Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/323830343a343431633a3a2f33332d3333203d3e20323637363033.roa
File:                     323830343a343431633a3a2f33332d3333203d3e20323637363033.roa (raw, json)
Hash identifier:          vBR9DewKTjWmenOSQ7OHrkBVpDpJ8DR3e7VF7DGYKNw=
Subject key identifier:   AA:6A:C7:DA:B9:1A:11:75:F9:93:30:53:05:E5:4F:96:9F:5F:8A:A2
Certificate issuer:       /CN=7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650
Certificate serial:       5656C43CCE14C39AAF7DB033273E73DF23A042E9
Authority key identifier: 7D:5C:5D:D7:9B:A6:F9:B1:49:70:AA:D4:4F:78:6B:4D:FA:D8:96:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/323830343a343431633a3a2f33332d3333203d3e20323637363033.roa
Signing time:             Wed 20 Sep 2023 18:03:34 +0000
ROA not before:           Wed 20 Sep 2023 17:58:34 +0000
ROA not after:            Wed 18 Sep 2024 18:03:34 +0000
asID:                     267603
IP address blocks:        2804:441c::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:56:c4:3c:ce:14:c3:9a:af:7d:b0:33:27:3e:73:df:23:a0:42:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650
        Validity
            Not Before: Sep 20 17:58:34 2023 GMT
            Not After : Sep 18 18:03:34 2024 GMT
        Subject: CN=AA6AC7DAB91A1175F993305305E54F969F5F8AA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:86:d0:af:94:9a:22:d1:e9:ae:9c:ca:46:bf:
                    b2:44:4d:62:b2:97:98:45:2d:01:bb:1b:1c:5d:94:
                    63:96:ec:cd:ff:f8:fd:78:d6:0d:c7:4c:b1:64:9c:
                    c8:bb:f0:d3:d1:58:20:b9:48:e8:85:bb:80:bc:12:
                    ba:f6:15:bb:6b:52:73:9c:2c:6b:d6:e9:39:06:d2:
                    68:93:c0:bf:cc:53:e6:4a:b3:6a:97:a6:42:08:bd:
                    4a:62:86:45:e2:8d:04:be:e2:91:c3:39:3f:63:cc:
                    2d:aa:50:8f:a7:80:73:b1:3c:0b:f5:e1:2a:ce:ec:
                    31:6f:0d:6e:61:98:01:95:ea:bb:6c:d9:bb:2d:ad:
                    97:5e:9c:eb:f6:80:d5:f3:a0:6b:57:41:24:61:67:
                    21:22:c2:7e:97:05:02:ae:6c:ec:5e:29:9e:a6:05:
                    c0:2e:38:50:9b:53:a1:06:5c:ca:75:6a:36:2e:3c:
                    a4:2d:1e:79:ec:38:5c:03:6e:84:39:7e:05:91:10:
                    87:da:9b:4f:6d:16:f0:36:e4:26:34:9c:b0:a5:25:
                    c3:59:20:ce:03:63:eb:39:9e:aa:20:2c:ca:46:cb:
                    00:e2:f0:56:ba:88:4f:06:60:bf:15:53:c9:03:36:
                    06:b1:bf:57:f5:d6:4e:49:6b:40:ce:ce:45:d8:1e:
                    94:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:6A:C7:DA:B9:1A:11:75:F9:93:30:53:05:E5:4F:96:9F:5F:8A:A2
            X509v3 Authority Key Identifier:
                keyid:7D:5C:5D:D7:9B:A6:F9:B1:49:70:AA:D4:4F:78:6B:4D:FA:D8:96:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/323830343a343431633a3a2f33332d3333203d3e20323637363033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:441c::/33

    Signature Algorithm: sha256WithRSAEncryption
         98:98:f0:4d:5d:29:a3:ae:be:48:51:7e:44:d6:af:9f:e9:da:
         9d:56:0b:03:f3:34:66:0c:44:2b:f4:87:93:41:b4:c9:a6:f5:
         90:d7:4e:98:39:e5:60:ab:ae:de:d6:e7:61:2f:66:d1:2f:2a:
         75:c5:4f:5f:57:8c:ea:b2:e6:3e:99:8d:f6:b6:4f:36:88:ac:
         25:f6:ec:99:cc:3a:bc:f3:10:16:dd:35:a5:2a:15:ed:0c:4e:
         19:ec:a5:e8:0d:34:9d:46:cf:3b:b5:6e:8f:98:a7:a9:ef:de:
         ec:74:03:5f:db:91:aa:d6:07:dd:76:24:eb:c6:fd:af:fe:a4:
         52:e7:88:7b:62:22:46:b4:d1:9c:ce:0e:f8:91:c3:0f:34:98:
         83:51:f9:7f:4a:1c:3f:fa:7b:6f:14:5d:76:34:53:a4:68:b1:
         62:83:41:4f:be:53:e0:f2:10:27:e1:ab:2b:5b:5d:0a:85:2b:
         b5:97:4d:d7:67:ba:62:5e:e3:1a:7e:9a:62:24:88:f5:dc:8a:
         66:69:50:f1:6f:ad:56:34:de:66:66:08:c1:bf:9d:57:e0:77:
         59:63:8d:c2:47:a8:e1:7c:05:ed:7b:f1:31:a5:7e:3b:1a:7a:
         c8:b9:b0:f6:1f:ab:e2:54:35:d0:88:8e:88:1e:c1:d4:95:07:
         b9:f4:59:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org