Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9wF2w3pV447EBuv9QtmCPTy1AoM5enLSpDnT966aLfX6/0/323830343a3531633a373330303a3a2f34302d3430203d3e20323632343935.roa
File:                     323830343a3531633a373330303a3a2f34302d3430203d3e20323632343935.roa (raw, json)
Hash identifier:          iqKHbZ8pjoQja/RTBJqNCHg7kM2IC7Ei1YF4HSkP0N4=
Subject key identifier:   E3:09:25:C0:3C:39:5E:86:58:99:B5:EB:68:18:B6:24:5A:08:1D:E3
Certificate issuer:       /CN=2A020A5FE3C599222BE72D3E9F37B50FE4D89331
Certificate serial:       37A6FB408FFC26571DAA25BCB1483D8783C3AB63
Authority key identifier: 2A:02:0A:5F:E3:C5:99:22:2B:E7:2D:3E:9F:37:B5:0F:E4:D8:93:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A020A5FE3C599222BE72D3E9F37B50FE4D89331.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9wF2w3pV447EBuv9QtmCPTy1AoM5enLSpDnT966aLfX6/0/323830343a3531633a373330303a3a2f34302d3430203d3e20323632343935.roa
Signing time:             Mon 07 Nov 2022 18:25:00 +0000
ROA not before:           Mon 07 Nov 2022 18:20:00 +0000
ROA not after:            Mon 06 Nov 2023 18:25:00 +0000
asID:                     262495
IP address blocks:        2804:51c:7300::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:a6:fb:40:8f:fc:26:57:1d:aa:25:bc:b1:48:3d:87:83:c3:ab:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A020A5FE3C599222BE72D3E9F37B50FE4D89331
        Validity
            Not Before: Nov  7 18:20:00 2022 GMT
            Not After : Nov  6 18:25:00 2023 GMT
        Subject: CN=E30925C03C395E865899B5EB6818B6245A081DE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f7:25:d6:66:52:7c:be:67:dc:dd:47:08:63:
                    d5:9e:a9:00:e1:f3:d9:64:12:42:be:e9:27:8c:cf:
                    b2:0f:07:e6:97:47:70:ec:65:ea:14:cf:ab:22:3b:
                    2a:8a:2d:34:e8:fa:c7:b3:32:56:e9:cb:55:02:d0:
                    05:67:e2:28:90:7f:34:56:ba:b0:4c:e5:05:36:a8:
                    cd:20:b5:fe:93:9a:ed:f9:0b:28:ad:36:9c:7f:74:
                    03:5f:c4:f3:7b:cf:27:8d:2a:3a:9c:20:a3:38:a4:
                    ef:c3:51:6f:5c:39:84:ee:b8:3d:16:f6:7a:46:fa:
                    e1:fb:b7:1d:8f:20:7e:6b:41:26:b3:3e:c4:ef:3c:
                    4f:34:47:a9:c0:84:c2:02:61:01:b7:61:5a:4b:b9:
                    43:5c:82:e4:66:9a:d9:d6:b8:b0:07:d2:d5:59:29:
                    62:1b:bf:a8:02:07:52:91:a7:76:74:ab:d2:9a:7f:
                    c9:1d:c1:c9:0e:e5:2a:3f:c6:50:ad:c1:67:dd:81:
                    70:af:38:2d:f2:17:09:8e:34:52:c9:42:0a:c6:c3:
                    a5:9c:d5:db:51:9e:2a:5e:3f:1c:95:1a:ba:8b:20:
                    45:c9:c8:22:89:9e:f1:a8:26:c2:95:63:fd:53:85:
                    f9:62:36:b2:06:73:8f:6d:6f:42:bd:dc:b5:04:b2:
                    7c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:09:25:C0:3C:39:5E:86:58:99:B5:EB:68:18:B6:24:5A:08:1D:E3
            X509v3 Authority Key Identifier:
                keyid:2A:02:0A:5F:E3:C5:99:22:2B:E7:2D:3E:9F:37:B5:0F:E4:D8:93:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9wF2w3pV447EBuv9QtmCPTy1AoM5enLSpDnT966aLfX6/0/2A020A5FE3C599222BE72D3E9F37B50FE4D89331.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A020A5FE3C599222BE72D3E9F37B50FE4D89331.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9wF2w3pV447EBuv9QtmCPTy1AoM5enLSpDnT966aLfX6/0/323830343a3531633a373330303a3a2f34302d3430203d3e20323632343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51c:7300::/40

    Signature Algorithm: sha256WithRSAEncryption
         10:7c:e1:d3:48:8d:f1:5d:3a:33:13:7d:39:8c:10:f0:94:1c:
         87:8a:1c:f9:83:66:82:1e:f6:af:01:ef:2c:d9:84:bf:a3:e0:
         d7:be:bf:e2:08:85:c9:59:d7:a8:2f:dd:bc:d6:1e:66:93:05:
         cc:e5:2b:bd:93:12:23:6e:1b:d6:bb:e4:cb:57:cf:ad:bc:ee:
         12:f7:c5:cf:03:f4:ed:fa:50:09:c0:d5:33:ae:60:b2:86:85:
         5a:69:39:53:e4:ad:12:7e:c4:a5:aa:2b:7f:7b:e4:ee:7c:dd:
         46:f3:a5:39:6d:9b:fd:e7:eb:bc:b2:5a:1e:85:24:c5:f1:ea:
         08:c5:97:e3:f9:29:fa:18:89:c1:cc:02:25:cb:c1:0f:26:84:
         69:48:ad:d7:f0:df:0b:22:5a:9f:99:e4:cd:7c:ad:65:3b:d4:
         ed:31:04:8b:8a:e5:f0:84:48:e5:54:da:ee:4e:fd:1f:df:23:
         b1:16:6c:a7:5b:b5:da:d9:dc:64:05:31:59:f8:5f:03:57:a4:
         15:f8:dc:6a:52:38:11:62:b3:ed:ee:90:bf:9b:5e:3b:d2:29:
         da:cf:8d:11:9f:b3:bf:f9:5e:ec:a6:40:8f:78:2b:70:5f:14:
         45:97:0d:5d:16:10:4c:65:17:89:86:8e:19:f1:ca:7c:70:46:
         71:8e:56:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org