Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/323830343a6532343a666666313a3a2f34382d3438203d3e20323632343137.roa
File:                     323830343a6532343a666666313a3a2f34382d3438203d3e20323632343137.roa (raw, json)
Hash identifier:          k5qXhD/OjWmPc76VAR6s9VwgROKdiVgAeH18iatWyFg=
Subject key identifier:   3D:29:F5:13:1F:F8:90:77:CE:6A:82:8F:AB:9E:37:C3:EC:A5:A3:6B
Certificate issuer:       /CN=97A4AF5A5DAA9301E561374F38352591E093C270
Certificate serial:       4394D432EE8D426E4CEE73A4192F7DC6153C4CA0
Authority key identifier: 97:A4:AF:5A:5D:AA:93:01:E5:61:37:4F:38:35:25:91:E0:93:C2:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97A4AF5A5DAA9301E561374F38352591E093C270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/323830343a6532343a666666313a3a2f34382d3438203d3e20323632343137.roa
Signing time:             Mon 11 Dec 2023 17:36:33 +0000
ROA not before:           Mon 11 Dec 2023 17:31:33 +0000
ROA not after:            Mon 09 Dec 2024 17:36:33 +0000
asID:                     262417
IP address blocks:        2804:e24:fff1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:94:d4:32:ee:8d:42:6e:4c:ee:73:a4:19:2f:7d:c6:15:3c:4c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97A4AF5A5DAA9301E561374F38352591E093C270
        Validity
            Not Before: Dec 11 17:31:33 2023 GMT
            Not After : Dec  9 17:36:33 2024 GMT
        Subject: CN=3D29F5131FF89077CE6A828FAB9E37C3ECA5A36B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d4:b5:80:42:2a:36:01:fa:71:b0:60:55:24:
                    c9:48:cc:f7:aa:cd:53:ea:86:12:ff:8c:52:c1:53:
                    9e:7a:d5:40:90:32:a9:47:6f:4b:3e:5d:14:8d:22:
                    e8:7f:a7:8e:fa:ad:74:59:b2:7a:8a:04:a8:f4:a5:
                    8f:08:35:d3:4b:37:38:6d:28:4f:a7:a1:d2:a8:78:
                    f4:0b:81:0c:fa:8c:02:36:e5:24:eb:cc:ed:cc:3a:
                    8d:0a:51:b1:84:f3:53:ac:f4:90:bd:ed:49:c5:27:
                    04:bf:f5:c2:ec:cf:42:dc:fd:ec:65:02:9e:79:08:
                    28:ff:5e:5d:d9:78:7b:db:5d:d0:b4:02:ab:1d:6d:
                    8c:37:59:52:02:dc:de:17:35:54:c2:57:84:a2:a1:
                    91:65:3d:72:fb:f2:5c:1d:7a:4e:34:92:0c:67:7f:
                    db:03:6d:f6:b1:7b:3e:78:2b:15:c7:91:2f:dd:ac:
                    7f:f6:cb:ff:db:3f:a9:62:b9:59:1a:3d:dd:50:41:
                    e8:ba:a0:21:53:77:3f:48:24:bd:e7:3d:70:ac:f5:
                    ab:a5:41:85:2a:0e:1f:cd:d8:b4:d0:48:a9:ee:68:
                    7b:a2:34:da:f4:63:1a:55:f3:d4:ad:df:69:15:a1:
                    8b:28:49:97:a5:e6:8a:e8:bf:27:04:54:c6:90:00:
                    09:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:29:F5:13:1F:F8:90:77:CE:6A:82:8F:AB:9E:37:C3:EC:A5:A3:6B
            X509v3 Authority Key Identifier:
                keyid:97:A4:AF:5A:5D:AA:93:01:E5:61:37:4F:38:35:25:91:E0:93:C2:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/97A4AF5A5DAA9301E561374F38352591E093C270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97A4AF5A5DAA9301E561374F38352591E093C270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/323830343a6532343a666666313a3a2f34382d3438203d3e20323632343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e24:fff1::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:ba:cb:8f:01:c8:78:43:f2:90:db:9c:95:76:54:ff:04:b9:
         e0:0f:2f:4a:b4:d3:31:b0:eb:1c:ca:c4:fb:a9:b1:60:b0:4a:
         d0:a4:7b:fd:29:1e:db:16:48:5b:6b:49:f1:08:d3:d7:aa:42:
         6e:ee:83:3c:01:32:15:1e:7e:57:92:cd:f6:b3:95:ff:41:b3:
         be:d4:f8:6d:88:16:cc:da:be:66:9c:b4:9e:61:c4:96:d4:82:
         21:1c:a8:d0:a9:83:79:40:f5:ec:65:bc:2e:cb:f8:c3:61:c3:
         40:58:eb:2c:b4:f5:9e:34:fb:32:32:53:fe:44:4e:08:f4:1b:
         9e:a4:ff:4e:a1:20:c0:a3:be:79:59:68:99:f9:16:37:a4:4a:
         78:aa:7d:87:8d:dc:74:35:ac:e2:cc:6d:8c:2f:26:ef:4f:45:
         4b:7a:91:fb:49:45:c4:6f:f1:b5:0e:64:71:ce:8b:f5:25:79:
         25:d9:1b:eb:f4:ce:27:0d:c7:b1:e4:d6:f7:93:67:c9:5a:b3:
         7b:43:a9:b6:4e:0e:ac:0d:3b:48:ef:85:3c:8c:15:dc:68:4a:
         e9:a6:82:7c:d2:d1:84:5d:c4:f8:2e:81:6e:ee:c6:69:f3:bd:
         d2:4e:8c:d9:21:28:4b:dd:95:be:d0:21:69:a1:44:53:30:f3:
         67:6c:b7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org