ac:c5:28:d1:28:0e:d9:ed:db:a9:8c:21:f2:7d:91:ad:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62CDADB2D7C18D435425FA65EF16B8D4634E0CD2
        Validity
            Not Before: Dec 26 14:07:14 2023 GMT
            Not After : Dec 24 14:12:14 2024 GMT
        Subject: CN=A5DB8B0E672849335BEACE6F5A5EDC88E6960946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ad:09:31:8e:21:79:9b:2c:46:46:17:80:42:
                    da:cd:c5:7c:aa:25:9b:45:cb:09:4a:19:0f:00:64:
                    27:4d:45:2d:19:37:a8:dd:50:b5:af:81:46:10:8b:
                    8c:d5:8e:09:ac:85:12:12:b2:fa:bc:55:5b:f2:fe:
                    16:43:1b:25:bb:ef:5e:68:ef:4e:58:55:4b:1a:2b:
                    be:ee:e8:ad:8e:ba:22:d5:50:61:d9:48:41:fc:a5:
                    30:e8:3a:9c:c1:22:f6:39:d2:3b:89:8d:e8:4b:fa:
                    76:08:f4:b8:63:4f:be:08:5c:80:b8:b0:5e:e1:bd:
                    9e:81:37:46:d6:b4:c0:12:9e:53:56:53:5d:90:cf:
                    6f:49:65:8a:62:48:a7:0c:d4:02:4c:26:22:39:42:
                    cc:19:54:5d:19:20:d1:db:31:26:af:32:46:74:80:
                    c5:97:a8:ba:c0:6f:23:1c:50:0e:1b:ee:45:dd:45:
                    6c:b0:a5:7f:92:4a:c7:d9:e6:12:de:07:a2:e2:fd:
                    87:5a:90:83:5a:48:1d:d9:ad:d5:45:2b:ae:9b:33:
                    50:8b:7b:a9:a8:1e:6e:9f:30:ae:c5:5d:f5:63:15:
                    c6:e5:bf:8f:eb:c7:e4:bd:88:ec:7e:21:ec:e5:f1:
                    2b:56:75:a0:67:43:25:cb:2d:8d:ad:65:55:d3:63:
                    a3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:DB:8B:0E:67:28:49:33:5B:EA:CE:6F:5A:5E:DC:88:E6:96:09:46
            X509v3 Authority Key Identifier:
                keyid:62:CD:AD:B2:D7:C1:8D:43:54:25:FA:65:EF:16:B8:D4:63:4E:0C:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/0/62CDADB2D7C18D435425FA65EF16B8D4634E0CD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62CDADB2D7C18D435425FA65EF16B8D4634E0CD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/0/323830343a383530633a3a2f33322d3332203d3e20323732353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:850c::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:53:33:56:80:b6:61:6b:2d:dc:94:cf:e0:80:7f:5d:28:0d:
         7b:dd:d0:a1:6e:16:f3:f0:a4:68:e9:bd:48:b8:82:26:f2:1e:
         a3:ea:1f:8f:83:49:02:3b:b0:09:a3:df:d9:2a:28:c2:fb:d8:
         7e:06:e7:ea:63:bb:83:f4:2b:42:63:ba:a1:1f:60:af:b2:24:
         9f:7d:27:4b:9c:c0:8e:94:b6:f5:8d:5a:0f:74:da:4b:6e:38:
         85:e1:39:0f:28:d1:85:7f:fc:ff:28:f1:cc:23:99:53:60:1a:
         54:e8:55:da:b1:b7:c5:f7:ed:35:c5:92:f9:1c:98:a0:22:6b:
         6a:b8:aa:f1:80:62:79:01:0c:ed:59:10:5e:55:0f:8b:41:45:
         19:78:57:87:7c:e6:36:ec:ab:0a:4f:ab:38:05:0e:01:e3:f0:
         9f:65:e7:8f:20:a2:0e:e6:d1:d3:4b:0c:fb:c9:4c:dc:b9:03:
         13:de:75:68:dd:60:9a:1c:ab:85:61:41:d6:2f:59:a3:f0:ed:
         9a:10:c4:84:e9:bd:f1:19:7c:68:26:0a:52:02:3e:eb:46:da:
         82:94:bb:b6:1a:3f:9a:2f:17:8e:72:38:9f:db:cb:03:03:cd:
         c2:ab:44:60:ff:78:22:5e:d3:f1:05:99:63:da:a4:cb:7d:2c:
         cb:74:d3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org