Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/0/323830343a376264633a3a2f33322d3438203d3e20323731343539.roa
File:                     323830343a376264633a3a2f33322d3438203d3e20323731343539.roa (raw, json)
Hash identifier:          gblhlxHxBLqUx6JkYCpSp1tYXueO5n7y7M/T7PLY+IQ=
Subject key identifier:   67:B6:61:60:5A:E5:60:95:4D:EB:90:31:D2:E3:15:DD:CE:EC:9B:2F
Certificate issuer:       /CN=E83D57ED19F07A540C6CC16DC286BB69F1243A1D
Certificate serial:       4020410AE2302D2B78702A764BB6A9B339235238
Authority key identifier: E8:3D:57:ED:19:F0:7A:54:0C:6C:C1:6D:C2:86:BB:69:F1:24:3A:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E83D57ED19F07A540C6CC16DC286BB69F1243A1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/0/323830343a376264633a3a2f33322d3438203d3e20323731343539.roa
Signing time:             Fri 25 Feb 2022 17:36:38 +0000
ROA not before:           Fri 25 Feb 2022 17:31:38 +0000
ROA not after:            Fri 24 Feb 2023 17:36:38 +0000
asID:                     271459
IP address blocks:        2804:7bdc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:20:41:0a:e2:30:2d:2b:78:70:2a:76:4b:b6:a9:b3:39:23:52:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E83D57ED19F07A540C6CC16DC286BB69F1243A1D
        Validity
            Not Before: Feb 25 17:31:38 2022 GMT
            Not After : Feb 24 17:36:38 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:dc:cc:a0:60:2e:80:84:3a:9d:6e:b5:e2:fe:
                    47:6b:41:28:1e:ef:0c:bf:30:41:16:85:ba:12:be:
                    e7:85:d9:d2:fb:2f:01:8e:7a:09:01:bf:23:eb:8b:
                    7b:9a:10:93:fb:fb:16:17:90:a7:d3:bb:be:e1:47:
                    ae:98:e5:02:b7:ac:0f:96:5c:07:ea:78:67:04:a0:
                    fe:b6:37:13:1d:04:e6:4c:8f:14:d9:6a:af:9e:9c:
                    f2:3b:9f:50:10:51:f3:ae:42:ba:75:db:f4:8a:a2:
                    c6:b4:ed:82:fe:e2:23:16:37:c9:9a:aa:61:92:5e:
                    ca:06:2f:0f:37:6a:b5:6c:ee:ff:6e:26:55:6d:c0:
                    7f:73:ef:b4:79:29:aa:f5:fd:7e:f8:dd:ea:66:1f:
                    1f:03:91:38:69:50:94:05:62:83:ab:bb:e6:c2:43:
                    62:2d:d8:34:44:ba:e3:cb:57:a1:39:08:47:c7:6a:
                    9d:78:8c:8f:92:7f:b2:dc:8d:1b:7f:48:e4:d0:5b:
                    f6:8f:c5:8b:bc:03:b1:dd:d9:49:05:2c:da:28:70:
                    13:0f:42:4c:c7:40:30:aa:ba:85:54:35:dd:83:d8:
                    0c:a5:b3:70:7f:85:d7:ed:86:42:31:22:b6:29:18:
                    d2:e2:44:ff:55:cb:21:8e:f9:d6:53:db:10:de:9b:
                    c7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B6:61:60:5A:E5:60:95:4D:EB:90:31:D2:E3:15:DD:CE:EC:9B:2F
            X509v3 Authority Key Identifier:
                keyid:E8:3D:57:ED:19:F0:7A:54:0C:6C:C1:6D:C2:86:BB:69:F1:24:3A:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/0/E83D57ED19F07A540C6CC16DC286BB69F1243A1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E83D57ED19F07A540C6CC16DC286BB69F1243A1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/0/323830343a376264633a3a2f33322d3438203d3e20323731343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bdc::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:68:b5:1d:4e:ab:5b:ac:e8:94:2b:db:58:ba:b1:c7:da:04:
         02:31:a9:2d:7a:25:df:0d:f1:d2:df:44:5d:b2:ea:1a:53:da:
         1c:68:ed:ca:21:8b:c7:d6:f0:70:80:c7:8b:e3:5e:15:8c:ad:
         7e:5b:a4:15:da:99:af:04:20:05:fb:41:34:87:56:31:f8:9b:
         ce:33:43:e5:ae:6d:ab:aa:7a:00:3c:99:a9:84:9c:33:5f:62:
         cf:43:26:c4:85:72:c8:b7:2a:fb:08:5f:29:89:22:c5:78:18:
         dc:cf:54:73:60:68:9b:5c:e7:50:0e:87:e6:ae:47:f2:b0:fe:
         99:9a:fd:26:98:41:fd:56:d1:d1:91:59:aa:01:e8:f2:37:a6:
         dd:4d:93:18:c3:91:eb:b7:02:d8:e7:c1:6e:e5:06:da:8b:cd:
         21:5e:ff:9d:19:02:35:e2:db:c7:34:fb:c9:3f:85:20:ed:2f:
         fd:31:1d:c3:42:3f:13:82:eb:a7:27:93:53:48:6d:cc:77:bb:
         d6:9c:76:45:bd:f3:f7:f8:a4:31:2f:56:af:94:82:46:a2:09:
         d7:73:39:01:35:f9:53:1a:2d:49:1e:de:b8:4e:c1:d6:97:f5:
         59:47:cd:dd:0d:39:21:a4:7f:72:2f:e3:34:d9:4f:44:02:87:
         23:1f:e3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org