Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/0/323830343a343665633a3a2f33322d3438203d3e20323637303230.roa
File:                     323830343a343665633a3a2f33322d3438203d3e20323637303230.roa (raw, json)
Hash identifier:          nCctGd2DHm7fznpdMjmHzf8xI5OevNAPnGiG6WCUH9g=
Subject key identifier:   24:B1:FF:6F:79:0E:66:19:65:60:C2:6F:F7:79:80:BE:85:E7:0C:14
Certificate issuer:       /CN=CD6720E096E2B3B5875DEF1F65F6D97FBB565623
Certificate serial:       212EF4926C89C6BB7DF10E5066072A4A40EA7E29
Authority key identifier: CD:67:20:E0:96:E2:B3:B5:87:5D:EF:1F:65:F6:D9:7F:BB:56:56:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6720E096E2B3B5875DEF1F65F6D97FBB565623.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/0/323830343a343665633a3a2f33322d3438203d3e20323637303230.roa
Signing time:             Thu 08 Sep 2022 13:01:35 +0000
ROA not before:           Thu 08 Sep 2022 12:56:35 +0000
ROA not after:            Thu 07 Sep 2023 13:01:35 +0000
asID:                     267020
IP address blocks:        2804:46ec::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:2e:f4:92:6c:89:c6:bb:7d:f1:0e:50:66:07:2a:4a:40:ea:7e:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6720E096E2B3B5875DEF1F65F6D97FBB565623
        Validity
            Not Before: Sep  8 12:56:35 2022 GMT
            Not After : Sep  7 13:01:35 2023 GMT
        Subject: CN=24B1FF6F790E66196560C26FF77980BE85E70C14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d8:cc:dc:97:a3:d3:6f:4f:a3:8e:dc:5f:fe:
                    d5:30:69:8f:d9:67:68:bd:43:89:9f:77:70:97:72:
                    23:3b:73:c0:c0:72:5d:c9:b3:b4:26:c3:4b:c1:29:
                    d3:1b:20:0f:73:c6:d4:71:85:4b:3c:a3:ee:44:02:
                    25:9c:d2:4e:a3:68:f5:05:ec:2b:a9:fd:d4:01:8a:
                    0c:64:9e:ce:26:dd:8e:07:ab:cf:21:a6:a1:e0:3d:
                    40:25:0e:f2:5e:3e:b3:8c:4a:8e:93:25:24:a5:a7:
                    45:c9:c0:f9:c4:c6:4d:fe:36:25:e1:dc:7d:be:45:
                    c9:05:7f:cd:bd:86:03:49:20:5a:09:36:99:50:f2:
                    cf:1c:c3:78:84:6c:6d:fd:86:c6:f0:65:a7:07:69:
                    a3:be:a0:56:e9:f0:6d:f0:19:86:57:9c:4d:50:b1:
                    3e:40:75:e4:61:f7:e4:23:89:e5:fa:c2:e4:f9:3f:
                    89:d9:2b:47:ad:89:a7:06:9a:8f:75:c3:ad:2a:c5:
                    53:d2:10:f3:e0:d0:53:ef:10:e5:6f:34:47:25:1e:
                    86:63:16:e7:59:4f:ba:83:88:c3:80:a4:4b:73:ba:
                    cb:b2:8d:19:29:14:00:6a:5b:81:d4:56:15:34:86:
                    63:22:10:4e:93:99:27:81:a8:45:db:63:ff:4f:24:
                    e8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B1:FF:6F:79:0E:66:19:65:60:C2:6F:F7:79:80:BE:85:E7:0C:14
            X509v3 Authority Key Identifier:
                keyid:CD:67:20:E0:96:E2:B3:B5:87:5D:EF:1F:65:F6:D9:7F:BB:56:56:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/0/CD6720E096E2B3B5875DEF1F65F6D97FBB565623.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6720E096E2B3B5875DEF1F65F6D97FBB565623.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/0/323830343a343665633a3a2f33322d3438203d3e20323637303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:46ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:b4:85:9d:7c:41:e5:b6:3b:65:25:ff:0f:58:fb:d0:1d:1b:
         4f:f7:6c:5f:f9:ec:7b:e6:41:29:4f:ad:22:87:9c:6f:d6:a7:
         53:e3:05:90:5d:6e:79:11:90:c9:5a:d1:8a:4a:72:c0:8d:9a:
         98:5a:43:fd:8a:06:3b:35:1a:39:25:be:65:d3:96:f9:c6:5b:
         d0:46:11:7e:3b:bc:43:9e:6d:ab:68:76:0d:ed:34:59:9c:99:
         ca:05:b9:c3:22:46:89:d3:52:01:05:72:d5:42:4e:02:e8:47:
         ca:08:39:64:f2:a4:1a:5b:90:b1:03:1e:c5:7a:00:4b:3b:a1:
         e2:d7:8c:d3:9d:f1:16:10:0b:ea:6b:a5:f5:b9:4b:42:d7:e2:
         31:d8:d5:97:a7:55:40:0e:6e:7e:f0:26:b5:ca:83:ff:e6:29:
         38:27:47:4e:d5:8b:27:22:4f:6a:0d:c7:a8:56:22:8f:19:5d:
         c4:2a:14:84:d0:d1:7c:90:5e:1b:2a:f3:5f:2d:0c:05:24:f5:
         ab:23:50:5e:e9:22:42:a0:f5:c5:63:e3:85:39:c9:16:aa:d5:
         47:fe:8d:6f:e0:90:69:b0:14:8d:27:0f:b8:21:1b:72:3c:c0:
         c9:54:61:2f:a8:65:79:99:05:42:9b:e7:8b:e1:b5:c9:0a:66:
         8a:b2:38:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org