Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/323830343a323938383a3a2f33322d3334203d3e20323634303230.roa
File:                     323830343a323938383a3a2f33322d3334203d3e20323634303230.roa (raw, json)
Hash identifier:          Ahi5OT8LYixk45LS2DlW6jMOiIT2r3YPZofcG9UM/MY=
Subject key identifier:   20:35:C0:36:6E:9A:47:AF:6C:F3:FA:07:31:B4:7A:E3:E0:19:82:87
Certificate issuer:       /CN=67491EDA76E398AB01F0CC6CD7474F33F5D99A5B
Certificate serial:       3DA9E8970EC6497C85B3809D645EFA3C8438E786
Authority key identifier: 67:49:1E:DA:76:E3:98:AB:01:F0:CC:6C:D7:47:4F:33:F5:D9:9A:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67491EDA76E398AB01F0CC6CD7474F33F5D99A5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/323830343a323938383a3a2f33322d3334203d3e20323634303230.roa
Signing time:             Wed 28 Sep 2022 21:34:19 +0000
ROA not before:           Wed 28 Sep 2022 21:29:19 +0000
ROA not after:            Wed 27 Sep 2023 21:34:19 +0000
asID:                     264020
IP address blocks:        2804:2988::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:a9:e8:97:0e:c6:49:7c:85:b3:80:9d:64:5e:fa:3c:84:38:e7:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67491EDA76E398AB01F0CC6CD7474F33F5D99A5B
        Validity
            Not Before: Sep 28 21:29:19 2022 GMT
            Not After : Sep 27 21:34:19 2023 GMT
        Subject: CN=2035C0366E9A47AF6CF3FA0731B47AE3E0198287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3b:46:87:a1:47:e4:da:58:c4:87:db:b0:f5:
                    11:a8:53:48:4e:80:e6:32:33:d8:62:5f:b0:a1:e7:
                    bd:b6:61:76:bf:97:0f:33:fa:eb:81:e8:da:de:3c:
                    0b:75:8c:e5:b7:79:61:7e:99:60:65:f6:27:a3:50:
                    c0:09:e1:73:3d:82:1b:95:ff:23:16:2d:8a:2d:17:
                    89:0b:c7:3b:a0:66:d5:35:ab:ce:4d:7b:1a:83:90:
                    28:a6:8f:8d:5e:cd:9a:da:a1:db:70:bd:3a:a0:cf:
                    a7:e8:d9:7a:95:14:03:86:a9:b7:9e:09:97:77:7b:
                    a5:16:5b:11:0a:4a:31:34:6f:7c:57:24:3f:cd:8e:
                    44:2a:99:31:56:ad:d2:07:a3:0f:c1:2b:c9:61:ef:
                    04:a7:21:89:33:88:1c:97:82:7d:50:d0:cd:d4:8e:
                    a5:dc:3b:c2:da:67:bb:2c:0e:76:4e:d4:12:c4:66:
                    7c:b3:ae:17:41:27:e5:8f:9d:0c:3c:e9:67:48:2b:
                    5a:27:28:b0:97:e6:60:b8:9a:7a:68:c7:8e:0e:2e:
                    79:54:9a:39:72:17:23:5d:9c:27:31:b8:c0:2e:0d:
                    41:1b:86:bd:95:1b:a6:d1:4f:20:09:ec:95:a3:c5:
                    6e:31:1f:d7:48:59:7b:b3:5f:0d:83:da:b9:8d:e0:
                    d9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:35:C0:36:6E:9A:47:AF:6C:F3:FA:07:31:B4:7A:E3:E0:19:82:87
            X509v3 Authority Key Identifier:
                keyid:67:49:1E:DA:76:E3:98:AB:01:F0:CC:6C:D7:47:4F:33:F5:D9:9A:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/67491EDA76E398AB01F0CC6CD7474F33F5D99A5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67491EDA76E398AB01F0CC6CD7474F33F5D99A5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/323830343a323938383a3a2f33322d3334203d3e20323634303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2988::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:f6:df:80:fe:9a:17:2e:04:f0:a1:65:56:95:a3:70:86:4f:
         38:f2:3e:07:e0:a7:4b:db:a1:5d:65:14:41:39:7d:9b:ad:35:
         e4:53:74:e1:39:70:4f:11:7c:c5:99:f5:25:0c:ad:bc:74:2a:
         95:d0:72:d8:92:d9:f0:e2:e1:0a:09:12:7b:a5:c4:33:a5:2b:
         19:e5:5d:81:51:f8:54:4b:71:9a:2b:c9:c6:92:80:42:75:35:
         8c:64:d4:e8:c3:61:3a:a7:ca:ec:90:6e:df:97:fd:c2:00:58:
         86:08:a4:24:9b:6c:04:69:03:14:69:09:60:3b:3b:0a:e6:41:
         a0:cf:77:ee:88:89:61:5f:3f:71:ac:a1:26:09:0a:55:dc:45:
         9b:44:2a:92:b6:57:ae:c3:a5:71:1d:39:d5:79:33:b9:a1:4d:
         8a:ca:71:ef:56:47:81:52:a9:10:30:91:49:ea:a2:d8:d0:84:
         48:8d:99:cc:b3:32:01:17:b5:fe:d0:07:5c:2d:8b:e0:0a:b5:
         c4:e8:74:9b:07:5d:78:d5:2b:6e:cb:6f:ad:e9:10:b2:26:48:
         b3:3e:2c:f5:ba:78:1a:f6:30:32:91:b2:34:5b:4c:d9:08:e1:
         d0:cc:70:63:09:a9:00:c3:e2:d5:70:fa:2a:17:73:77:ff:71:
         2f:22:f0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org