Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/323830343a38383a383030303a3a2f33352d3335203d3e203532373737.roa
File:                     323830343a38383a383030303a3a2f33352d3335203d3e203532373737.roa (raw, json)
Hash identifier:          l98vM+LWD/5tRhP2tEDMjrUt0/x0FVbJIxduXV9Llm8=
Subject key identifier:   0D:C7:B5:B0:6D:35:A2:31:C5:55:E3:CC:EF:CC:8A:D5:FD:4D:2D:41
Certificate issuer:       /CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
Certificate serial:       62A27433851B8244C36E28286D55D7AF9600786D
Authority key identifier: 10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/323830343a38383a383030303a3a2f33352d3335203d3e203532373737.roa
Signing time:             Wed 12 Apr 2023 11:22:36 +0000
ROA not before:           Wed 12 Apr 2023 11:17:36 +0000
ROA not after:            Wed 10 Apr 2024 11:22:36 +0000
asID:                     52777
IP address blocks:        2804:88:8000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:a2:74:33:85:1b:82:44:c3:6e:28:28:6d:55:d7:af:96:00:78:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
        Validity
            Not Before: Apr 12 11:17:36 2023 GMT
            Not After : Apr 10 11:22:36 2024 GMT
        Subject: CN=0DC7B5B06D35A231C555E3CCEFCC8AD5FD4D2D41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8e:d9:75:ba:52:df:fa:45:9b:3e:4a:58:57:
                    72:a1:d2:31:7f:a3:cf:3a:49:72:ef:85:6c:bb:b0:
                    76:1c:3d:1c:db:4f:ca:b9:45:64:12:82:db:80:69:
                    26:ee:81:e1:ea:78:6a:97:4f:38:be:2a:8c:d3:41:
                    ab:25:2e:aa:be:dc:dc:21:08:7e:d0:14:56:3d:c0:
                    f5:dc:2d:70:d6:26:b8:0a:15:4d:19:ee:d7:89:ac:
                    ca:9c:4f:ef:bb:e2:a7:a1:8f:11:08:b5:32:b2:d5:
                    55:c1:9c:aa:6f:5c:8d:ec:26:83:d3:68:66:b1:ec:
                    53:ab:91:79:7e:b9:aa:fc:0c:13:9d:49:b8:9b:13:
                    c3:8f:a6:68:95:e1:37:f7:d1:b9:c0:0c:ad:21:77:
                    c9:b7:fd:b9:49:82:5a:03:9c:39:3e:8b:cf:54:74:
                    72:ab:cc:b8:fb:9e:4c:ff:2b:aa:f8:46:57:a9:e3:
                    11:b8:31:e0:9d:e2:21:ba:c8:70:6a:b0:66:65:02:
                    ef:dc:4d:e2:34:64:8e:c9:17:4e:ed:dc:db:01:5b:
                    35:ae:d3:6c:7f:1b:a2:30:15:e3:7e:c0:f8:c2:62:
                    a3:12:d9:d2:98:da:89:a6:a6:a4:69:6f:63:81:c1:
                    b8:53:c5:c2:28:4b:a6:97:94:4a:57:e1:05:ab:da:
                    a2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C7:B5:B0:6D:35:A2:31:C5:55:E3:CC:EF:CC:8A:D5:FD:4D:2D:41
            X509v3 Authority Key Identifier:
                keyid:10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/323830343a38383a383030303a3a2f33352d3335203d3e203532373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:88:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         1a:28:d1:43:55:e8:49:e4:f6:02:ce:c1:0c:1b:f4:04:2f:14:
         60:bd:73:60:1f:42:5c:dd:0c:1d:43:eb:cb:11:f0:a2:85:b1:
         1f:69:21:3d:1c:d4:94:1d:04:53:66:7b:73:77:1f:51:27:51:
         e3:69:83:f3:37:af:29:c3:58:0f:65:fe:a4:ff:31:e7:8a:7a:
         6b:5a:11:d4:72:a8:1b:2e:e1:e3:f1:54:a9:80:a0:28:84:50:
         96:e4:58:17:0b:31:b1:db:73:6c:f0:60:a9:bd:61:63:79:a3:
         dd:01:c9:d5:aa:7a:26:24:cc:72:e8:a6:51:60:68:4c:97:f9:
         f3:42:31:0f:cc:7c:23:46:68:4d:5b:9c:29:7a:10:59:64:ce:
         18:cb:0b:4b:e1:16:8b:7b:02:54:c5:55:0a:36:90:50:b2:75:
         9a:6d:3c:6b:19:33:82:be:a5:26:be:12:c8:06:ad:ab:65:38:
         90:be:43:5c:70:a5:b1:e1:7a:a8:9a:a7:d6:cb:49:b7:3a:37:
         64:60:a0:e5:73:ca:cc:40:09:9f:7b:d8:56:90:ba:56:78:bd:
         9f:e2:7d:7d:3f:bd:10:75:9c:3f:0c:3f:ed:ae:d4:84:3c:e8:
         1f:93:dd:45:fa:2e:28:fc:a4:26:3a:25:71:84:af:b7:16:b0:
         56:9b:8c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org