Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/323830343a3338383a3a2f33302d3438203d3e203232303835.roa
File:                     323830343a3338383a3a2f33302d3438203d3e203232303835.roa (raw, json)
Hash identifier:          mznw2N59IFEUocXk6DkOeWAN6sQOKPH2uZuDaCLu09o=
Subject key identifier:   6F:E0:17:D7:05:0A:54:91:3E:D2:AD:DC:8E:FB:C6:FC:D3:7A:F7:B9
Certificate issuer:       /CN=D215D0A29BA0041EB88859E15A706C978B675469
Certificate serial:       1084EF07C605DD389AD07AAA0E4E182EC70988D5
Authority key identifier: D2:15:D0:A2:9B:A0:04:1E:B8:88:59:E1:5A:70:6C:97:8B:67:54:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D215D0A29BA0041EB88859E15A706C978B675469.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/323830343a3338383a3a2f33302d3438203d3e203232303835.roa
Signing time:             Tue 02 Jan 2024 19:02:24 +0000
ROA not before:           Tue 02 Jan 2024 18:57:24 +0000
ROA not after:            Tue 31 Dec 2024 19:02:24 +0000
asID:                     22085
IP address blocks:        2804:388::/30 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:84:ef:07:c6:05:dd:38:9a:d0:7a:aa:0e:4e:18:2e:c7:09:88:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D215D0A29BA0041EB88859E15A706C978B675469
        Validity
            Not Before: Jan  2 18:57:24 2024 GMT
            Not After : Dec 31 19:02:24 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:47:9f:30:7f:8c:bd:52:a9:05:02:1a:e4:e8:
                    f7:4e:4e:85:d2:04:91:79:6a:94:68:ff:a5:ec:99:
                    0c:9a:1f:01:c7:d5:b2:0a:15:b1:dc:79:de:8b:17:
                    08:9f:f1:fa:ad:bb:09:16:31:77:21:fd:7d:9f:4e:
                    5b:32:12:82:4f:56:2c:45:e7:5c:98:50:43:69:14:
                    d9:da:a9:f8:3d:3d:5b:ee:81:97:dc:fc:28:a7:03:
                    f7:b5:8f:38:5a:9f:79:f5:8d:d4:4a:8c:15:07:96:
                    ed:de:a0:16:2a:cd:94:2e:08:34:a1:a5:62:56:36:
                    dd:30:76:f4:8d:91:fe:46:cf:4c:ed:39:ce:0b:3e:
                    b4:2c:ea:e6:37:4c:41:5a:00:28:eb:3f:35:35:60:
                    e2:16:d5:6d:5f:8b:de:c0:1b:dc:13:19:54:1e:85:
                    3d:b1:ad:9a:05:74:db:9f:bc:66:00:cf:ca:2a:f2:
                    96:de:fd:35:af:de:81:73:a9:59:d3:07:db:94:13:
                    3d:53:6e:f3:b4:a0:4f:35:da:23:17:81:0b:9f:3d:
                    d1:05:e3:d7:67:25:3d:95:d8:e9:cd:13:b8:e1:c6:
                    40:2b:10:ce:40:aa:37:84:5f:03:aa:6c:d9:6e:6d:
                    df:28:ad:59:09:59:df:18:0a:34:9c:0f:45:57:57:
                    d6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E0:17:D7:05:0A:54:91:3E:D2:AD:DC:8E:FB:C6:FC:D3:7A:F7:B9
            X509v3 Authority Key Identifier:
                keyid:D2:15:D0:A2:9B:A0:04:1E:B8:88:59:E1:5A:70:6C:97:8B:67:54:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/D215D0A29BA0041EB88859E15A706C978B675469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D215D0A29BA0041EB88859E15A706C978B675469.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/323830343a3338383a3a2f33302d3438203d3e203232303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:388::/30

    Signature Algorithm: sha256WithRSAEncryption
         5e:0e:90:79:7e:43:f7:87:dd:41:3e:9e:ce:ce:a9:4f:08:18:
         a3:d2:32:35:3b:c7:da:3a:2a:6d:35:b4:3f:f1:a3:98:91:db:
         15:87:e3:cb:8c:23:b9:21:04:27:65:c6:55:0f:56:17:e8:42:
         a4:65:85:4d:45:30:d0:77:91:81:b0:f4:41:e8:16:b8:e2:8b:
         f9:13:39:13:89:18:76:d1:03:0a:0a:4f:2d:0a:f6:c7:e1:1d:
         f3:52:c2:49:c9:47:da:ca:d6:cd:ca:64:5b:35:38:c7:a4:66:
         18:2f:81:6f:6d:11:b9:22:a8:51:9e:74:c9:62:7d:70:ba:0f:
         97:2d:45:5a:31:3d:9b:a8:2b:7d:63:c9:c2:05:00:d9:d4:2a:
         05:29:5b:47:a5:8e:a0:23:38:91:b2:b2:fd:10:ac:c7:70:4b:
         c9:f5:a6:23:4f:0c:52:dd:7b:a9:71:2c:ac:cc:ef:8f:37:04:
         5a:11:66:21:7f:b3:80:17:c3:ad:91:6f:9d:42:cf:20:17:eb:
         f4:75:92:b2:a1:4f:7a:59:af:ae:27:3b:1f:53:3b:53:14:2d:
         7f:62:eb:99:f2:93:5d:e6:44:cf:05:d5:0a:f5:0f:0f:78:a9:
         ff:84:39:dc:e7:e7:9b:b6:02:85:c5:84:f5:a8:7e:40:5d:ea:
         45:52:99:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org