Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/0/323830343a363338633a3a2f33322d3335203d3e20323639333638.roa
File:                     323830343a363338633a3a2f33322d3335203d3e20323639333638.roa (raw, json)
Hash identifier:          ASJ6YDb8YJfaffnXiiRy2DvCjunqTEflo0vaVCi5hi0=
Subject key identifier:   73:AE:77:08:46:63:F4:28:F1:8A:F4:6A:40:75:85:65:9D:78:53:01
Certificate issuer:       /CN=19E98883E3A673317F3AC927DE191C45EBB4241D
Certificate serial:       20D8AEC0B280508DA0EE270281B84307371C16A5
Authority key identifier: 19:E9:88:83:E3:A6:73:31:7F:3A:C9:27:DE:19:1C:45:EB:B4:24:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19E98883E3A673317F3AC927DE191C45EBB4241D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/0/323830343a363338633a3a2f33322d3335203d3e20323639333638.roa
Signing time:             Sat 28 Oct 2023 15:25:19 +0000
ROA not before:           Sat 28 Oct 2023 15:20:19 +0000
ROA not after:            Sat 26 Oct 2024 15:25:19 +0000
asID:                     269368
IP address blocks:        2804:638c::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:d8:ae:c0:b2:80:50:8d:a0:ee:27:02:81:b8:43:07:37:1c:16:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19E98883E3A673317F3AC927DE191C45EBB4241D
        Validity
            Not Before: Oct 28 15:20:19 2023 GMT
            Not After : Oct 26 15:25:19 2024 GMT
        Subject: CN=73AE77084663F428F18AF46A407585659D785301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:7b:14:07:36:68:03:89:55:94:09:b1:62:19:
                    64:97:67:ce:1f:3d:a4:50:81:64:48:b6:83:e0:d6:
                    97:fb:8f:b9:33:d6:e6:41:76:17:ff:51:80:7d:02:
                    43:2c:00:62:9e:03:a9:f6:ed:97:ae:7c:41:9e:9e:
                    2f:5d:66:42:40:f3:10:47:3a:55:f7:c5:6e:a6:87:
                    32:ff:87:c8:20:6a:3c:6b:e2:92:3a:5d:c1:6d:8c:
                    02:a0:41:00:d1:08:6b:e3:cd:ed:eb:05:61:e7:25:
                    06:db:0e:be:98:10:c7:ce:be:39:03:dd:9c:22:9c:
                    d7:02:9b:a9:65:a3:1c:6c:20:00:75:28:df:37:cf:
                    ac:bc:6b:c1:10:70:67:ec:16:4a:ef:b0:4f:45:3f:
                    ff:2c:94:39:83:32:a6:8a:a0:8a:0d:ec:ee:f5:7c:
                    63:55:92:04:86:67:c1:30:e3:40:ff:be:85:6f:7f:
                    7c:06:f8:1e:74:f8:e8:61:9f:82:52:7b:94:e2:c1:
                    4e:c3:4f:27:4e:b7:f6:c9:1f:00:cd:c7:36:46:5b:
                    6b:c4:3f:19:04:7b:11:45:ea:76:be:d2:6b:65:80:
                    dc:ff:da:09:44:61:e0:e1:30:3b:ff:e6:14:2e:95:
                    d8:26:46:cd:5d:02:98:be:9a:1d:00:ee:c8:a8:6b:
                    12:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:AE:77:08:46:63:F4:28:F1:8A:F4:6A:40:75:85:65:9D:78:53:01
            X509v3 Authority Key Identifier:
                keyid:19:E9:88:83:E3:A6:73:31:7F:3A:C9:27:DE:19:1C:45:EB:B4:24:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/0/19E98883E3A673317F3AC927DE191C45EBB4241D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19E98883E3A673317F3AC927DE191C45EBB4241D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/0/323830343a363338633a3a2f33322d3335203d3e20323639333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:638c::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:86:31:5f:21:d0:ff:2f:a8:47:fe:55:34:b4:7b:6e:4c:e6:
         34:0e:38:6b:96:f5:32:63:04:6c:a9:f1:a1:4c:22:df:ed:26:
         8e:81:9f:f8:df:2c:4d:1d:f8:e8:80:6c:70:6e:b3:f5:17:67:
         4a:3c:ec:e5:49:51:ae:08:32:8c:b8:38:8a:d6:e0:85:da:31:
         7d:1f:c3:4c:e3:98:13:9f:b2:ba:0d:df:28:34:68:10:36:c0:
         81:c3:b9:e6:ae:e5:f8:3a:67:87:63:e9:29:ca:d0:32:fb:54:
         e8:22:11:8e:23:74:91:c3:5e:6c:6f:7c:68:d0:aa:bd:09:49:
         4f:ee:0a:b5:c9:9b:db:12:64:cd:1b:d9:d6:65:07:cd:e5:6a:
         12:0e:e9:0b:99:f3:ea:df:35:25:5f:78:15:e3:32:8e:d7:e5:
         97:6e:10:84:f0:d6:c5:5a:98:ab:c4:92:26:46:75:7d:26:9c:
         ba:8f:76:74:ec:cf:2d:ac:a6:72:db:3a:c2:91:e8:8b:1c:68:
         ff:64:66:ab:dc:50:4c:65:f0:27:7c:96:e1:ee:b4:bd:33:13:
         ac:42:9e:cb:e1:05:e2:23:99:0d:2c:15:01:84:19:f1:9e:9f:
         d2:49:62:d0:39:ae:28:e6:59:0a:19:93:c8:d9:cb:bb:ad:26:
         be:66:97:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:11 2024 by rpki-client on console-fra.rpki-client.org