Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/323830343a383030303a3a2f33332d3333203d3e20323731373233.roa
File:                     323830343a383030303a3a2f33332d3333203d3e20323731373233.roa (raw, json)
Hash identifier:          FMecEPVCAVq0wVgaBz/V1/yiPbBw+1qCgGrM9B6Gsuo=
Subject key identifier:   6C:F8:5D:F8:AC:0A:CD:71:51:F7:0E:98:22:FF:2D:39:67:83:0A:3A
Certificate issuer:       /CN=2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99
Certificate serial:       01C0A1F94302BCA221068F8CF1F1541A30DF2EA5
Authority key identifier: 2A:EE:20:7C:0C:6F:AB:5D:F4:C8:FF:1A:41:BD:93:27:92:79:2C:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/323830343a383030303a3a2f33332d3333203d3e20323731373233.roa
Signing time:             Thu 04 Apr 2024 14:49:35 +0000
ROA not before:           Thu 04 Apr 2024 14:44:35 +0000
ROA not after:            Thu 03 Apr 2025 14:49:35 +0000
asID:                     271723
IP address blocks:        2804:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c0:a1:f9:43:02:bc:a2:21:06:8f:8c:f1:f1:54:1a:30:df:2e:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99
        Validity
            Not Before: Apr  4 14:44:35 2024 GMT
            Not After : Apr  3 14:49:35 2025 GMT
        Subject: CN=6CF85DF8AC0ACD7151F70E9822FF2D3967830A3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:32:42:e6:48:65:7e:f8:cf:43:98:5b:38:02:
                    1e:41:b2:c6:32:6a:83:95:c4:04:e0:97:4e:0c:e4:
                    ee:78:6d:78:a4:91:2d:b9:8f:66:22:af:48:47:23:
                    ed:c8:fb:4d:cd:36:75:84:58:34:c9:39:ab:4d:e5:
                    af:c2:0c:5a:82:36:2f:2b:d9:b6:21:50:1e:91:c8:
                    4b:40:fb:ef:e9:f7:bd:29:d4:00:78:eb:d7:0d:e8:
                    bb:1b:6e:1a:9d:2c:51:b3:6a:64:cf:d4:0b:b9:72:
                    30:15:54:45:4b:cf:3a:a4:e6:aa:42:1d:1f:d4:76:
                    b2:f1:b5:7c:01:e9:e4:43:46:da:94:1b:8c:59:25:
                    24:3c:ce:e7:15:63:5b:e3:bc:2f:36:b7:d0:41:4c:
                    bf:aa:33:6b:0f:6c:96:2f:9a:a8:8f:67:e9:04:00:
                    d5:ee:dd:33:47:0a:3f:f3:01:a8:aa:7c:b0:18:f8:
                    98:35:65:59:d7:a4:31:83:e6:f6:e3:a7:78:ad:90:
                    c6:66:66:42:50:c3:c5:79:9f:c8:a2:4c:6a:fa:96:
                    56:14:eb:e1:25:0b:cd:3e:cf:fc:7b:6d:d3:b0:24:
                    8b:84:82:1a:1a:20:15:bc:59:5c:8d:d2:2a:7b:64:
                    4e:48:f0:d5:e4:5b:f3:af:59:e5:9f:10:11:23:3f:
                    a9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F8:5D:F8:AC:0A:CD:71:51:F7:0E:98:22:FF:2D:39:67:83:0A:3A
            X509v3 Authority Key Identifier:
                keyid:2A:EE:20:7C:0C:6F:AB:5D:F4:C8:FF:1A:41:BD:93:27:92:79:2C:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/323830343a383030303a3a2f33332d3333203d3e20323731373233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         a5:06:b3:00:b3:45:1d:f9:c3:d2:cf:65:cf:ee:75:c8:24:fc:
         d5:17:c9:2a:96:79:cd:da:5e:90:ea:9b:30:20:86:56:6a:95:
         93:8c:df:bc:5b:49:82:a1:24:c3:81:38:39:88:3e:7a:74:b3:
         59:cd:49:11:6f:69:61:85:25:7e:71:79:35:a7:30:bc:4a:87:
         8b:ac:61:df:af:f0:9f:65:b0:d0:fb:ac:df:5d:97:65:8d:fa:
         1a:3d:9a:d4:a2:b1:e6:7d:af:3a:a0:fe:76:d3:c4:52:de:f0:
         13:8c:9e:c3:3c:7e:85:da:ea:b1:08:ec:31:f7:59:05:cf:d5:
         1d:8d:5c:12:49:ac:5b:4f:ae:14:17:89:21:6c:4a:3d:c5:e3:
         71:d3:49:e5:f8:32:8f:28:75:83:34:56:53:59:f2:19:4f:66:
         30:0c:8b:a0:f6:6e:aa:5b:2a:06:a4:f1:6f:34:13:3f:01:3d:
         78:95:7c:f5:fa:eb:6d:84:6c:84:c3:96:0f:68:2d:80:62:63:
         69:d3:cc:83:16:54:79:01:13:55:74:68:3c:ac:c4:00:48:1a:
         aa:a8:ea:60:fc:d1:8a:43:8e:1a:44:0f:1a:6f:62:84:23:ae:
         0a:12:ad:ef:ec:13:8f:11:af:b6:a2:c7:d5:89:0d:b0:3a:13:
         9d:67:47:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:38 2024 by rpki-client on console-ams.rpki-client.org