Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fasNMsBc8jagWa7e9XwkW3dnn3P1DzTbtDFX8qtd93q/0/323830343a323165343a3a2f33322d3332203d3e20323634353830.roa
File:                     323830343a323165343a3a2f33322d3332203d3e20323634353830.roa (raw, json)
Hash identifier:          cHb4pXyJ+BnFFaieOpSJPHwxKt8IxKkfL+hQGKwnxZ4=
Subject key identifier:   F1:D0:1E:C4:2F:54:16:CF:A0:5E:40:AC:36:F3:0A:5A:9A:74:F5:05
Certificate issuer:       /CN=2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5
Certificate serial:       0A72D2219F832F5685AA70B7BD6B39E5A2115DBA
Authority key identifier: 2D:06:58:C4:C8:C7:99:13:F8:56:49:FF:D3:BB:F5:D9:CA:BC:23:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fasNMsBc8jagWa7e9XwkW3dnn3P1DzTbtDFX8qtd93q/0/323830343a323165343a3a2f33322d3332203d3e20323634353830.roa
Signing time:             Tue 05 Dec 2023 17:37:37 +0000
ROA not before:           Tue 05 Dec 2023 17:32:37 +0000
ROA not after:            Tue 03 Dec 2024 17:37:37 +0000
asID:                     264580
IP address blocks:        2804:21e4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:72:d2:21:9f:83:2f:56:85:aa:70:b7:bd:6b:39:e5:a2:11:5d:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5
        Validity
            Not Before: Dec  5 17:32:37 2023 GMT
            Not After : Dec  3 17:37:37 2024 GMT
        Subject: CN=F1D01EC42F5416CFA05E40AC36F30A5A9A74F505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:51:f0:21:33:58:b9:c0:9e:b3:07:6f:08:11:
                    42:81:d5:da:ee:31:92:2e:e6:b9:dc:d8:0a:7c:e8:
                    46:47:35:80:63:e0:9c:03:88:e6:de:1a:63:dd:ea:
                    17:b9:a7:d2:04:20:8b:08:f3:9a:b2:40:33:55:05:
                    2a:f7:5f:ba:d4:c9:63:ae:0b:f4:5d:e1:83:65:e2:
                    ea:6c:7e:56:24:65:8e:56:81:c8:b0:9f:4a:d4:1a:
                    a2:ee:34:15:85:e6:37:20:0c:93:52:05:57:74:37:
                    ee:85:ff:5d:5e:ab:32:df:70:88:1a:dd:33:9e:4f:
                    5d:a2:8c:fd:af:b3:12:5e:f1:d4:ea:76:5d:1b:3e:
                    9d:be:7f:e8:2f:92:98:a4:24:b0:3d:e0:95:f7:51:
                    85:11:45:97:03:82:35:b2:f3:b1:47:cc:1b:70:74:
                    9b:66:25:dc:85:cb:3b:7e:55:36:28:95:85:14:c7:
                    21:89:21:4f:37:4d:f7:1c:af:2d:58:e9:67:6a:b3:
                    6d:1c:6a:cf:d9:f8:66:38:5d:3e:b4:08:e2:80:7b:
                    c1:40:6d:42:33:f5:d6:88:54:bd:bf:91:8f:9c:11:
                    e9:ee:e2:4e:7a:d4:e3:49:e3:15:f1:bc:74:de:f8:
                    dd:e5:e1:49:34:18:a1:7c:f6:df:c1:13:00:93:b6:
                    ec:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D0:1E:C4:2F:54:16:CF:A0:5E:40:AC:36:F3:0A:5A:9A:74:F5:05
            X509v3 Authority Key Identifier:
                keyid:2D:06:58:C4:C8:C7:99:13:F8:56:49:FF:D3:BB:F5:D9:CA:BC:23:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fasNMsBc8jagWa7e9XwkW3dnn3P1DzTbtDFX8qtd93q/0/2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fasNMsBc8jagWa7e9XwkW3dnn3P1DzTbtDFX8qtd93q/0/323830343a323165343a3a2f33322d3332203d3e20323634353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:21e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:86:2a:18:86:7f:8c:9f:5e:88:92:45:0c:47:56:2b:f8:45:
         06:78:eb:a5:54:6e:a0:b0:e6:49:1a:25:ca:68:c3:7b:d3:f5:
         5a:e8:ed:37:39:3c:45:5d:84:f1:71:ee:e9:8d:22:62:9a:8f:
         9f:66:7c:9d:7a:7e:17:a8:dd:dd:70:d4:11:c1:fc:30:0a:af:
         e2:16:16:0b:7e:d4:71:3a:45:d7:47:dc:77:c6:0e:34:e9:81:
         8e:5b:8a:f9:1b:e7:09:f7:dd:8c:4d:e3:1a:62:88:52:f1:8c:
         a0:bf:0e:14:3f:54:9b:78:ee:62:56:e0:4a:a9:af:ef:17:67:
         68:b3:3d:fa:07:6d:3b:2b:bb:a1:9e:13:d2:f0:b2:bb:0e:86:
         2e:ef:80:56:c8:87:87:7a:c2:5c:25:57:85:f1:79:2e:27:fa:
         7f:04:ca:4a:74:46:c0:7e:62:90:92:6f:4d:94:98:ba:ac:fd:
         ba:2d:03:31:04:59:a5:98:8b:64:40:af:1d:1a:06:18:96:c3:
         b9:b2:c1:53:91:bb:3f:91:62:2f:b2:2c:56:20:bd:26:b8:21:
         4b:85:16:3b:c1:77:2c:ef:42:d4:bf:95:d5:d5:d5:d5:4f:7b:
         09:ac:a8:76:b0:09:e1:a0:0f:58:b7:14:c0:29:64:48:4a:2f:
         42:0b:9c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org