Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/323830343a343934383a3a2f33322d3334203d3e20323637313735.roa
File:                     323830343a343934383a3a2f33322d3334203d3e20323637313735.roa (raw, json)
Hash identifier:          2YoGakToEH9uuq7aycXvD1JaXqQ+fynaFqXuU0rQGW0=
Subject key identifier:   60:EE:99:1D:9B:7B:B9:DC:21:C3:41:BD:5A:3C:8E:26:89:06:C3:6B
Certificate issuer:       /CN=2CD0D4F4D734A5C1F429F81ABF207B8F5D59F23D
Certificate serial:       32225A3E4099BDC4FBA45C4CC750411642419BCB
Authority key identifier: 2C:D0:D4:F4:D7:34:A5:C1:F4:29:F8:1A:BF:20:7B:8F:5D:59:F2:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CD0D4F4D734A5C1F429F81ABF207B8F5D59F23D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/323830343a343934383a3a2f33322d3334203d3e20323637313735.roa
Signing time:             Fri 05 Jan 2024 19:00:00 +0000
ROA not before:           Fri 05 Jan 2024 18:55:00 +0000
ROA not after:            Fri 03 Jan 2025 19:00:00 +0000
asID:                     267175
IP address blocks:        2804:4948::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:22:5a:3e:40:99:bd:c4:fb:a4:5c:4c:c7:50:41:16:42:41:9b:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CD0D4F4D734A5C1F429F81ABF207B8F5D59F23D
        Validity
            Not Before: Jan  5 18:55:00 2024 GMT
            Not After : Jan  3 19:00:00 2025 GMT
        Subject: CN=60EE991D9B7BB9DC21C341BD5A3C8E268906C36B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:15:35:e2:d9:c7:a5:42:b0:b8:e8:32:b0:fc:
                    22:63:54:d9:1c:8e:1f:27:87:98:93:b5:12:27:9c:
                    ad:7c:4f:26:d4:c7:fe:1b:8d:90:71:43:fa:cf:14:
                    58:07:1a:55:70:f4:f7:0e:89:47:d4:ef:5c:c1:9c:
                    bb:29:0f:8f:bd:c0:1f:3b:05:c7:f1:6c:06:3b:25:
                    36:61:7b:4d:0b:12:2e:1b:f4:aa:ef:25:c0:e5:c8:
                    3b:ff:ea:2a:f0:af:c8:2e:18:7e:04:a0:a3:29:48:
                    4a:eb:4b:bf:94:83:5f:2d:1f:de:70:63:07:86:e2:
                    23:09:9e:7d:69:ab:36:f1:44:81:4a:a8:cf:99:b0:
                    7b:c0:a0:60:ec:5c:96:78:3c:2d:43:65:3d:39:cc:
                    cc:f7:23:80:2e:d6:8a:c6:2e:d9:0e:cf:46:ac:3e:
                    aa:2e:80:fe:f0:a0:5c:a4:8f:9e:fc:1d:58:e0:f4:
                    e4:3d:d4:0c:b3:b6:d9:ad:b4:6f:9d:91:73:7e:16:
                    67:74:93:b2:b6:49:ea:e3:33:5f:49:c0:95:ec:88:
                    84:0c:e0:4f:9d:d4:4d:f5:3f:25:ee:c4:c3:4c:f2:
                    8e:9b:1a:91:0f:06:45:2c:4a:a9:00:88:22:89:b8:
                    ef:6a:09:1d:d8:44:fd:fc:9a:28:ce:86:b9:d0:85:
                    9d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:EE:99:1D:9B:7B:B9:DC:21:C3:41:BD:5A:3C:8E:26:89:06:C3:6B
            X509v3 Authority Key Identifier:
                keyid:2C:D0:D4:F4:D7:34:A5:C1:F4:29:F8:1A:BF:20:7B:8F:5D:59:F2:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/2CD0D4F4D734A5C1F429F81ABF207B8F5D59F23D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CD0D4F4D734A5C1F429F81ABF207B8F5D59F23D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/323830343a343934383a3a2f33322d3334203d3e20323637313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4948::/32

    Signature Algorithm: sha256WithRSAEncryption
         bf:3d:c2:a7:b4:c6:19:60:e2:32:24:c9:d2:d2:fa:36:44:59:
         24:38:49:63:59:ad:92:a6:65:8b:93:10:aa:a9:92:00:de:41:
         db:76:53:df:85:21:a0:f0:e7:c0:f9:0c:ad:20:15:4a:2d:d2:
         9e:a7:48:24:b7:59:41:ae:bf:1b:6f:5c:e9:cb:8f:e1:51:01:
         03:1d:65:7e:f5:99:ed:fc:0c:34:82:d0:2e:72:60:c0:e0:f0:
         4e:78:17:57:c2:3e:66:02:04:a0:82:ed:7a:20:c4:4b:61:7c:
         58:0c:9d:1b:73:fd:b4:b4:e3:1f:68:08:10:72:84:ab:fc:ef:
         d7:ee:aa:ba:5b:e9:54:e4:0c:19:87:89:fd:ee:2f:da:db:8c:
         78:91:b5:f9:66:21:f4:37:c3:d2:dc:e5:40:50:63:52:b9:9b:
         36:96:5a:a4:61:53:4f:3e:97:39:e4:6c:0c:2d:c0:9f:68:5c:
         0b:c4:26:94:84:33:b5:b9:16:38:74:68:c8:55:4b:82:76:84:
         25:69:65:22:35:1f:18:8f:c9:38:ec:66:a2:56:57:22:81:94:
         9f:99:06:ff:c5:24:28:4c:14:96:2c:63:96:b8:78:4d:af:3a:
         a1:49:13:47:15:09:29:0f:2a:d7:f3:46:1f:2e:7e:6d:09:15:
         e3:8c:92:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org