Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/1/323830343a333364633a3a2f33322d313238203d3e20323635343231.roa
File:                     323830343a333364633a3a2f33322d313238203d3e20323635343231.roa (raw, json)
Hash identifier:          UynviTONhHaPn2dEE98K7m24GGG5eOeegIi3s0GQGhs=
Subject key identifier:   9C:8B:BF:9E:77:31:A9:D6:40:84:7A:69:89:02:D9:6B:7A:2D:F9:FC
Certificate issuer:       /CN=A32238AE21BAC9DB953C83E0682468A89EC68D5F
Certificate serial:       5E107AD910987AEB799E8B4D7B5B82A2B5AAB0A6
Authority key identifier: A3:22:38:AE:21:BA:C9:DB:95:3C:83:E0:68:24:68:A8:9E:C6:8D:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A32238AE21BAC9DB953C83E0682468A89EC68D5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/1/323830343a333364633a3a2f33322d313238203d3e20323635343231.roa
Signing time:             Mon 30 Jan 2023 19:59:18 +0000
ROA not before:           Mon 30 Jan 2023 19:54:18 +0000
ROA not after:            Mon 29 Jan 2024 19:59:18 +0000
asID:                     265421
IP address blocks:        2804:33dc::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:10:7a:d9:10:98:7a:eb:79:9e:8b:4d:7b:5b:82:a2:b5:aa:b0:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A32238AE21BAC9DB953C83E0682468A89EC68D5F
        Validity
            Not Before: Jan 30 19:54:18 2023 GMT
            Not After : Jan 29 19:59:18 2024 GMT
        Subject: CN=9C8BBF9E7731A9D640847A698902D96B7A2DF9FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e2:65:80:59:dd:31:f1:9d:9f:67:a3:07:d4:
                    ab:d8:d1:ea:51:7b:53:69:22:2c:e0:93:2d:6d:83:
                    36:aa:e6:83:3c:2e:13:81:50:75:9d:00:f7:f3:ac:
                    50:71:41:8a:4d:16:28:0d:2e:74:0e:ad:87:4b:10:
                    68:9e:2d:ec:f4:c8:ad:ba:ba:05:46:60:80:dc:2e:
                    d8:f5:57:ae:5a:0e:76:cc:27:de:f3:55:18:60:2d:
                    ec:e0:14:06:b2:49:b7:59:7d:ba:9c:49:b7:50:c2:
                    e4:4b:3e:48:51:4e:e7:b4:bb:9a:87:d5:15:08:6d:
                    c1:57:9a:46:4e:6a:da:ea:cb:7c:45:03:21:c7:6a:
                    58:af:67:45:8a:62:58:da:73:35:ab:d7:bc:45:f5:
                    56:35:7c:a9:67:a5:c3:d7:c3:d6:32:79:8a:bf:1e:
                    48:de:d9:58:6c:40:d1:ec:c9:3e:27:f1:da:bf:25:
                    fb:82:ac:fa:1f:db:e2:ca:50:f9:47:5f:0c:f8:ba:
                    66:54:e3:11:17:b5:0f:4d:7e:10:aa:0e:19:dd:77:
                    47:45:87:c9:ad:64:81:90:49:07:3c:c0:47:af:f2:
                    71:44:3f:e7:c2:a7:28:08:a2:2c:a0:af:3e:7a:1c:
                    99:04:77:bd:7b:cb:cd:0f:4d:bb:55:ef:61:07:db:
                    3a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:8B:BF:9E:77:31:A9:D6:40:84:7A:69:89:02:D9:6B:7A:2D:F9:FC
            X509v3 Authority Key Identifier:
                keyid:A3:22:38:AE:21:BA:C9:DB:95:3C:83:E0:68:24:68:A8:9E:C6:8D:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/1/A32238AE21BAC9DB953C83E0682468A89EC68D5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A32238AE21BAC9DB953C83E0682468A89EC68D5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/1/323830343a333364633a3a2f33322d313238203d3e20323635343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:c1:d4:dc:cb:2a:de:a1:cb:58:03:c8:62:48:1f:76:88:a1:
         4f:4b:c5:ff:4e:c8:8a:04:f2:98:a1:ac:73:be:c0:6e:9e:12:
         12:2e:69:b9:3e:7b:69:4a:3d:f6:9f:4c:7c:5d:dc:c1:40:c4:
         29:48:07:55:a3:90:49:2f:65:5f:b6:c6:6d:71:af:15:e7:85:
         f5:cf:42:14:75:25:5e:aa:58:ac:16:8c:bc:80:c6:b5:23:b4:
         6d:37:ff:b9:5d:ae:72:71:5a:b8:9e:f1:57:b4:04:d4:83:6c:
         75:18:3b:9f:0d:3c:75:0c:ff:2f:ed:4a:70:f7:46:bc:df:e7:
         1f:db:b4:ad:23:60:d9:59:5d:04:65:22:d2:3a:f1:fb:57:1e:
         08:ed:48:33:b8:bf:31:c1:c4:06:66:33:0e:ae:f5:c4:5b:eb:
         69:31:13:a0:3a:dd:31:56:c3:42:43:2c:2f:a9:a1:58:aa:81:
         29:38:84:0b:8d:51:50:9e:2b:00:06:87:f4:94:76:8f:ef:05:
         a5:af:f2:a1:00:da:d9:48:27:c2:f6:9e:14:cc:92:6d:26:19:
         36:53:a4:98:e2:bb:5c:37:54:00:57:54:a7:b3:26:5e:4f:de:
         f5:4e:f9:e1:d2:d5:6a:5f:a4:58:fb:21:c0:d9:79:d4:e7:1a:
         e3:83:e9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org