Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/323830343a323232383a3a2f33322d3334203d3e20323634353935.roa
File:                     323830343a323232383a3a2f33322d3334203d3e20323634353935.roa (raw, json)
Hash identifier:          9WfsOv6I/QRuR5l+MQ5txc4+Ep3N0cUJaw78GK/cOJU=
Subject key identifier:   8C:94:3B:09:2E:88:3C:5C:31:E1:45:9B:54:34:47:87:79:58:C1:FB
Certificate issuer:       /CN=8DDE37E39DCD1FDDB748C0965051518D6FDE2945
Certificate serial:       325BF2C7C62335770A33AFB1DD4C7DA724D69CB6
Authority key identifier: 8D:DE:37:E3:9D:CD:1F:DD:B7:48:C0:96:50:51:51:8D:6F:DE:29:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DDE37E39DCD1FDDB748C0965051518D6FDE2945.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/323830343a323232383a3a2f33322d3334203d3e20323634353935.roa
Signing time:             Mon 10 Jan 2022 19:36:14 +0000
ROA not before:           Mon 10 Jan 2022 19:31:14 +0000
ROA not after:            Mon 09 Jan 2023 19:36:14 +0000
asID:                     264595
IP address blocks:        2804:2228::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:5b:f2:c7:c6:23:35:77:0a:33:af:b1:dd:4c:7d:a7:24:d6:9c:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DDE37E39DCD1FDDB748C0965051518D6FDE2945
        Validity
            Not Before: Jan 10 19:31:14 2022 GMT
            Not After : Jan  9 19:36:14 2023 GMT
        Subject: CN=8C943B092E883C5C31E1459B543447877958C1FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c3:d0:18:25:18:db:ec:d9:a6:2a:c4:16:01:
                    d9:03:9a:4c:db:4e:23:d7:2e:86:9f:f1:dd:38:98:
                    e1:84:96:02:0a:a7:d0:09:f1:19:8e:51:37:a3:61:
                    1f:56:a5:77:01:63:0c:07:41:ea:18:8c:15:11:61:
                    fa:91:08:c5:95:85:f6:2c:4e:5b:9b:fc:8a:05:d4:
                    33:86:e8:95:ed:01:73:d1:cd:fe:fe:a9:76:f4:54:
                    ed:77:72:c6:16:e0:c4:4c:a9:9b:51:f9:46:c9:b4:
                    47:12:ba:d8:52:ef:7a:d1:3b:27:cf:17:62:38:70:
                    35:e2:16:c8:a3:e8:d9:78:a9:0c:0f:71:3c:01:a6:
                    ff:48:0a:f0:85:01:1c:07:ba:15:04:7a:3e:ab:f4:
                    ba:a9:a9:84:e8:95:aa:1d:3c:02:a2:e7:07:6d:62:
                    ae:0f:da:d3:2f:a8:c0:53:ae:0d:1e:48:04:69:1b:
                    bf:c6:93:ad:42:4d:86:f1:47:74:c9:f5:34:da:01:
                    75:16:35:89:2c:d2:58:92:f8:5a:a1:dc:bd:86:ab:
                    21:1b:39:f3:05:31:4d:51:85:99:be:2c:fb:61:da:
                    57:93:45:2e:35:f3:ef:17:9a:8a:a8:bb:0e:e6:74:
                    9b:01:9b:b7:4d:b4:68:f1:98:ea:d7:00:50:f6:09:
                    bc:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:94:3B:09:2E:88:3C:5C:31:E1:45:9B:54:34:47:87:79:58:C1:FB
            X509v3 Authority Key Identifier:
                keyid:8D:DE:37:E3:9D:CD:1F:DD:B7:48:C0:96:50:51:51:8D:6F:DE:29:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/8DDE37E39DCD1FDDB748C0965051518D6FDE2945.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DDE37E39DCD1FDDB748C0965051518D6FDE2945.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/323830343a323232383a3a2f33322d3334203d3e20323634353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2228::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:0e:04:37:8d:78:47:03:81:a3:aa:c3:c3:91:f5:a4:8d:a1:
         2a:dd:72:07:6c:cf:7c:93:82:56:35:07:64:36:86:64:67:cb:
         a1:4f:9a:6e:36:fe:87:e4:11:2e:52:cd:d2:03:0a:cc:5e:99:
         6d:b9:54:85:4d:c8:b4:72:d1:66:d8:2c:a5:fa:bd:68:70:7e:
         26:e9:1d:a2:ba:25:47:41:e6:90:5c:18:89:70:ca:8b:58:e6:
         ee:74:4c:30:01:74:30:57:e6:86:bc:01:20:a3:58:0d:fb:6c:
         fa:96:d2:81:11:89:de:47:dc:bd:fc:06:d0:c1:1b:23:e3:12:
         59:b3:af:46:3b:98:ae:b3:fc:d3:5b:a5:f6:c7:a2:9d:74:ae:
         ab:1e:5d:a4:73:8d:9f:98:2b:f9:80:a4:01:f8:7d:46:2e:21:
         5c:17:33:cd:99:7e:75:98:dc:9e:36:bd:1d:b4:e8:49:f4:93:
         a9:21:12:1c:42:7b:55:06:4c:11:ef:b6:59:94:2f:e1:69:d1:
         9b:ab:4b:f5:eb:d1:2e:89:6b:82:98:85:2c:ca:dd:01:d0:99:
         18:46:fb:83:0e:41:ac:ae:fd:f0:4f:31:f6:85:aa:f3:64:45:
         49:85:27:a6:f1:8a:d0:ca:9e:2e:19:31:6d:e4:c9:56:84:55:
         d9:f6:45:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org