Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QxpGJjP9Q6bgLnrg5FwMFJLfZ9L5SuH65vcmyrxSdhm/0/323830343a383265383a3a2f33332d3333203d3e20323732313634.roa
File:                     323830343a383265383a3a2f33332d3333203d3e20323732313634.roa (raw, json)
Hash identifier:          Z0U25YMaXLLglMNpJfxK3vdc29lGyazwmPI23joYLJQ=
Subject key identifier:   2D:30:38:A2:EF:5B:3F:D9:1F:AE:63:23:61:F4:EE:F6:5E:E8:BB:D7
Certificate issuer:       /CN=6D0C2E6FED7E38F97A258171425DB7D75B7F8247
Certificate serial:       37A74F85EA4E80EFEB380AD26D4DD364D6E6861E
Authority key identifier: 6D:0C:2E:6F:ED:7E:38:F9:7A:25:81:71:42:5D:B7:D7:5B:7F:82:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D0C2E6FED7E38F97A258171425DB7D75B7F8247.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QxpGJjP9Q6bgLnrg5FwMFJLfZ9L5SuH65vcmyrxSdhm/0/323830343a383265383a3a2f33332d3333203d3e20323732313634.roa
Signing time:             Sat 31 Dec 2022 17:00:00 +0000
ROA not before:           Sat 31 Dec 2022 16:55:00 +0000
ROA not after:            Sat 30 Dec 2023 17:00:00 +0000
asID:                     272164
IP address blocks:        2804:82e8::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:a7:4f:85:ea:4e:80:ef:eb:38:0a:d2:6d:4d:d3:64:d6:e6:86:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D0C2E6FED7E38F97A258171425DB7D75B7F8247
        Validity
            Not Before: Dec 31 16:55:00 2022 GMT
            Not After : Dec 30 17:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:33:1a:be:4b:58:a4:c2:7b:aa:1b:6d:34:2b:
                    97:a3:b6:f4:e8:74:70:eb:9d:ae:d7:e9:7e:0c:54:
                    20:43:75:04:43:d1:d7:98:61:5d:78:cf:63:aa:9e:
                    96:41:7e:3f:bd:37:06:50:a2:4f:7d:8e:33:b3:7b:
                    9e:9c:8d:ea:5c:df:ff:7c:93:2c:e6:35:40:5a:c0:
                    cf:75:05:57:15:d0:25:a2:0d:2f:0f:54:7d:52:09:
                    6d:1f:d2:7f:62:78:bc:43:9d:c3:64:aa:11:0f:ba:
                    ca:87:1c:5c:90:cb:b1:a9:f0:a6:25:61:44:d0:a8:
                    7b:85:1f:94:de:ab:87:c1:f3:9d:40:78:25:6e:15:
                    d4:d5:a6:be:a1:41:06:e2:9e:70:18:5e:09:f2:3c:
                    78:c9:90:01:cb:00:f8:ba:16:9b:b3:91:35:a0:56:
                    59:8e:86:1b:0c:18:29:ab:15:cf:40:1b:f6:9b:13:
                    5d:9e:f7:fd:ff:7b:7e:90:de:76:89:8c:60:9f:2e:
                    f1:36:6a:40:71:52:d1:c4:55:c7:e8:bc:e6:48:ab:
                    8b:98:92:4b:f3:63:f5:01:ff:23:fd:c2:53:82:6a:
                    44:33:79:6a:dc:72:12:3f:92:8f:04:92:a1:bd:4c:
                    39:84:59:f5:f8:38:4b:a3:8a:3b:24:93:84:fe:0f:
                    2b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:30:38:A2:EF:5B:3F:D9:1F:AE:63:23:61:F4:EE:F6:5E:E8:BB:D7
            X509v3 Authority Key Identifier:
                keyid:6D:0C:2E:6F:ED:7E:38:F9:7A:25:81:71:42:5D:B7:D7:5B:7F:82:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QxpGJjP9Q6bgLnrg5FwMFJLfZ9L5SuH65vcmyrxSdhm/0/6D0C2E6FED7E38F97A258171425DB7D75B7F8247.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D0C2E6FED7E38F97A258171425DB7D75B7F8247.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QxpGJjP9Q6bgLnrg5FwMFJLfZ9L5SuH65vcmyrxSdhm/0/323830343a383265383a3a2f33332d3333203d3e20323732313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:82e8::/33

    Signature Algorithm: sha256WithRSAEncryption
         d5:6c:53:c4:7d:59:4f:bb:51:cc:8a:f2:38:6e:06:ff:60:11:
         55:46:f5:e7:ca:13:3a:a4:3b:0f:78:13:8d:53:99:49:8c:8b:
         47:27:55:ba:42:eb:bd:60:6c:a7:e7:99:d4:45:14:b1:1e:f0:
         cf:ba:cd:3a:62:4c:b7:33:22:80:6e:70:69:e7:b9:dd:25:cf:
         70:e7:f2:2b:7f:cc:8c:2d:0b:a0:56:84:b4:05:65:81:77:b1:
         f3:6b:d5:69:aa:29:2b:ae:a8:e0:eb:d3:a7:ad:85:b1:21:c1:
         f5:95:0f:4a:66:4f:d6:10:2b:84:29:25:05:c7:2d:e7:d5:da:
         68:39:48:ce:9e:c5:17:e7:17:1f:8b:dc:59:f4:6c:09:1b:e2:
         09:3a:e7:6c:f0:69:0a:43:a7:aa:91:b2:15:48:d8:35:d6:1d:
         8f:9b:34:f6:fa:48:4b:cd:bb:9d:4c:3e:ad:f4:21:bb:64:e6:
         98:02:99:16:a9:a1:a7:c5:8e:4a:7b:4d:0a:c7:f2:7f:6f:ab:
         f0:cc:e3:37:7b:c0:bc:ed:46:6f:6f:76:b3:d8:74:ae:16:7c:
         52:4a:5d:eb:8b:b3:cb:5b:e9:96:6a:bd:9b:d2:cd:37:21:91:
         26:7a:bd:21:4d:5a:c2:03:ec:4d:4d:ee:2f:e3:05:14:06:62:
         37:45:e9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:09 2024 by rpki-client on console-ams.rpki-client.org