Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/323830343a3338383a3a2f33302d3330203d3e203232303835.roa
File:                     323830343a3338383a3a2f33302d3330203d3e203232303835.roa (raw, json)
Hash identifier:          7Y3fzTSdbOLwloKbmcN0u/iwSZuDPfhRMpbMCzRZZiw=
Subject key identifier:   A4:73:37:24:AC:2F:35:1A:D2:DB:75:21:4E:74:5D:D9:9E:42:42:4E
Certificate issuer:       /CN=D215D0A29BA0041EB88859E15A706C978B675469
Certificate serial:       1D48EE554389376F203F18E9A8F3F5ACB072E4C0
Authority key identifier: D2:15:D0:A2:9B:A0:04:1E:B8:88:59:E1:5A:70:6C:97:8B:67:54:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D215D0A29BA0041EB88859E15A706C978B675469.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/323830343a3338383a3a2f33302d3330203d3e203232303835.roa
Signing time:             Wed 15 Mar 2023 19:00:01 +0000
ROA not before:           Wed 15 Mar 2023 18:55:01 +0000
ROA not after:            Wed 13 Mar 2024 19:00:01 +0000
asID:                     22085
IP address blocks:        2804:388::/30 maxlen: 30

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:48:ee:55:43:89:37:6f:20:3f:18:e9:a8:f3:f5:ac:b0:72:e4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D215D0A29BA0041EB88859E15A706C978B675469
        Validity
            Not Before: Mar 15 18:55:01 2023 GMT
            Not After : Mar 13 19:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f6:57:73:6d:12:37:63:af:cb:b0:5c:b8:e3:
                    ad:b8:1a:95:3c:4d:84:4f:cd:cf:25:fb:db:74:65:
                    23:86:f0:43:b8:ab:84:b9:f5:ac:c8:03:d8:76:d5:
                    53:1d:f4:3d:b5:f2:aa:75:b0:75:2e:87:7f:8a:21:
                    92:f1:29:ed:19:dd:ad:45:73:b8:34:c6:95:3c:7a:
                    ff:52:92:12:ec:3c:d9:62:4d:70:33:cb:5d:1e:85:
                    0d:15:fe:20:5b:d9:8e:3a:3b:30:67:67:c9:2c:b6:
                    87:f2:97:d0:7e:5b:a1:be:7b:cf:42:b5:f1:ee:5d:
                    66:84:44:72:7e:40:1a:bf:28:aa:19:5f:a4:ca:2e:
                    f5:8f:73:69:30:cc:4d:df:56:b7:53:f3:7b:76:25:
                    10:71:0f:1d:cc:82:2e:2a:45:06:3b:66:fc:5f:cd:
                    b3:ff:d3:66:03:cc:32:7c:41:a1:2c:f2:b3:55:a0:
                    11:dc:a0:09:27:14:77:4d:21:b8:3b:d0:52:31:da:
                    8b:5f:ea:bc:3a:b3:1b:09:10:3a:ad:99:3b:5a:5a:
                    c5:64:38:6b:ce:df:51:25:24:02:c2:90:4f:32:98:
                    38:a0:63:4f:bc:6e:98:a9:eb:a1:2a:5f:35:5c:8a:
                    62:62:17:16:fb:77:bb:85:f5:49:cc:51:05:5a:ca:
                    65:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:73:37:24:AC:2F:35:1A:D2:DB:75:21:4E:74:5D:D9:9E:42:42:4E
            X509v3 Authority Key Identifier:
                keyid:D2:15:D0:A2:9B:A0:04:1E:B8:88:59:E1:5A:70:6C:97:8B:67:54:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/D215D0A29BA0041EB88859E15A706C978B675469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D215D0A29BA0041EB88859E15A706C978B675469.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/323830343a3338383a3a2f33302d3330203d3e203232303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:388::/30

    Signature Algorithm: sha256WithRSAEncryption
         7b:3a:d9:95:c1:18:43:72:97:60:25:7d:3a:6f:ed:f6:0c:62:
         ad:bb:c8:07:bb:e6:5e:01:c6:51:14:64:23:df:bf:47:22:79:
         d1:a1:3b:28:40:87:0a:d6:c9:10:c5:fd:06:70:32:b8:ea:4b:
         17:0c:53:f7:9b:0b:96:35:0a:c9:6d:4a:ee:b4:d9:e1:ab:7f:
         68:34:18:5d:11:b6:8b:ca:8f:53:9d:c6:79:08:8e:ff:03:4a:
         6e:4f:6e:cb:2b:f5:3b:a2:8e:fb:01:a3:df:80:7e:3c:15:aa:
         e4:2e:a7:d0:ed:cb:29:8b:a2:07:d5:6a:fd:ec:6b:89:de:e7:
         4d:6e:7d:af:e2:9f:36:d9:c6:69:66:c9:e9:27:e8:2f:7a:73:
         f1:d0:6e:0d:8f:e3:77:24:54:5e:70:3b:2e:c1:06:12:48:d7:
         d0:33:54:03:9a:83:28:3a:05:e7:ca:e7:f9:6e:b4:c7:b5:54:
         e7:95:84:66:db:7f:0e:4b:e2:0c:0c:01:c3:56:54:e3:46:97:
         28:61:2c:2e:98:53:a9:5d:e9:18:c1:fb:ae:bb:3f:e7:fe:63:
         56:c7:f5:8c:5f:9d:8d:a2:df:ae:cd:f9:98:ef:94:9d:55:bb:
         0f:67:36:55:a0:0e:82:73:e8:69:0a:42:fd:f2:e2:ce:74:b7:
         d6:26:36:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org