Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HQRrndEEbTGyd81Ao8UtKRrbs52GuKxr9gHaN8h1n2vm/0/323830343a31303a3a2f33322d3438203d3e203238323939.roa
File:                     323830343a31303a3a2f33322d3438203d3e203238323939.roa (raw, json)
Hash identifier:          a/bT3mypkB2ZMFV11K3Utbpdu9zZ29FbRQKNlUTI+Hc=
Subject key identifier:   38:C7:09:B7:A5:68:A2:36:80:BD:09:5D:BF:B7:35:B7:B2:3F:F2:5E
Certificate issuer:       /CN=6AF905DD92B0782F965D1A954DCEA4CC6032EEBE
Certificate serial:       128576F53D804ADE8D515CD312A17D0DAAADBB65
Authority key identifier: 6A:F9:05:DD:92:B0:78:2F:96:5D:1A:95:4D:CE:A4:CC:60:32:EE:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AF905DD92B0782F965D1A954DCEA4CC6032EEBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HQRrndEEbTGyd81Ao8UtKRrbs52GuKxr9gHaN8h1n2vm/0/323830343a31303a3a2f33322d3438203d3e203238323939.roa
Signing time:             Wed 08 Jun 2022 19:03:49 +0000
ROA not before:           Wed 08 Jun 2022 18:58:49 +0000
ROA not after:            Wed 07 Jun 2023 19:03:49 +0000
asID:                     28299
IP address blocks:        2804:10::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:85:76:f5:3d:80:4a:de:8d:51:5c:d3:12:a1:7d:0d:aa:ad:bb:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AF905DD92B0782F965D1A954DCEA4CC6032EEBE
        Validity
            Not Before: Jun  8 18:58:49 2022 GMT
            Not After : Jun  7 19:03:49 2023 GMT
        Subject: CN=38C709B7A568A23680BD095DBFB735B7B23FF25E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:36:a7:3d:91:36:34:8e:d2:fb:7d:d4:92:23:
                    6b:24:2b:eb:49:c9:bf:53:10:64:94:47:d7:57:e8:
                    f7:64:6a:a8:a0:9a:8d:09:7e:ec:9c:ac:23:8c:a2:
                    e4:61:b9:e3:9e:19:5f:59:35:5e:4d:b3:f3:c6:be:
                    d6:fd:de:fd:32:b1:1d:fb:5f:6a:19:c6:16:42:25:
                    ee:c5:3e:22:55:31:bd:c8:86:6b:65:be:1a:ea:d4:
                    6a:8e:aa:eb:ae:09:ea:3c:23:76:c1:fb:51:32:7e:
                    f9:00:d1:ee:62:92:22:e8:1d:95:37:f9:2b:cb:ac:
                    5c:32:03:fc:b1:7d:81:48:d0:dc:87:de:ff:fd:21:
                    75:ff:ef:0f:82:84:93:ae:c4:81:5d:b7:ff:c8:24:
                    9c:ae:32:5a:ec:64:c3:75:50:fa:75:29:9d:b9:5a:
                    d1:43:89:1f:bd:c3:f2:ba:80:0c:7d:b7:c6:7a:4c:
                    70:98:4d:ed:05:40:94:e4:89:e9:49:2e:aa:37:80:
                    66:f4:68:fd:64:2c:a3:52:0d:ea:3e:43:e7:84:36:
                    86:56:cb:05:7f:fe:97:b3:ab:ec:d7:56:85:36:30:
                    22:48:fb:a8:7f:fa:5e:e7:ff:42:aa:9c:23:77:f9:
                    e0:0a:a8:1a:2b:62:55:1f:c4:78:b5:ad:cd:37:f1:
                    b4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C7:09:B7:A5:68:A2:36:80:BD:09:5D:BF:B7:35:B7:B2:3F:F2:5E
            X509v3 Authority Key Identifier:
                keyid:6A:F9:05:DD:92:B0:78:2F:96:5D:1A:95:4D:CE:A4:CC:60:32:EE:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HQRrndEEbTGyd81Ao8UtKRrbs52GuKxr9gHaN8h1n2vm/0/6AF905DD92B0782F965D1A954DCEA4CC6032EEBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AF905DD92B0782F965D1A954DCEA4CC6032EEBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HQRrndEEbTGyd81Ao8UtKRrbs52GuKxr9gHaN8h1n2vm/0/323830343a31303a3a2f33322d3438203d3e203238323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:10::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:6a:a3:32:68:9e:3b:37:98:51:41:39:35:b3:5a:aa:1c:9e:
         0b:2f:ed:75:1d:82:09:17:2c:e2:e4:5c:d3:53:91:dc:97:7a:
         3c:27:16:7b:ba:b1:78:09:12:a7:cf:2a:68:60:d5:28:26:50:
         33:78:0c:e0:cf:44:6b:5b:ed:97:8e:b8:09:e9:ca:5b:73:df:
         1e:83:3f:a0:47:97:d7:fb:b3:0b:29:65:94:4a:b9:be:c7:a6:
         c5:bf:9d:4a:81:b9:64:d2:de:7d:e6:66:9d:be:02:19:5e:27:
         21:8f:f0:e3:f4:46:d1:dc:19:bf:68:98:59:77:e3:50:10:09:
         22:dd:0d:72:d4:7d:5c:8d:23:d9:77:9a:97:aa:77:5f:19:a9:
         bb:b9:32:d2:37:3f:01:ce:19:4a:48:47:7f:1b:9d:cc:ca:88:
         f2:99:71:e5:d2:e8:00:ab:40:96:2d:52:99:8e:b6:9a:4c:bf:
         cc:28:c8:ff:70:44:4d:27:6b:a5:48:f4:65:fb:5b:6f:3e:42:
         ff:db:e1:be:36:d9:9a:95:85:fb:c5:44:7a:5f:a3:0a:6a:82:
         89:ca:a6:bc:3b:2c:e4:64:b0:ab:4a:ff:06:60:a4:69:09:ff:
         b0:96:6e:ac:81:a6:cf:0b:fb:63:21:0b:67:4f:ba:7f:05:3a:
         f2:a4:fa:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org