Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/0/323830343a323461633a383030303a3a2f33332d3333203d3e20323634323337.roa
File:                     323830343a323461633a383030303a3a2f33332d3333203d3e20323634323337.roa (raw, json)
Hash identifier:          SMBTbUXL4KceJe4Lt+eeTEDGU9PxhsBDflWJtOQ5SP8=
Subject key identifier:   E7:E5:C5:4B:FF:9E:A5:A5:15:76:35:09:97:17:16:67:C1:A3:8D:86
Certificate issuer:       /CN=2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6
Certificate serial:       49417FF531F41125E54A96C39E11A199F5B63E84
Authority key identifier: 2F:7C:F5:CC:C0:B9:BC:67:F4:6D:48:08:E4:9F:D2:81:B9:75:18:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/0/323830343a323461633a383030303a3a2f33332d3333203d3e20323634323337.roa
Signing time:             Fri 23 Feb 2024 15:00:00 +0000
ROA not before:           Fri 23 Feb 2024 14:55:00 +0000
ROA not after:            Fri 21 Feb 2025 15:00:00 +0000
asID:                     264237
IP address blocks:        2804:24ac:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:41:7f:f5:31:f4:11:25:e5:4a:96:c3:9e:11:a1:99:f5:b6:3e:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6
        Validity
            Not Before: Feb 23 14:55:00 2024 GMT
            Not After : Feb 21 15:00:00 2025 GMT
        Subject: CN=E7E5C54BFF9EA5A51576350997171667C1A38D86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:35:69:fb:c5:4b:89:f2:31:8f:ba:53:4f:d3:
                    10:73:43:11:13:b3:f6:6b:7a:7c:b0:89:1c:86:a2:
                    02:62:32:57:c5:6b:a5:0b:57:ad:cd:8b:e1:36:66:
                    5a:9a:93:18:32:2e:7f:2c:28:e7:73:ae:09:25:49:
                    d2:e0:bd:94:b6:c7:54:5f:74:72:46:ac:e3:2a:5d:
                    88:ac:3c:72:aa:36:61:96:b4:c0:d8:df:00:d2:7f:
                    f0:f5:48:c2:ec:4b:71:08:61:6e:cb:0e:99:e6:fd:
                    e8:60:66:b4:84:ed:f9:88:bd:7c:d7:9d:1a:07:95:
                    96:b4:21:27:8b:38:2b:87:23:98:fa:bd:d2:3c:ae:
                    f8:e2:db:be:b7:00:ee:15:6f:ca:cf:b9:38:1e:a4:
                    bc:32:8c:08:5c:fc:0c:a4:78:fa:f0:91:6a:e4:48:
                    74:ab:9a:64:47:5c:f9:70:5e:c4:3c:a6:35:c0:42:
                    3f:37:20:f3:7d:c9:46:36:50:fc:ae:e2:69:60:9c:
                    4f:d7:58:5e:a9:7a:bc:8e:b5:bc:71:10:e2:72:64:
                    27:ff:04:36:51:6b:ad:ce:d5:40:52:94:5c:b0:2f:
                    35:2b:6e:18:45:69:31:b9:c4:c8:ee:e3:47:f2:48:
                    eb:af:9c:47:ae:09:ac:bb:07:47:2c:7a:28:ac:b3:
                    e3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E5:C5:4B:FF:9E:A5:A5:15:76:35:09:97:17:16:67:C1:A3:8D:86
            X509v3 Authority Key Identifier:
                keyid:2F:7C:F5:CC:C0:B9:BC:67:F4:6D:48:08:E4:9F:D2:81:B9:75:18:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/0/2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/0/323830343a323461633a383030303a3a2f33332d3333203d3e20323634323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24ac:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         22:6f:95:d9:cd:9a:41:00:a1:75:cd:2c:3c:29:4e:2a:f1:f0:
         cf:5d:e7:b0:21:43:1d:6e:13:98:07:ed:15:c0:9d:f1:2d:57:
         8f:75:3c:54:0e:2b:c4:bd:35:f2:39:c3:39:2e:ba:69:66:5b:
         12:02:cd:18:c0:bc:66:2f:a0:6b:d5:24:b7:72:b5:23:79:e8:
         5e:0f:50:0b:a7:c4:f7:d7:6c:f3:c5:2c:95:48:2d:eb:c9:a6:
         0e:bf:cb:70:ee:70:3d:44:96:d1:7d:50:ee:48:1a:47:81:1d:
         c6:e8:ce:40:9c:52:f5:37:49:dc:89:e5:ec:aa:3f:17:b9:20:
         f8:3d:7b:10:a2:ba:1f:8b:78:7d:d8:4e:ae:e0:01:17:e0:14:
         08:cf:72:64:46:d5:98:d1:2a:ec:b8:26:fc:f0:30:06:a5:17:
         e2:6d:3e:b1:e7:00:64:d9:00:bc:b0:c5:ec:10:f1:4a:40:93:
         74:5c:7e:a4:2b:ec:e6:30:ca:80:61:03:03:a2:96:24:46:32:
         2b:23:4d:18:03:20:46:92:5b:ff:51:12:ef:cf:8a:fe:f0:a0:
         0c:09:74:ef:ae:5a:94:a9:0f:ac:db:31:cc:93:61:c5:33:0d:
         68:be:84:af:5b:0f:e5:ae:ea:39:fc:8c:68:fb:1e:83:e2:59:
         eb:34:eb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org