Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/323830343a356265383a3a2f33352d3335203d3e20323638383736.roa
File:                     323830343a356265383a3a2f33352d3335203d3e20323638383736.roa (raw, json)
Hash identifier:          ZacRaLrbbtzlrE+EaGB3/VvHXbv0A3cIjqRejAQZxnk=
Subject key identifier:   A1:C1:54:C4:A9:3B:8C:1F:07:FB:F0:49:86:F4:BB:63:26:80:CF:16
Certificate issuer:       /CN=1EE40DDFB122A5498DB80BFF1AB6F5531151CE5D
Certificate serial:       49D0B83EC9C343B91BBB4381814EF540302FDAB5
Authority key identifier: 1E:E4:0D:DF:B1:22:A5:49:8D:B8:0B:FF:1A:B6:F5:53:11:51:CE:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1EE40DDFB122A5498DB80BFF1AB6F5531151CE5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/323830343a356265383a3a2f33352d3335203d3e20323638383736.roa
Signing time:             Wed 01 Mar 2023 10:42:57 +0000
ROA not before:           Wed 01 Mar 2023 10:37:57 +0000
ROA not after:            Wed 28 Feb 2024 10:42:57 +0000
asID:                     268876
IP address blocks:        2804:5be8::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:d0:b8:3e:c9:c3:43:b9:1b:bb:43:81:81:4e:f5:40:30:2f:da:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EE40DDFB122A5498DB80BFF1AB6F5531151CE5D
        Validity
            Not Before: Mar  1 10:37:57 2023 GMT
            Not After : Feb 28 10:42:57 2024 GMT
        Subject: CN=A1C154C4A93B8C1F07FBF04986F4BB632680CF16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fd:5b:3c:0f:03:fb:49:6e:1e:6e:80:b6:c3:
                    a6:bf:de:be:07:d7:d6:01:94:8a:bf:d0:bc:84:31:
                    1a:ea:84:cf:f8:4a:5c:08:2f:e4:01:ba:ad:67:3c:
                    66:90:c7:ae:f6:35:0e:8d:ba:48:aa:7a:0f:41:f9:
                    23:05:f5:99:86:43:79:56:6a:3f:95:12:04:00:1b:
                    40:db:d5:1c:bb:20:5e:cf:68:82:07:11:42:c5:4d:
                    a8:b2:1d:1e:f5:ec:61:a5:05:56:59:36:66:64:31:
                    69:83:35:44:f9:16:5a:af:a3:c9:a3:76:23:0b:b2:
                    b0:2f:33:7c:c8:9e:33:16:69:fc:1b:ec:af:04:60:
                    13:1b:43:09:24:ee:3f:64:6c:f0:f0:76:ec:bb:cf:
                    00:49:24:00:6d:74:fc:41:91:41:7a:46:f8:55:43:
                    0d:df:b1:de:84:7a:20:c1:07:ae:34:e5:e3:ee:fd:
                    88:97:6b:a5:a8:2e:d5:07:bb:df:b3:bf:df:72:01:
                    78:8a:eb:22:79:ee:ee:97:dd:7c:77:d6:2d:ae:91:
                    ed:6a:cb:65:c7:6e:d4:a1:26:f1:a4:d8:2d:ba:40:
                    1a:34:f9:e6:67:27:84:b5:09:e8:b7:ca:b1:ea:6b:
                    ce:72:dc:f8:ca:69:e2:56:f9:45:30:3d:ca:61:13:
                    03:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C1:54:C4:A9:3B:8C:1F:07:FB:F0:49:86:F4:BB:63:26:80:CF:16
            X509v3 Authority Key Identifier:
                keyid:1E:E4:0D:DF:B1:22:A5:49:8D:B8:0B:FF:1A:B6:F5:53:11:51:CE:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/1EE40DDFB122A5498DB80BFF1AB6F5531151CE5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1EE40DDFB122A5498DB80BFF1AB6F5531151CE5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/323830343a356265383a3a2f33352d3335203d3e20323638383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5be8::/35

    Signature Algorithm: sha256WithRSAEncryption
         5c:55:e7:f3:d4:2e:c7:5c:45:53:60:42:99:d2:f5:ff:8c:a8:
         3b:21:b2:b1:24:96:ac:8a:7d:83:ab:a4:92:7c:14:98:37:9c:
         dc:81:86:ef:67:62:c0:9f:d2:31:5a:7e:11:17:29:54:4e:96:
         d3:cd:0f:22:d4:26:aa:ed:fc:a0:7e:89:80:0e:ca:22:74:10:
         6a:99:64:f7:a9:2e:85:87:12:02:de:08:b1:5f:0e:6c:2a:ce:
         ae:e9:f5:03:24:70:e5:6c:23:08:fe:44:90:78:ef:b9:51:5e:
         0b:91:ff:68:c3:04:cc:d9:7b:44:d0:8b:5c:05:26:72:5c:5c:
         92:fa:68:3b:f9:c4:42:66:17:b1:0b:f1:ce:42:b7:83:ec:e0:
         e8:e6:dd:9f:1e:cb:0b:45:73:39:d2:c8:1a:3c:2a:9c:8e:d5:
         00:99:a9:60:c3:52:13:06:f5:ee:e7:12:1e:93:b7:e3:d3:00:
         f1:7e:26:40:f8:1d:50:bd:bf:85:d1:bf:b4:90:3d:e2:f2:cc:
         d5:c3:4b:55:cc:d3:f7:f2:17:cb:ed:1f:1d:9f:93:a2:60:a6:
         2c:aa:08:db:06:79:8d:e4:50:d3:f7:e1:d4:df:eb:c7:04:df:
         ba:f7:56:53:47:c6:71:b8:78:25:44:ea:d6:72:74:52:25:79:
         56:36:af:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:34 2024 by rpki-client on console-ams.rpki-client.org