Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/323830343a373031343a3a2f33322d3438203d3e20323730373034.roa
File:                     323830343a373031343a3a2f33322d3438203d3e20323730373034.roa (raw, json)
Hash identifier:          VUmV0LgzFdAGgKM2gDpiN5L6HnVA7BcbLK0TF8XpgDI=
Subject key identifier:   21:73:CB:2F:F3:DE:A4:55:BD:00:BE:E1:65:08:A1:7A:15:2A:F5:B7
Certificate issuer:       /CN=08DC97818473BD73C2DD2C6E472F59268A919F1D
Certificate serial:       3EB5C2B29A142B410CA7142B5CDA6D932B8B1D16
Authority key identifier: 08:DC:97:81:84:73:BD:73:C2:DD:2C:6E:47:2F:59:26:8A:91:9F:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08DC97818473BD73C2DD2C6E472F59268A919F1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/323830343a373031343a3a2f33322d3438203d3e20323730373034.roa
Signing time:             Sun 12 Feb 2023 21:43:28 +0000
ROA not before:           Sun 12 Feb 2023 21:38:28 +0000
ROA not after:            Sun 11 Feb 2024 21:43:28 +0000
asID:                     270704
IP address blocks:        2804:7014::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:b5:c2:b2:9a:14:2b:41:0c:a7:14:2b:5c:da:6d:93:2b:8b:1d:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08DC97818473BD73C2DD2C6E472F59268A919F1D
        Validity
            Not Before: Feb 12 21:38:28 2023 GMT
            Not After : Feb 11 21:43:28 2024 GMT
        Subject: CN=2173CB2FF3DEA455BD00BEE16508A17A152AF5B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:08:d0:96:f3:4e:d0:29:62:06:c4:58:8e:63:
                    a1:18:3d:7e:45:78:61:af:4b:42:d6:43:27:01:f1:
                    25:7f:eb:16:52:da:72:0f:45:02:7c:11:2c:7d:b4:
                    22:6b:3c:68:32:8b:8f:37:70:c8:aa:a6:ba:28:8f:
                    3c:5d:8b:20:7d:9d:15:13:7f:3f:34:c5:81:54:1f:
                    7a:24:f4:ca:8c:bb:6a:1e:71:40:05:dc:6b:cc:3c:
                    e0:28:87:a7:33:c2:c2:c0:fe:4d:47:ff:6e:1b:3b:
                    f8:8a:b8:02:f8:ae:39:fc:97:85:8b:6c:24:61:af:
                    f3:0e:fd:b8:cb:f4:ac:dd:a6:4b:7e:1d:f2:c5:3f:
                    bd:2f:fe:0f:a9:33:f2:33:6b:56:68:c0:b8:2b:6b:
                    7c:ae:b5:b7:95:13:53:05:5f:94:33:b8:87:c6:92:
                    e7:22:62:69:b9:b5:5b:04:b9:82:f8:5a:02:d1:84:
                    2d:24:72:c0:05:ef:79:60:f1:de:73:40:b4:75:73:
                    e7:59:c5:4b:a6:5a:fd:f1:01:56:fd:89:85:c2:0b:
                    73:aa:7f:0d:4c:3c:2f:67:be:82:13:5d:cf:21:64:
                    c4:de:6a:24:61:75:2d:54:cb:0d:66:76:f0:c0:37:
                    87:41:86:f2:be:0f:46:03:84:51:ef:78:fd:5f:ac:
                    87:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:73:CB:2F:F3:DE:A4:55:BD:00:BE:E1:65:08:A1:7A:15:2A:F5:B7
            X509v3 Authority Key Identifier:
                keyid:08:DC:97:81:84:73:BD:73:C2:DD:2C:6E:47:2F:59:26:8A:91:9F:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/08DC97818473BD73C2DD2C6E472F59268A919F1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08DC97818473BD73C2DD2C6E472F59268A919F1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/323830343a373031343a3a2f33322d3438203d3e20323730373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7014::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:e4:dd:53:6b:e5:45:4d:c9:b7:f1:76:1a:80:35:58:92:7e:
         98:ab:78:fc:2b:e6:26:bc:1d:d9:2e:f9:9a:fa:3d:c5:a6:fd:
         d2:11:7f:5a:a1:b2:14:4d:c4:cf:6b:07:bf:e9:f6:1a:18:56:
         31:db:e9:fb:65:1d:d4:c6:04:ca:a5:42:80:6f:0a:21:0e:32:
         59:52:1c:c9:b7:ab:c1:51:a2:0c:ad:36:21:5b:2f:b8:08:90:
         45:38:cd:33:d2:49:11:39:91:66:64:2c:be:02:58:08:a3:99:
         93:52:3f:47:a8:9b:6d:46:29:a1:2a:aa:d7:61:52:9e:9f:09:
         6d:85:2c:68:9d:9d:3c:65:36:60:e8:b2:80:2c:4e:5a:75:fa:
         e2:7f:5f:27:5c:15:7b:59:47:f2:15:fe:af:1b:c0:fa:82:13:
         88:90:f9:f2:c1:e1:15:05:fd:a5:99:91:d4:06:38:13:80:62:
         09:d1:41:76:66:8f:e5:49:fa:ef:14:22:f4:c8:7f:e9:fa:d3:
         e3:58:cf:6f:c6:ee:34:d0:db:b1:c8:7a:77:91:58:2f:d0:f8:
         41:62:ae:82:e7:55:88:bc:0f:80:b7:b3:05:df:e3:29:16:c4:
         16:f8:76:53:24:16:56:2f:84:68:2f:71:3f:f1:4a:53:2c:71:
         11:f7:3f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org