Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/0/323830343a383530633a653030303a3a2f34302d3430203d3e20323732353534.roa
File:                     323830343a383530633a653030303a3a2f34302d3430203d3e20323732353534.roa (raw, json)
Hash identifier:          BzvcNGXRrc7pQUieNRUfxwXw5TB2YeC8qxN5DUVx3Mc=
Subject key identifier:   94:3D:A1:B4:02:37:16:1F:4D:34:AB:16:55:7D:38:FE:A2:51:CF:09
Certificate issuer:       /CN=62CDADB2D7C18D435425FA65EF16B8D4634E0CD2
Certificate serial:       16BD43857E821BAD630EF6C8DA66C3AA36EBB5E9
Authority key identifier: 62:CD:AD:B2:D7:C1:8D:43:54:25:FA:65:EF:16:B8:D4:63:4E:0C:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62CDADB2D7C18D435425FA65EF16B8D4634E0CD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/0/323830343a383530633a653030303a3a2f34302d3430203d3e20323732353534.roa
Signing time:             Thu 23 Nov 2023 22:15:35 +0000
ROA not before:           Thu 23 Nov 2023 22:10:35 +0000
ROA not after:            Thu 21 Nov 2024 22:15:35 +0000
asID:                     272554
IP address blocks:        2804:850c:e000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:bd:43:85:7e:82:1b:ad:63:0e:f6:c8:da:66:c3:aa:36:eb:b5:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62CDADB2D7C18D435425FA65EF16B8D4634E0CD2
        Validity
            Not Before: Nov 23 22:10:35 2023 GMT
            Not After : Nov 21 22:15:35 2024 GMT
        Subject: CN=943DA1B40237161F4D34AB16557D38FEA251CF09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:18:f8:67:e3:d7:3c:dd:69:49:c4:6d:9c:b5:
                    15:69:4b:cc:48:9a:1a:96:fa:27:84:99:dd:36:25:
                    f2:4d:2b:d4:57:c8:d6:f5:db:02:ac:dc:3d:df:2c:
                    19:13:7c:c1:32:73:b7:cb:b8:ec:9d:17:43:40:a4:
                    3d:c1:7b:98:77:66:0b:69:7a:a0:c9:8c:8b:ff:af:
                    4a:55:08:8b:e6:bc:03:37:90:21:bf:2f:2a:6b:bc:
                    6d:e4:38:0f:b7:bd:04:67:e9:12:01:a1:67:b1:3e:
                    1a:66:52:0e:6a:69:7e:e9:a9:88:8e:0f:4d:1b:41:
                    90:99:16:50:42:19:78:56:d7:c8:54:ef:9d:da:3f:
                    9e:4f:f7:5d:0d:1b:ee:1d:39:be:39:5d:e7:84:86:
                    5e:93:0b:e3:4a:57:38:93:4a:9c:18:e5:10:9c:7e:
                    3c:73:b0:6d:09:4a:17:f0:11:18:4a:06:88:ac:2d:
                    7c:f9:33:7a:3b:de:ba:f5:d2:ce:80:87:61:10:3b:
                    a9:ba:fc:1f:80:b8:e1:db:73:b2:bb:4d:5a:9e:46:
                    6e:e3:81:1e:92:64:e3:8d:37:f5:24:9f:32:5c:ae:
                    d3:62:1f:1e:99:63:f0:6c:73:ad:40:12:f1:87:13:
                    df:d3:83:17:c9:e9:c8:a0:d6:41:8d:c7:56:ee:53:
                    16:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:3D:A1:B4:02:37:16:1F:4D:34:AB:16:55:7D:38:FE:A2:51:CF:09
            X509v3 Authority Key Identifier:
                keyid:62:CD:AD:B2:D7:C1:8D:43:54:25:FA:65:EF:16:B8:D4:63:4E:0C:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/0/62CDADB2D7C18D435425FA65EF16B8D4634E0CD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62CDADB2D7C18D435425FA65EF16B8D4634E0CD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/0/323830343a383530633a653030303a3a2f34302d3430203d3e20323732353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:850c:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         d5:cc:7c:31:37:40:ca:42:73:1b:75:a8:63:3c:be:1b:28:51:
         00:54:d5:01:fd:4a:06:07:9d:18:fc:dd:d9:4a:46:fc:ee:13:
         31:cf:69:68:6f:fc:da:2e:40:21:9f:40:c9:c5:49:9a:6a:2a:
         f0:30:97:3f:d4:30:b2:4e:33:12:e7:72:81:f9:25:e6:f7:6b:
         74:11:50:d8:20:d7:5b:10:96:29:f6:87:41:ef:f3:71:3b:78:
         85:c3:cc:4a:0b:05:e8:ee:a7:b7:c5:87:47:36:75:34:56:2a:
         4d:e5:05:6a:1f:07:dd:c3:1a:73:78:5f:d6:9c:59:0f:79:d2:
         7e:e5:01:f1:fb:eb:f6:fe:3d:fd:02:ec:01:11:43:94:8c:da:
         2a:dd:7b:51:27:3e:38:dd:f8:a9:28:f0:13:35:1f:09:23:57:
         30:40:86:d8:5f:4b:a6:49:a3:5a:97:06:55:f2:2d:c6:4a:23:
         0d:ba:59:43:55:62:52:55:85:98:e6:75:f2:2b:e1:7e:86:d7:
         89:16:dd:aa:6a:5d:d9:30:1a:15:d3:d5:78:a8:f6:c0:94:8e:
         9c:f5:ae:e3:66:54:cd:91:4c:40:e9:9f:06:c6:75:90:38:87:
         17:6a:31:82:2a:3c:92:d5:54:c9:b2:0c:99:ad:77:5a:82:af:
         39:34:b4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org