Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/0/323830343a343238633a3a2f33322d3332203d3e20323637353037.roa
File:                     323830343a343238633a3a2f33322d3332203d3e20323637353037.roa (raw, json)
Hash identifier:          zbi2zhCPp0IQaVHAROztiL4Zzr02LqpM8X5O3G3P/AE=
Subject key identifier:   BF:A7:53:DE:EE:88:9E:B0:FA:64:2A:27:89:01:0B:05:B8:2E:FC:0C
Certificate issuer:       /CN=0CD6D32D929BE9796DE55AE0E49D7A89DFDA9FEF
Certificate serial:       3ABB529B0A2061495C8F15D4A7D2575DD9B7994A
Authority key identifier: 0C:D6:D3:2D:92:9B:E9:79:6D:E5:5A:E0:E4:9D:7A:89:DF:DA:9F:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CD6D32D929BE9796DE55AE0E49D7A89DFDA9FEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/0/323830343a343238633a3a2f33322d3332203d3e20323637353037.roa
Signing time:             Mon 17 Apr 2023 14:38:20 +0000
ROA not before:           Mon 17 Apr 2023 14:33:20 +0000
ROA not after:            Mon 15 Apr 2024 14:38:20 +0000
asID:                     267507
IP address blocks:        2804:428c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:bb:52:9b:0a:20:61:49:5c:8f:15:d4:a7:d2:57:5d:d9:b7:99:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CD6D32D929BE9796DE55AE0E49D7A89DFDA9FEF
        Validity
            Not Before: Apr 17 14:33:20 2023 GMT
            Not After : Apr 15 14:38:20 2024 GMT
        Subject: CN=BFA753DEEE889EB0FA642A2789010B05B82EFC0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:98:24:68:67:01:93:26:0a:51:28:77:f7:e0:
                    08:8e:02:b9:cc:79:55:f7:a0:f4:f6:a0:af:36:ed:
                    25:35:01:a3:fe:4f:3d:5f:36:8d:6d:13:80:4d:af:
                    85:d0:fc:34:e3:aa:ff:c2:4c:ad:1e:f2:a2:fe:d8:
                    d8:5b:81:77:ec:fd:8e:09:98:8b:7d:f9:d6:89:00:
                    16:29:49:c0:2f:7e:42:06:c5:1d:56:88:ac:4f:83:
                    12:65:5c:a8:a7:a3:a9:8e:c6:82:d8:45:81:05:b1:
                    9a:b7:e6:33:d0:3c:1f:98:07:c2:8d:14:d1:91:24:
                    21:c0:01:97:01:84:4b:c6:eb:78:61:cf:ad:ed:b8:
                    50:d6:da:ab:3a:bc:a5:da:78:f5:22:f2:28:5c:19:
                    83:17:72:7c:06:57:15:d6:60:67:e8:35:5c:8f:3e:
                    23:d6:15:4d:30:30:f7:b4:81:0c:7d:50:04:73:33:
                    d0:56:86:4c:f7:fb:22:e2:3b:5b:80:c4:a8:6d:d7:
                    e9:72:5e:3b:fe:19:ab:5b:64:29:9a:45:a2:cb:af:
                    2f:cc:95:29:11:76:60:1a:06:09:42:9a:b3:5e:55:
                    bc:d3:be:02:9b:a6:a1:ae:13:20:d4:bc:92:ca:11:
                    e2:84:d6:7d:7d:1e:2a:09:16:d9:8d:8e:6f:cf:19:
                    ae:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A7:53:DE:EE:88:9E:B0:FA:64:2A:27:89:01:0B:05:B8:2E:FC:0C
            X509v3 Authority Key Identifier:
                keyid:0C:D6:D3:2D:92:9B:E9:79:6D:E5:5A:E0:E4:9D:7A:89:DF:DA:9F:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/0/0CD6D32D929BE9796DE55AE0E49D7A89DFDA9FEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CD6D32D929BE9796DE55AE0E49D7A89DFDA9FEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/0/323830343a343238633a3a2f33322d3332203d3e20323637353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:428c::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:87:e6:5d:4a:c6:d3:88:26:2f:c7:cc:d7:e9:f8:2f:cc:82:
         bc:1d:50:d8:9f:03:ba:8e:8a:71:7e:84:24:7a:d9:f1:5a:99:
         9c:55:15:da:51:be:5d:61:d4:51:4b:e5:70:06:56:94:27:99:
         1e:85:e5:b5:82:7c:f9:52:f6:a0:a6:9b:09:0f:4c:fb:58:db:
         d3:58:df:80:67:8d:65:5c:5f:dc:7d:11:b4:0e:a8:6f:60:f6:
         7a:b9:29:bb:e6:ef:c3:11:a7:c9:a9:c1:b3:c1:0f:fa:91:bb:
         4e:73:72:11:98:eb:4e:38:29:f8:43:81:a2:b4:c9:ef:43:70:
         d4:e0:db:e3:56:e2:f7:d2:34:8d:22:c3:c9:ac:2f:50:42:c7:
         c8:b4:ed:f0:08:3b:de:8d:de:1f:e9:f4:6e:4b:b2:18:75:2d:
         3a:c6:b5:29:65:38:e3:53:b6:af:19:82:d8:d7:42:86:43:62:
         dd:b7:d1:f5:09:44:ed:48:04:72:e5:7d:87:7d:47:e7:9e:57:
         f5:58:36:32:39:a5:d3:b1:cb:42:84:db:1a:83:65:0c:92:c5:
         5e:da:09:7f:88:9c:f1:d6:6e:0b:9d:c7:bb:af:e3:4a:e1:36:
         a3:b2:c9:04:bd:a1:d5:9d:0f:76:51:b6:5b:c9:46:83:96:ec:
         53:7c:16:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org