Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/0/323830343a343935303a3a2f33322d3332203d3e20323637313737.roa
File:                     323830343a343935303a3a2f33322d3332203d3e20323637313737.roa (raw, json)
Hash identifier:          /5/lx4GkDXipCoJuyc0Zb9WtC+uQEeOFXmmNUa8E2Gw=
Subject key identifier:   58:12:14:BA:DB:76:8C:C0:27:4C:98:99:73:1D:28:76:29:EB:8A:66
Certificate issuer:       /CN=0B2871DC54261C0A0EA37A5B8879E292492F1577
Certificate serial:       2F8868B1221D7DDD39AC7B036901C3B7B84260BE
Authority key identifier: 0B:28:71:DC:54:26:1C:0A:0E:A3:7A:5B:88:79:E2:92:49:2F:15:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B2871DC54261C0A0EA37A5B8879E292492F1577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/0/323830343a343935303a3a2f33322d3332203d3e20323637313737.roa
Signing time:             Sat 22 Jan 2022 23:31:44 +0000
ROA not before:           Sat 22 Jan 2022 23:26:44 +0000
ROA not after:            Sat 21 Jan 2023 23:31:44 +0000
asID:                     267177
IP address blocks:        2804:4950::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:88:68:b1:22:1d:7d:dd:39:ac:7b:03:69:01:c3:b7:b8:42:60:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B2871DC54261C0A0EA37A5B8879E292492F1577
        Validity
            Not Before: Jan 22 23:26:44 2022 GMT
            Not After : Jan 21 23:31:44 2023 GMT
        Subject: CN=581214BADB768CC0274C9899731D287629EB8A66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f8:0b:0b:5e:7b:79:d5:64:e2:87:f3:e4:54:
                    b2:be:03:56:35:6f:09:1f:23:96:43:75:a5:43:d8:
                    a0:01:d1:b0:8c:fb:ce:b0:9f:47:2a:6d:34:72:68:
                    0a:9b:18:77:c8:cc:85:9b:96:02:46:f0:87:28:52:
                    36:96:87:6d:9b:0e:8b:c6:8e:f3:19:15:b3:9a:e6:
                    3c:ef:7d:8e:f9:b2:7b:73:de:45:0d:fc:50:99:0b:
                    d8:ac:77:6d:da:f4:22:f2:09:b5:d6:75:15:da:4c:
                    4b:bf:32:01:b0:c7:2c:bc:8c:ed:f2:4c:c5:ff:8e:
                    09:9c:8b:6d:c1:d2:d6:48:54:07:82:ea:55:83:89:
                    45:2b:c3:81:88:6d:f8:41:cd:5f:06:4c:f9:26:1d:
                    59:81:b3:c8:c5:4a:c8:04:0e:fa:c2:39:a7:ce:c5:
                    56:98:e1:68:68:fa:70:6c:3b:2c:42:80:f4:57:18:
                    5c:5e:bb:b4:b4:f0:a1:16:b9:a3:b7:5f:a6:3d:36:
                    f2:67:2c:4c:d7:1a:1c:ab:91:d6:e9:4a:b7:c2:ce:
                    e1:4f:f6:19:b2:03:f0:3a:88:26:61:3b:d0:d2:8f:
                    ae:58:60:74:e5:7b:35:bb:f2:9f:1e:62:07:53:bb:
                    ac:8c:ee:49:67:71:52:6b:8d:77:67:18:1c:a7:07:
                    4f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:12:14:BA:DB:76:8C:C0:27:4C:98:99:73:1D:28:76:29:EB:8A:66
            X509v3 Authority Key Identifier:
                keyid:0B:28:71:DC:54:26:1C:0A:0E:A3:7A:5B:88:79:E2:92:49:2F:15:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/0/0B2871DC54261C0A0EA37A5B8879E292492F1577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B2871DC54261C0A0EA37A5B8879E292492F1577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/0/323830343a343935303a3a2f33322d3332203d3e20323637313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4950::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:ea:2e:87:ae:e6:89:37:61:f0:30:7d:69:57:2e:1e:c5:2a:
         d2:6d:7c:10:71:26:50:33:bf:e2:a2:b6:67:7f:14:a7:2b:ce:
         2c:ff:91:32:a7:e5:63:4a:22:90:32:93:e6:56:b4:85:e0:d8:
         4b:a9:11:f8:7b:3c:29:e5:f6:c5:a9:4f:17:dd:6f:53:0f:b9:
         0f:82:af:14:b3:8c:63:c1:e8:bf:53:9f:3f:7e:82:e1:bf:82:
         9e:75:dc:d8:c6:f0:12:a5:d9:a4:a3:83:da:9f:07:4f:fe:f9:
         c5:ff:15:32:0c:43:a0:56:ad:01:0a:3e:d0:17:bc:fc:a7:84:
         a9:00:a0:1b:e8:18:57:62:17:6d:d6:65:80:7c:c6:bb:8b:e8:
         2c:09:56:91:3f:9f:7a:cd:09:c2:5a:63:cf:54:3b:fc:0e:58:
         9d:6a:52:c3:da:b3:6d:d9:f5:54:21:c5:2e:13:84:a9:32:af:
         e6:51:8b:27:9b:00:10:ef:3d:c5:3d:37:d2:28:c1:3d:31:d7:
         bc:c1:54:0e:5b:23:4c:34:97:25:c7:77:f8:e9:c2:8b:88:b6:
         88:9e:83:e5:f7:36:dc:e8:49:39:de:4c:1e:28:de:12:16:ed:
         29:2f:e3:f8:43:ee:70:a5:b4:55:66:22:af:63:e5:9e:37:c0:
         05:ee:7c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org