Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/1/323830343a346233343a383030303a3a2f33332d3333203d3e20323637323930.roa
File:                     323830343a346233343a383030303a3a2f33332d3333203d3e20323637323930.roa (raw, json)
Hash identifier:          UdFOFQOHRI9B/PDLIAT9d2P9hxOdPH8Pp3eZxTY0b/U=
Subject key identifier:   CC:BD:C9:CA:2E:C1:FE:C3:15:13:DE:86:3B:A6:0B:C3:06:64:BD:A6
Certificate issuer:       /CN=29D189B9A7639658160A27FD17B6D238AB9BFD4A
Certificate serial:       1A648194CAD3424F0C94F0182BD4A8C438248A24
Authority key identifier: 29:D1:89:B9:A7:63:96:58:16:0A:27:FD:17:B6:D2:38:AB:9B:FD:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29D189B9A7639658160A27FD17B6D238AB9BFD4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/1/323830343a346233343a383030303a3a2f33332d3333203d3e20323637323930.roa
Signing time:             Wed 03 Apr 2024 18:31:28 +0000
ROA not before:           Wed 03 Apr 2024 18:26:28 +0000
ROA not after:            Wed 02 Apr 2025 18:31:28 +0000
asID:                     267290
IP address blocks:        2804:4b34:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:64:81:94:ca:d3:42:4f:0c:94:f0:18:2b:d4:a8:c4:38:24:8a:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29D189B9A7639658160A27FD17B6D238AB9BFD4A
        Validity
            Not Before: Apr  3 18:26:28 2024 GMT
            Not After : Apr  2 18:31:28 2025 GMT
        Subject: CN=CCBDC9CA2EC1FEC31513DE863BA60BC30664BDA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f2:eb:96:fb:b0:4e:33:09:b9:1f:60:30:35:
                    6c:16:68:ad:09:3a:5d:8a:aa:c3:30:df:20:f5:18:
                    0d:cc:9e:fd:02:8c:5b:8e:a2:69:5a:3a:ca:48:22:
                    07:fc:73:4a:ac:37:0f:d1:bc:86:68:a0:7e:04:73:
                    b3:a9:62:ec:98:9d:3c:92:ce:1d:92:0a:cf:52:56:
                    e2:8c:19:7d:1d:41:2a:1d:dd:3e:9a:92:1d:5e:be:
                    a2:ff:36:d0:e2:92:2a:53:8b:7e:a8:23:95:e4:79:
                    9c:ac:37:82:7e:03:34:8a:36:36:8f:bc:bc:13:d1:
                    28:43:46:80:5e:b1:4f:2e:62:d4:ee:1b:a7:9a:14:
                    51:0b:99:62:80:64:ea:28:ed:ff:a3:08:16:dd:8c:
                    d6:74:85:e6:c5:80:dc:b8:8d:80:28:6e:87:59:e6:
                    b0:ac:43:7b:9e:a5:fe:b0:e5:50:66:02:4b:03:d7:
                    89:72:d2:dc:ad:9d:4c:f5:f0:37:35:99:6f:f7:29:
                    16:92:18:19:5a:be:8d:7d:7e:72:d8:2e:d8:f4:d7:
                    b5:46:7d:ba:21:c3:4e:f2:51:5f:a5:8c:b8:a1:a2:
                    e0:b0:39:6e:bc:ef:dc:24:ee:46:0c:71:4c:2d:d5:
                    b3:28:02:22:45:3a:77:d6:43:4b:d4:a0:e8:95:dd:
                    f8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:BD:C9:CA:2E:C1:FE:C3:15:13:DE:86:3B:A6:0B:C3:06:64:BD:A6
            X509v3 Authority Key Identifier:
                keyid:29:D1:89:B9:A7:63:96:58:16:0A:27:FD:17:B6:D2:38:AB:9B:FD:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/1/29D189B9A7639658160A27FD17B6D238AB9BFD4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29D189B9A7639658160A27FD17B6D238AB9BFD4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/1/323830343a346233343a383030303a3a2f33332d3333203d3e20323637323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b34:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         2a:04:6e:5b:04:c2:f0:b1:59:ef:a1:4c:cd:c7:dc:37:78:be:
         57:c9:d2:a2:ea:a2:67:2b:e4:13:e1:07:f3:a8:57:7c:01:2c:
         13:60:02:72:fb:52:a9:0b:c2:ca:ff:0f:e2:5e:b9:66:ba:e8:
         28:57:35:f0:6f:2c:bf:74:e8:ed:93:83:be:1d:60:86:45:75:
         8a:65:aa:d4:10:6b:ca:be:0b:15:78:7e:fa:49:a9:59:c7:4b:
         11:44:f5:9a:62:9e:be:07:0b:85:1c:e5:a6:ca:08:d3:5d:77:
         64:c3:c4:ab:1a:b6:2d:e7:cf:ed:5a:ab:9c:18:3f:f2:82:6b:
         7f:b7:9e:86:c6:41:bc:3d:2c:59:c5:8b:1b:63:fb:ec:05:e2:
         e0:7c:5f:a1:ba:b4:f7:f4:60:0e:68:6e:96:6e:11:19:c9:ab:
         cc:cf:b7:a4:33:3f:e9:5d:16:6e:88:12:5e:d8:e3:cb:0e:a7:
         3c:1d:92:61:56:ac:13:66:38:0e:60:51:10:d0:19:62:a9:fe:
         4f:ed:8e:13:87:cb:dd:3f:a8:fc:25:2f:52:f1:fd:07:b1:3b:
         4a:e1:95:f1:bc:86:87:d5:a6:6b:e3:9a:2d:73:04:1d:ff:8d:
         60:c0:8c:f9:cd:40:b7:4e:9c:95:fb:9f:b2:0d:4e:1d:f5:03:
         87:0b:49:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org