Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/2/323830343a343238633a3a2f33322d3334203d3e20323637353037.roa
File:                     323830343a343238633a3a2f33322d3334203d3e20323637353037.roa (raw, json)
Hash identifier:          Quy/i5RO/utSlq8ZYGxj/rzMo776gMk6qt35ITnqLUA=
Subject key identifier:   7B:C3:75:EF:EA:12:D0:42:8D:72:EF:EF:6A:CB:1A:BF:01:08:95:08
Certificate issuer:       /CN=AA8C62F6CC799DF8DE314F2B2704A3F10C7B5721
Certificate serial:       04825C39EE18D4E37FFFE75D46B59B624F5A4C8B
Authority key identifier: AA:8C:62:F6:CC:79:9D:F8:DE:31:4F:2B:27:04:A3:F1:0C:7B:57:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA8C62F6CC799DF8DE314F2B2704A3F10C7B5721.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/2/323830343a343238633a3a2f33322d3334203d3e20323637353037.roa
Signing time:             Fri 08 Mar 2024 13:33:51 +0000
ROA not before:           Fri 08 Mar 2024 13:28:51 +0000
ROA not after:            Fri 07 Mar 2025 13:33:51 +0000
asID:                     267507
IP address blocks:        2804:428c::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:82:5c:39:ee:18:d4:e3:7f:ff:e7:5d:46:b5:9b:62:4f:5a:4c:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA8C62F6CC799DF8DE314F2B2704A3F10C7B5721
        Validity
            Not Before: Mar  8 13:28:51 2024 GMT
            Not After : Mar  7 13:33:51 2025 GMT
        Subject: CN=7BC375EFEA12D0428D72EFEF6ACB1ABF01089508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:86:e1:b1:d2:6c:ea:e4:49:bb:0a:96:49:16:
                    1e:81:58:24:e7:66:c3:d1:4f:64:bf:02:e5:8c:46:
                    c7:34:f6:a7:09:e9:16:61:02:9f:c5:88:8e:9c:60:
                    bd:f9:89:b7:42:58:2d:ce:ff:77:5c:02:1d:ed:2e:
                    bc:82:b1:04:af:e7:c8:ac:8d:78:3c:f3:86:c8:a8:
                    9e:70:28:2a:99:ba:43:6c:6c:42:d7:d6:28:b9:b0:
                    73:38:e9:cb:33:86:5c:c1:ce:ae:68:86:fd:2e:68:
                    c3:9f:82:83:d4:4e:66:66:64:c0:fd:c2:4f:78:0b:
                    f9:03:22:b8:be:08:46:38:c9:d3:19:f5:a5:14:77:
                    f6:c7:32:c5:ff:44:d7:e4:16:12:e6:b8:3a:50:de:
                    0c:3e:05:89:30:6b:26:bf:48:b3:7f:68:73:c5:d6:
                    de:e3:00:ba:42:00:fa:24:ab:86:40:78:c0:7e:c1:
                    b8:55:e0:8f:3a:d0:a6:91:26:ab:9b:07:2b:0c:50:
                    32:62:6e:36:d7:a7:e9:fc:fa:9b:dd:70:e0:5b:68:
                    09:9c:6d:6a:1f:07:54:5f:7a:be:0a:49:14:bc:ec:
                    11:33:de:8a:aa:cd:00:b5:31:bb:4d:80:4e:3e:79:
                    08:a3:ba:60:04:04:50:fd:01:f3:0d:62:20:e7:10:
                    6a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C3:75:EF:EA:12:D0:42:8D:72:EF:EF:6A:CB:1A:BF:01:08:95:08
            X509v3 Authority Key Identifier:
                keyid:AA:8C:62:F6:CC:79:9D:F8:DE:31:4F:2B:27:04:A3:F1:0C:7B:57:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/2/AA8C62F6CC799DF8DE314F2B2704A3F10C7B5721.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA8C62F6CC799DF8DE314F2B2704A3F10C7B5721.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/2/323830343a343238633a3a2f33322d3334203d3e20323637353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:428c::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:e9:4f:1e:fd:a0:0f:69:4a:90:61:19:c7:b8:5b:91:2f:a4:
         08:12:7f:a2:46:77:fd:79:0c:83:fa:d1:25:67:3a:c8:aa:48:
         1e:31:f2:f3:cc:fc:76:0f:72:1f:41:47:a2:7e:69:c7:e5:30:
         2b:3f:50:8f:80:b1:ee:6a:9e:f8:0f:e9:85:c4:14:12:0d:d6:
         c5:59:b1:b9:14:33:04:25:0e:fd:10:cd:a7:d7:ae:53:ad:d7:
         b7:31:37:bc:30:b2:87:7f:ed:fc:24:40:70:33:86:be:b5:b3:
         09:8a:ff:63:cc:48:72:53:5c:13:c7:19:3d:55:e9:56:fa:54:
         16:d0:d1:1b:f4:4a:3f:7b:15:52:a8:45:7a:64:db:30:5e:51:
         a4:1a:09:19:43:21:74:21:f8:57:0c:29:fc:6a:68:13:c8:21:
         6e:b1:29:21:e3:fe:c1:d6:37:b1:b0:c5:c7:e5:07:3d:34:ba:
         77:78:78:52:2c:09:cd:bd:30:b5:ec:80:db:37:07:3b:9b:a3:
         6c:f2:9e:17:63:67:1d:2b:50:f6:bd:a4:94:c1:8f:2b:fc:25:
         37:a9:7d:a8:92:f5:41:32:62:e9:c7:8d:3b:dd:9b:f1:d5:8a:
         a8:e3:d4:da:dd:5e:6f:99:38:2c:e0:8b:c9:47:bd:f3:e7:99:
         04:27:f5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org