Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/0/323830343a343737343a3a2f33322d3438203d3e20323637303535.roa
File:                     323830343a343737343a3a2f33322d3438203d3e20323637303535.roa (raw, json)
Hash identifier:          q0YGex52F4/SmlWFcIKfx6tAIpgZ/uNR4QjDPXhztvs=
Subject key identifier:   BC:E4:03:2D:E6:72:14:7E:33:C7:30:DF:E0:AD:D8:85:51:B5:0B:AB
Certificate issuer:       /CN=C62B522145CCE2BC061DE87203AFE4124EE24560
Certificate serial:       31EC39A0A6B8B3504AB3B6B4ABE7FDE37D1633DD
Authority key identifier: C6:2B:52:21:45:CC:E2:BC:06:1D:E8:72:03:AF:E4:12:4E:E2:45:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C62B522145CCE2BC061DE87203AFE4124EE24560.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/0/323830343a343737343a3a2f33322d3438203d3e20323637303535.roa
Signing time:             Thu 16 Nov 2023 19:01:20 +0000
ROA not before:           Thu 16 Nov 2023 18:56:20 +0000
ROA not after:            Thu 14 Nov 2024 19:01:20 +0000
asID:                     267055
IP address blocks:        2804:4774::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:ec:39:a0:a6:b8:b3:50:4a:b3:b6:b4:ab:e7:fd:e3:7d:16:33:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C62B522145CCE2BC061DE87203AFE4124EE24560
        Validity
            Not Before: Nov 16 18:56:20 2023 GMT
            Not After : Nov 14 19:01:20 2024 GMT
        Subject: CN=BCE4032DE672147E33C730DFE0ADD88551B50BAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0f:3b:ae:99:c4:7c:8f:2f:25:2d:1c:8e:6a:
                    63:2b:2e:a6:0e:c3:29:e6:0f:c3:55:1f:a9:fa:1c:
                    78:d0:cd:e0:52:c8:45:5d:7f:e3:94:7a:3b:c4:af:
                    f7:06:08:21:e7:96:35:3b:3a:6b:1b:72:92:dc:17:
                    04:2f:38:2a:af:cc:32:11:87:b2:2d:3f:80:53:46:
                    58:e0:88:f6:63:ce:56:c7:df:dc:89:8d:30:5e:e6:
                    77:3f:8f:c0:04:27:75:75:ff:f2:c8:49:f3:ce:61:
                    ec:57:f4:df:74:54:18:bf:d4:2a:6a:52:69:1a:5d:
                    62:cc:1f:9d:2e:7b:c2:96:3e:64:1a:04:45:9a:0f:
                    48:0e:f1:70:57:2f:30:2e:30:63:ef:12:0e:ca:2e:
                    0d:39:a9:60:03:99:ea:b4:49:eb:b5:ed:3c:82:1c:
                    67:f9:69:a0:38:74:07:1e:e3:2c:02:52:80:d7:de:
                    19:74:dc:8b:31:08:3d:6c:89:77:34:ff:55:81:0c:
                    f1:76:91:12:bd:e9:df:f4:4f:e5:69:89:46:05:6c:
                    21:fe:88:a9:3d:07:45:a7:a1:9d:a2:9e:b5:10:2f:
                    b3:dd:49:8c:2c:b1:10:73:4b:ba:4b:bc:d9:71:8e:
                    dd:32:67:1b:66:63:19:e4:78:ab:53:27:fe:fd:34:
                    b9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E4:03:2D:E6:72:14:7E:33:C7:30:DF:E0:AD:D8:85:51:B5:0B:AB
            X509v3 Authority Key Identifier:
                keyid:C6:2B:52:21:45:CC:E2:BC:06:1D:E8:72:03:AF:E4:12:4E:E2:45:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/0/C62B522145CCE2BC061DE87203AFE4124EE24560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C62B522145CCE2BC061DE87203AFE4124EE24560.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/0/323830343a343737343a3a2f33322d3438203d3e20323637303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4774::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:c9:a9:bf:01:f0:95:9c:17:bc:74:c1:a2:86:bc:e8:f3:b3:
         19:f4:bc:9c:1f:98:85:af:46:55:ad:ef:e3:83:c8:fc:08:ab:
         ab:66:a9:65:29:3e:09:29:a4:19:b7:b7:5b:04:6f:b9:52:2a:
         7e:b7:db:f0:27:88:c1:9b:73:ec:25:3f:37:5a:82:75:ea:61:
         04:ef:0b:4b:da:8d:75:5f:0e:95:62:29:0c:e5:cf:70:46:08:
         3e:84:72:b2:37:1d:ec:e0:5a:4e:5b:d3:f5:b9:57:ee:22:d7:
         2d:3a:54:ec:36:69:79:68:85:ff:bd:3b:59:d2:f9:2d:a1:f5:
         73:c6:39:8e:4d:ae:3e:9c:fc:1b:d7:a9:9a:3b:c4:55:53:bb:
         ca:f8:00:a2:c6:63:23:b4:a6:92:74:42:33:65:7e:3a:08:0a:
         6a:df:ff:18:b8:b7:b4:c6:c7:07:22:d6:26:e2:c5:3c:5b:e7:
         d2:85:04:a1:9c:a0:00:8c:69:41:27:c1:a3:82:33:83:06:ba:
         4e:76:56:ca:3c:13:3b:17:de:cf:a3:5f:ef:22:ce:56:49:7a:
         19:35:11:59:a7:07:25:21:b3:36:35:fd:5a:1c:2e:a2:f6:90:
         aa:13:c1:e1:37:8a:3d:79:74:ef:d2:b9:78:fe:78:3b:e1:c5:
         9b:f2:54:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org