Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HSuzjanEE9zndkbZKDb4K3tfGmVc3sVxN9eDkkTsPqNL/0/323830343a386261383a3a2f33322d3333203d3e20323733373437.roa
File:                     323830343a386261383a3a2f33322d3333203d3e20323733373437.roa (raw, json)
Hash identifier:          J2xtlyaXHeFepJ2Ivy1q4ssQBkDUsxnBSvGz9W3/kSo=
Subject key identifier:   29:27:9A:5B:F7:D7:C7:2F:5A:76:29:CC:08:0B:7A:1F:42:04:27:0A
Certificate issuer:       /CN=88AFC1DCAE3A776D894FA1A7F8C4E6B7231D5A1B
Certificate serial:       1E5D1456C02E2E1CFE5A4B0BC37F29A4F6E730CA
Authority key identifier: 88:AF:C1:DC:AE:3A:77:6D:89:4F:A1:A7:F8:C4:E6:B7:23:1D:5A:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/88AFC1DCAE3A776D894FA1A7F8C4E6B7231D5A1B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HSuzjanEE9zndkbZKDb4K3tfGmVc3sVxN9eDkkTsPqNL/0/323830343a386261383a3a2f33322d3333203d3e20323733373437.roa
Signing time:             Mon 06 Nov 2023 18:08:17 +0000
ROA not before:           Mon 06 Nov 2023 18:03:17 +0000
ROA not after:            Mon 04 Nov 2024 18:08:17 +0000
asID:                     273747
IP address blocks:        2804:8ba8::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:5d:14:56:c0:2e:2e:1c:fe:5a:4b:0b:c3:7f:29:a4:f6:e7:30:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88AFC1DCAE3A776D894FA1A7F8C4E6B7231D5A1B
        Validity
            Not Before: Nov  6 18:03:17 2023 GMT
            Not After : Nov  4 18:08:17 2024 GMT
        Subject: CN=29279A5BF7D7C72F5A7629CC080B7A1F4204270A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:15:d4:32:d5:44:8e:d9:9c:27:85:3b:3d:47:
                    01:d0:a0:f4:b7:79:e5:ce:08:0b:ff:3d:be:8a:d6:
                    76:60:61:a9:87:62:48:40:d8:b0:a7:82:03:89:74:
                    d5:8d:d4:eb:7d:fa:b6:33:00:e5:36:a4:1d:89:3b:
                    bc:a5:8e:52:c6:42:52:3c:0e:cb:fd:04:0e:dc:88:
                    2e:a8:22:bb:91:49:1e:37:a0:68:23:b5:0a:08:3b:
                    90:87:a3:27:f9:35:d0:b7:65:cf:80:97:a8:b8:01:
                    63:0a:6f:07:9b:25:e7:82:eb:11:d3:cc:09:89:ca:
                    c0:2f:7f:37:7e:1e:ce:c1:3b:db:3c:a4:51:ba:48:
                    00:e5:f9:79:a3:92:a5:33:ba:75:4e:44:c1:6a:7a:
                    68:22:98:eb:23:3b:f5:69:35:a1:74:23:00:f5:b2:
                    ea:b6:be:3e:1f:22:b9:ef:61:99:aa:ca:85:ea:bd:
                    ff:0f:0f:af:d9:a8:2a:6c:2e:09:07:b2:61:29:0d:
                    9e:2b:15:b3:ed:b3:d0:80:6a:83:f1:fc:b0:cd:4e:
                    cf:32:ba:db:a4:e9:7a:1a:2a:0b:62:bc:82:cc:ad:
                    a4:c3:d9:c4:18:6a:40:53:ed:1f:a0:3a:5e:6e:17:
                    10:45:d7:e1:e6:35:78:7f:05:73:a0:45:35:bd:85:
                    22:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:27:9A:5B:F7:D7:C7:2F:5A:76:29:CC:08:0B:7A:1F:42:04:27:0A
            X509v3 Authority Key Identifier:
                keyid:88:AF:C1:DC:AE:3A:77:6D:89:4F:A1:A7:F8:C4:E6:B7:23:1D:5A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HSuzjanEE9zndkbZKDb4K3tfGmVc3sVxN9eDkkTsPqNL/0/88AFC1DCAE3A776D894FA1A7F8C4E6B7231D5A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/88AFC1DCAE3A776D894FA1A7F8C4E6B7231D5A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HSuzjanEE9zndkbZKDb4K3tfGmVc3sVxN9eDkkTsPqNL/0/323830343a386261383a3a2f33322d3333203d3e20323733373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ba8::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:ce:86:25:b7:70:ec:0e:97:21:09:7f:4c:d5:fb:ff:ab:37:
         4f:82:eb:6c:a9:37:71:43:67:a6:f6:39:91:eb:54:ec:f5:06:
         4b:61:79:30:76:64:44:86:0d:5e:f5:0c:36:8e:c3:9e:e1:ba:
         7d:56:4f:fe:6b:b2:19:09:33:65:c9:73:e1:d9:05:f7:16:2e:
         07:7a:4a:3b:15:45:5e:55:15:76:47:8a:c0:f5:e5:b8:49:09:
         f3:4d:94:63:00:22:59:c5:ee:d3:72:2f:43:3f:73:ef:25:80:
         cf:a2:13:2e:14:1c:de:5d:5c:bf:40:55:22:60:ae:e8:5a:4e:
         c6:5b:b8:bd:9b:1f:05:52:32:d2:82:f5:0a:ab:9c:58:38:91:
         f6:fa:f2:86:19:78:a9:7c:1d:7b:d8:ef:4f:f2:c6:97:43:19:
         e1:bd:bb:c3:eb:85:77:fc:d5:87:33:f4:f7:c8:c8:ff:96:3a:
         38:83:17:02:ad:f5:08:7e:7a:b2:29:dc:47:db:a1:5f:b8:26:
         1a:4d:2c:f0:8b:cf:f4:dc:cc:1c:93:f8:eb:d5:69:08:7d:71:
         de:e6:e9:b9:8f:8b:b2:17:cc:f4:bf:5d:96:de:d8:4d:10:0a:
         7b:c7:83:71:e0:30:65:fd:55:40:6d:54:4a:d6:be:04:41:f9:
         d5:d1:2e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org