Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/0/323830343a346638343a3a2f33322d3334203d3e20323638333331.roa
File:                     323830343a346638343a3a2f33322d3334203d3e20323638333331.roa (raw, json)
Hash identifier:          HE7i+D4iTnpXRf8qFH9yTLqZpCsgJENg1/WBZb59ons=
Subject key identifier:   B2:E8:1A:44:B0:1E:44:7F:6F:68:4C:E5:1D:5E:D1:AD:51:33:83:A3
Certificate issuer:       /CN=A0BEE15BC07A441D9085F648D6434C33B0E7CC70
Certificate serial:       38E24D848372E4965BE9394C07CD9D278E6F8B5A
Authority key identifier: A0:BE:E1:5B:C0:7A:44:1D:90:85:F6:48:D6:43:4C:33:B0:E7:CC:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0BEE15BC07A441D9085F648D6434C33B0E7CC70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/0/323830343a346638343a3a2f33322d3334203d3e20323638333331.roa
Signing time:             Fri 08 Apr 2022 19:29:43 +0000
ROA not before:           Fri 08 Apr 2022 19:24:43 +0000
ROA not after:            Fri 07 Apr 2023 19:29:43 +0000
asID:                     268331
IP address blocks:        2804:4f84::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:e2:4d:84:83:72:e4:96:5b:e9:39:4c:07:cd:9d:27:8e:6f:8b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0BEE15BC07A441D9085F648D6434C33B0E7CC70
        Validity
            Not Before: Apr  8 19:24:43 2022 GMT
            Not After : Apr  7 19:29:43 2023 GMT
        Subject: CN=B2E81A44B01E447F6F684CE51D5ED1AD513383A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:67:a9:65:cd:b1:ed:5e:32:e5:1d:e0:5a:9e:
                    b3:0d:5c:c3:11:89:17:a2:b1:9a:65:c4:3f:25:c9:
                    df:81:08:e8:bd:58:73:bd:11:df:48:f7:5a:33:57:
                    15:05:f9:5a:52:47:d3:8e:72:27:7c:4f:9c:47:20:
                    ae:b6:ad:66:6a:05:bd:e7:b7:09:43:cd:07:d3:5a:
                    59:4e:fe:15:99:43:47:ae:1d:35:49:3f:c0:be:50:
                    7a:17:c8:f2:83:84:94:6b:37:67:0d:15:da:c3:7f:
                    1d:18:3f:7b:fb:52:3d:7e:0f:7a:10:51:e5:59:8e:
                    38:c0:98:f5:37:60:72:46:6f:f2:79:a8:97:1f:94:
                    a1:ab:1d:33:fa:6e:15:5a:db:6e:58:3d:16:11:d8:
                    0f:53:30:55:f4:85:b6:7e:5e:81:0e:55:1f:38:c2:
                    7c:85:97:c3:f0:56:41:40:61:37:db:ee:1e:00:5c:
                    9b:f4:14:5a:67:ec:05:82:7d:3d:80:c4:49:74:dd:
                    c6:98:2d:16:c8:77:fb:d9:a9:b1:27:3a:3f:c7:91:
                    73:17:75:fd:51:73:b7:ce:fe:c5:16:bf:0a:f3:ca:
                    8f:de:46:02:82:d8:f0:a8:27:cc:42:5e:05:00:e4:
                    f8:83:82:7b:47:f3:c3:9c:80:10:0a:65:fb:81:30:
                    26:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E8:1A:44:B0:1E:44:7F:6F:68:4C:E5:1D:5E:D1:AD:51:33:83:A3
            X509v3 Authority Key Identifier:
                keyid:A0:BE:E1:5B:C0:7A:44:1D:90:85:F6:48:D6:43:4C:33:B0:E7:CC:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/0/A0BEE15BC07A441D9085F648D6434C33B0E7CC70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0BEE15BC07A441D9085F648D6434C33B0E7CC70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/0/323830343a346638343a3a2f33322d3334203d3e20323638333331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f84::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:7a:3d:54:9e:fe:06:3d:c5:59:38:d1:0d:be:87:a3:91:27:
         fc:ea:30:cb:49:fa:f7:92:f5:c2:f8:3e:15:72:e1:70:49:bb:
         1f:53:61:01:71:1e:f3:58:8b:ef:81:14:87:79:51:d4:91:ca:
         f9:76:be:62:01:20:e9:21:27:f8:c9:58:31:78:54:b6:4b:c6:
         4a:9e:a3:26:5e:83:69:2c:db:a7:7d:f4:61:f5:06:c1:8e:31:
         4c:79:7a:9a:34:bf:37:b2:68:db:83:ec:4e:fd:9a:37:1d:45:
         45:31:7b:1c:34:55:db:13:00:8b:11:85:42:98:57:a3:c9:45:
         a3:19:9b:e5:7a:b5:ce:1c:88:53:eb:ce:08:04:82:54:ed:d5:
         8d:99:fe:a4:ea:25:ec:a6:1c:5c:5d:3f:30:47:c0:9e:15:fe:
         36:37:98:13:73:de:8f:3f:99:e2:46:37:b3:ac:79:8b:0f:17:
         73:9a:b4:c2:8b:c3:c3:f3:6b:9c:76:81:71:53:c2:80:76:80:
         7f:04:3f:09:80:6e:6f:b3:f0:ca:65:8c:6c:45:4c:e3:e4:0e:
         ed:53:7e:63:24:67:9e:d4:b7:4d:50:d8:75:c4:28:d5:32:99:
         17:84:3e:a4:5c:cc:4f:f1:3f:c4:d6:f7:25:de:a8:26:39:1f:
         03:6c:fc:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:34 2024 by rpki-client on console-ams.rpki-client.org