Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/0/323830343a383530633a633030303a3a2f34342d3434203d3e20323732353534.roa
File:                     323830343a383530633a633030303a3a2f34342d3434203d3e20323732353534.roa (raw, json)
Hash identifier:          DJwvUhPjNIYvyFQyVcdTT+8NWGxkAgXD61437/FBIDE=
Subject key identifier:   B4:2B:6B:6C:98:74:EC:2E:EE:74:ED:4F:70:50:DF:9D:68:86:9F:DC
Certificate issuer:       /CN=62CDADB2D7C18D435425FA65EF16B8D4634E0CD2
Certificate serial:       22AF1BAD353DEAB52115C3291A11020ECF9F665E
Authority key identifier: 62:CD:AD:B2:D7:C1:8D:43:54:25:FA:65:EF:16:B8:D4:63:4E:0C:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62CDADB2D7C18D435425FA65EF16B8D4634E0CD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/0/323830343a383530633a633030303a3a2f34342d3434203d3e20323732353534.roa
Signing time:             Thu 23 Nov 2023 22:15:20 +0000
ROA not before:           Thu 23 Nov 2023 22:10:20 +0000
ROA not after:            Thu 21 Nov 2024 22:15:20 +0000
asID:                     272554
IP address blocks:        2804:850c:c000::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:af:1b:ad:35:3d:ea:b5:21:15:c3:29:1a:11:02:0e:cf:9f:66:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62CDADB2D7C18D435425FA65EF16B8D4634E0CD2
        Validity
            Not Before: Nov 23 22:10:20 2023 GMT
            Not After : Nov 21 22:15:20 2024 GMT
        Subject: CN=B42B6B6C9874EC2EEE74ED4F7050DF9D68869FDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:57:e8:9a:a3:fc:35:51:c9:0b:5f:51:a8:aa:
                    33:c7:94:26:49:bf:fe:c1:b3:89:22:d0:87:e3:71:
                    27:66:a0:72:7a:21:ca:5c:e8:c4:6b:ce:bc:7e:98:
                    d3:9e:29:b3:fe:2b:81:ae:a3:ba:54:da:1d:f8:f8:
                    9c:13:26:6e:c5:a1:ac:67:ce:ec:ff:42:18:84:d9:
                    9e:bb:4f:59:3a:f4:38:56:58:09:ce:11:50:7b:eb:
                    fb:70:2d:82:0f:bf:c9:92:d5:2d:d1:90:55:0b:a2:
                    10:ef:f3:17:11:29:c3:9e:a6:21:3c:3c:a2:f1:f4:
                    80:fc:49:8a:6e:b1:ad:7c:74:70:53:21:bc:e6:1e:
                    92:10:d5:00:05:1b:16:c5:73:c4:6f:35:d0:be:3c:
                    c4:00:25:2f:d7:9c:a8:5a:3e:82:b3:da:9f:98:a1:
                    7e:48:d3:e0:f4:a5:4f:48:95:08:40:14:ac:24:65:
                    18:a6:bb:62:23:11:df:01:d9:95:7e:5b:e9:ed:56:
                    55:b6:ad:01:3b:9e:a5:c1:08:cf:e2:a7:97:9f:d1:
                    81:cc:29:ed:c6:29:62:a0:c6:ff:f4:6b:76:72:d2:
                    bc:44:6d:8f:ba:7a:54:9d:23:fa:36:2b:59:a6:90:
                    57:11:cc:cd:5c:38:47:a2:aa:33:8a:ef:e5:e1:9b:
                    fc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2B:6B:6C:98:74:EC:2E:EE:74:ED:4F:70:50:DF:9D:68:86:9F:DC
            X509v3 Authority Key Identifier:
                keyid:62:CD:AD:B2:D7:C1:8D:43:54:25:FA:65:EF:16:B8:D4:63:4E:0C:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/0/62CDADB2D7C18D435425FA65EF16B8D4634E0CD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62CDADB2D7C18D435425FA65EF16B8D4634E0CD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/0/323830343a383530633a633030303a3a2f34342d3434203d3e20323732353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:850c:c000::/44

    Signature Algorithm: sha256WithRSAEncryption
         13:a5:1d:7c:db:78:34:93:04:f3:eb:64:d5:a7:4b:44:11:72:
         98:b9:12:82:55:f3:66:9c:b4:d7:17:8e:96:32:e6:0c:23:e4:
         2f:9a:53:dc:d0:93:ad:e3:89:ba:66:ee:de:81:f6:52:4e:e3:
         39:6e:11:e5:46:99:57:23:c3:c7:ff:7d:05:8f:44:f7:23:ef:
         b8:f0:74:4b:b3:11:53:e6:e3:1e:69:5c:e5:46:76:32:d7:67:
         6e:3e:7f:a6:27:31:08:0c:76:7f:fd:6c:06:2e:28:3f:d8:4e:
         8e:71:5a:3c:1b:66:e9:b9:2c:43:0a:e7:92:e6:6c:1f:95:78:
         e4:38:3b:db:2c:e3:b4:3f:9e:ce:5b:24:60:0f:36:65:dc:c9:
         0f:aa:51:d1:83:8d:ef:0f:61:3c:80:15:e9:a8:58:5f:ca:d6:
         74:9d:31:66:7f:3a:78:4b:ef:79:93:7c:8f:30:7f:19:a5:40:
         3f:72:5a:fc:32:8f:1e:7c:76:c1:e5:ac:da:9c:ed:d1:39:c8:
         35:89:0a:be:dd:e9:b9:71:b7:44:88:b5:7e:3d:fc:9c:92:a5:
         f9:36:44:0e:88:76:c9:36:59:c6:72:d9:a5:86:7a:ab:44:7b:
         dc:2e:5c:47:40:43:69:76:d7:66:36:1c:84:36:a6:83:86:e1:
         fc:16:4d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org