Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/0/323830343a326465383a383030303a3a2f33332d3333203d3e20323635333131.roa
File:                     323830343a326465383a383030303a3a2f33332d3333203d3e20323635333131.roa (raw, json)
Hash identifier:          RLvJKgpc6so8vV+HpnP9+uxj3AWAk4PtntLznrh/QnQ=
Subject key identifier:   AF:28:B7:32:D4:FE:B5:19:AF:92:A9:85:02:DF:BE:65:08:FD:C4:EA
Certificate issuer:       /CN=14DAB675B77AC194533C86DBFBAF31C52FE203FB
Certificate serial:       490BE27FF799F7F80B042DDEE00EB80BC58598FF
Authority key identifier: 14:DA:B6:75:B7:7A:C1:94:53:3C:86:DB:FB:AF:31:C5:2F:E2:03:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14DAB675B77AC194533C86DBFBAF31C52FE203FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/0/323830343a326465383a383030303a3a2f33332d3333203d3e20323635333131.roa
Signing time:             Wed 05 Jul 2023 14:23:28 +0000
ROA not before:           Wed 05 Jul 2023 14:18:28 +0000
ROA not after:            Wed 03 Jul 2024 14:23:28 +0000
asID:                     265311
IP address blocks:        2804:2de8:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:0b:e2:7f:f7:99:f7:f8:0b:04:2d:de:e0:0e:b8:0b:c5:85:98:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14DAB675B77AC194533C86DBFBAF31C52FE203FB
        Validity
            Not Before: Jul  5 14:18:28 2023 GMT
            Not After : Jul  3 14:23:28 2024 GMT
        Subject: CN=AF28B732D4FEB519AF92A98502DFBE6508FDC4EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:84:61:d7:96:10:27:a7:a4:83:92:32:6a:1d:
                    06:c7:10:e6:cd:b0:5f:e3:59:d3:b8:e6:3e:2e:16:
                    5b:ca:0a:6c:ff:62:7e:3a:18:51:04:99:ed:d0:be:
                    91:87:06:d4:0c:aa:d4:1b:cc:d7:61:de:4d:ed:19:
                    eb:20:23:94:dd:21:13:6f:b9:bb:4a:3c:be:97:9e:
                    be:57:fc:77:85:02:47:2f:0f:24:56:48:93:57:81:
                    a7:fe:c6:d0:70:40:23:42:ba:7c:65:be:db:d3:22:
                    1b:70:78:4f:db:be:73:b3:35:37:3c:25:e6:d4:06:
                    1e:d0:a0:97:95:9f:aa:60:b5:10:86:ac:cc:eb:84:
                    34:ea:77:a1:18:83:ad:f9:7f:70:6b:3e:d3:5c:aa:
                    e2:20:cd:e9:d0:96:2a:3d:4e:77:93:0b:52:6a:28:
                    70:97:51:34:9c:8e:8f:6c:ff:20:55:ed:61:6e:7d:
                    9f:a7:c2:25:fe:b1:2b:37:c0:bd:0f:ae:79:60:55:
                    28:39:c2:33:23:a8:1f:f3:9f:2c:a8:bf:0e:88:e3:
                    2d:37:10:56:49:38:3c:4f:f3:d5:78:b6:78:6c:18:
                    ef:b1:31:21:2b:ba:59:12:26:49:3f:5b:23:8a:51:
                    05:11:a9:e0:f3:70:8d:c6:e8:21:b8:b5:49:d0:95:
                    de:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:28:B7:32:D4:FE:B5:19:AF:92:A9:85:02:DF:BE:65:08:FD:C4:EA
            X509v3 Authority Key Identifier:
                keyid:14:DA:B6:75:B7:7A:C1:94:53:3C:86:DB:FB:AF:31:C5:2F:E2:03:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/0/14DAB675B77AC194533C86DBFBAF31C52FE203FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14DAB675B77AC194533C86DBFBAF31C52FE203FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/0/323830343a326465383a383030303a3a2f33332d3333203d3e20323635333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2de8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         9e:7e:1e:68:9d:3e:5b:d6:08:ba:ef:2e:4a:97:03:bb:03:84:
         43:a9:fc:ae:28:55:52:21:bf:68:39:20:03:10:85:ed:e3:ad:
         4a:ea:47:bd:a5:fc:93:79:c9:9d:ef:fc:4b:52:27:f5:3b:e8:
         fb:8f:63:07:19:16:62:30:76:84:29:09:9c:3c:8a:80:75:84:
         30:bd:fb:23:a0:b0:7e:84:03:70:c2:9d:4c:07:58:a7:e9:88:
         d0:1a:4d:77:25:15:d2:87:ab:7f:75:75:1c:b5:c4:65:fc:cf:
         70:bc:f4:6d:fe:6b:bf:35:60:7c:0d:9d:60:17:13:55:50:9a:
         10:9a:d1:13:2d:ba:cd:28:42:60:8e:81:a9:6f:1b:dc:ec:cc:
         0b:40:d4:ff:50:57:63:11:ad:42:64:e5:61:67:81:a1:c5:de:
         e2:ee:fa:c4:5c:48:e4:79:34:36:14:bb:a3:7d:1d:80:d7:34:
         e6:4a:24:ef:eb:e8:dc:71:11:d6:f2:22:9d:f9:5b:8c:e1:a3:
         93:f6:90:0a:96:49:28:ba:0d:2b:a2:fd:a4:b8:90:29:1f:fe:
         88:f5:01:b2:8f:11:9a:b9:e8:ee:17:14:ad:7a:f3:aa:39:50:
         82:2d:42:0e:e0:a3:a3:31:61:93:b0:3e:51:51:2f:6a:94:fc:
         64:24:52:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org