Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/323830343a373031343a3a2f33322d3332203d3e20323730373034.roa
File:                     323830343a373031343a3a2f33322d3332203d3e20323730373034.roa (raw, json)
Hash identifier:          PVsEwP0WxMGdlYdVT56udGDErlvh3yFE6HA21i76WKI=
Subject key identifier:   BE:E2:85:EE:2C:DD:4B:78:DC:9B:F6:0D:B9:F7:ED:9D:63:E1:56:4D
Certificate issuer:       /CN=08DC97818473BD73C2DD2C6E472F59268A919F1D
Certificate serial:       70FB57AAE59E81B63606C2587E3612702782262F
Authority key identifier: 08:DC:97:81:84:73:BD:73:C2:DD:2C:6E:47:2F:59:26:8A:91:9F:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08DC97818473BD73C2DD2C6E472F59268A919F1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/323830343a373031343a3a2f33322d3332203d3e20323730373034.roa
Signing time:             Mon 13 Feb 2023 19:33:36 +0000
ROA not before:           Mon 13 Feb 2023 19:28:36 +0000
ROA not after:            Mon 12 Feb 2024 19:33:36 +0000
asID:                     270704
IP address blocks:        2804:7014::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:fb:57:aa:e5:9e:81:b6:36:06:c2:58:7e:36:12:70:27:82:26:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08DC97818473BD73C2DD2C6E472F59268A919F1D
        Validity
            Not Before: Feb 13 19:28:36 2023 GMT
            Not After : Feb 12 19:33:36 2024 GMT
        Subject: CN=BEE285EE2CDD4B78DC9BF60DB9F7ED9D63E1564D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8e:96:ff:85:50:c8:01:d4:92:86:09:13:1c:
                    55:2e:7c:b0:05:a6:be:ae:51:5f:f0:dd:e8:f1:5e:
                    d9:e3:b5:e3:86:77:2c:fa:88:22:cc:f1:71:c9:24:
                    57:cf:53:a4:b8:55:89:04:ed:75:fe:56:75:a6:8e:
                    fe:22:c2:3b:b8:18:a4:95:bd:66:04:27:4b:a1:2a:
                    c5:1c:67:7d:76:0d:de:93:d7:16:1a:ed:65:b7:99:
                    9f:fa:00:9f:8a:52:b6:72:b0:5e:8b:8e:0d:bd:25:
                    71:34:e0:e1:f4:30:4c:44:f2:ee:9e:ee:e9:6f:24:
                    c2:14:5b:41:0f:29:65:c9:16:51:65:46:07:87:f2:
                    63:7e:0b:9d:f6:a9:0d:9e:03:0e:99:2d:28:8d:7d:
                    4b:5f:77:aa:91:ec:d4:08:1a:3b:16:ad:25:b3:38:
                    6f:a5:82:03:3c:e6:09:e0:32:c2:49:eb:e5:25:01:
                    e0:ed:b3:4d:ad:27:86:51:bf:7e:e1:26:c6:be:21:
                    cc:b4:6d:d7:ee:26:6d:b4:15:7c:d4:24:2d:6a:80:
                    82:69:d6:9f:3b:32:d3:ef:9a:ea:47:cb:da:55:55:
                    cc:1c:09:0b:0a:9f:ec:33:7b:90:51:bd:06:ef:57:
                    f6:07:7f:ab:df:2c:11:8b:74:e3:af:b1:ee:4d:e3:
                    17:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E2:85:EE:2C:DD:4B:78:DC:9B:F6:0D:B9:F7:ED:9D:63:E1:56:4D
            X509v3 Authority Key Identifier:
                keyid:08:DC:97:81:84:73:BD:73:C2:DD:2C:6E:47:2F:59:26:8A:91:9F:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/08DC97818473BD73C2DD2C6E472F59268A919F1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08DC97818473BD73C2DD2C6E472F59268A919F1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/323830343a373031343a3a2f33322d3332203d3e20323730373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7014::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:94:f9:32:5b:39:bb:54:13:c1:27:6b:43:ed:78:8a:a2:83:
         46:da:e6:cc:40:02:76:6b:42:c1:9d:2b:2d:b9:0a:4e:c5:96:
         02:41:c0:22:7b:31:6a:dd:ba:52:d2:1e:82:f4:71:11:c6:4d:
         ea:fb:aa:ea:37:9d:62:ce:a0:7d:b8:80:b8:f4:2f:48:f7:aa:
         76:12:50:23:b6:12:cd:fe:7f:9a:c9:da:61:53:21:29:e3:47:
         b0:bf:a9:f1:6b:55:5a:37:27:74:ba:99:df:9b:a7:03:a5:6a:
         00:5c:1b:00:61:38:34:e7:f3:0f:99:2e:a3:6e:60:d2:07:d6:
         1a:ba:e0:f0:cd:2e:5f:62:60:09:79:8b:66:95:95:00:25:36:
         52:e4:c9:84:bb:1d:8e:28:44:61:ae:2f:3e:45:40:cf:0f:e4:
         7e:b0:73:5a:42:5a:3c:79:bc:b7:7b:3b:d5:5b:06:81:df:1a:
         4f:97:2f:3f:30:15:cc:da:b1:4c:ae:68:6e:11:3b:05:5d:05:
         10:5a:e7:b7:ca:d2:12:6e:d3:56:14:c5:ee:a7:a7:18:28:fa:
         56:e5:4b:d5:7d:ac:56:ac:f9:dc:54:80:10:c7:d2:c9:c4:0a:
         2c:d6:74:e5:d2:80:81:24:00:44:d9:f3:2b:55:e5:d7:30:93:
         26:a4:21:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org