Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/0/323830343a323461633a3a2f33322d3332203d3e20323634323337.roa
File:                     323830343a323461633a3a2f33322d3332203d3e20323634323337.roa (raw, json)
Hash identifier:          1KU4zzYhOq+CfBYHv/HZ5SrZ+9gPSAKsbGFo3sb+gzY=
Subject key identifier:   A4:DB:62:3F:E6:A1:5C:9D:5E:79:19:21:21:D5:DA:E4:C7:9D:A1:C6
Certificate issuer:       /CN=2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6
Certificate serial:       625399D0DD3570620DA2F38D1DD36C2D0F5EA8FF
Authority key identifier: 2F:7C:F5:CC:C0:B9:BC:67:F4:6D:48:08:E4:9F:D2:81:B9:75:18:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/0/323830343a323461633a3a2f33322d3332203d3e20323634323337.roa
Signing time:             Tue 16 May 2023 17:00:00 +0000
ROA not before:           Tue 16 May 2023 16:55:00 +0000
ROA not after:            Tue 14 May 2024 17:00:00 +0000
asID:                     264237
IP address blocks:        2804:24ac::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:53:99:d0:dd:35:70:62:0d:a2:f3:8d:1d:d3:6c:2d:0f:5e:a8:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6
        Validity
            Not Before: May 16 16:55:00 2023 GMT
            Not After : May 14 17:00:00 2024 GMT
        Subject: CN=A4DB623FE6A15C9D5E79192121D5DAE4C79DA1C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a1:a8:ca:f2:87:f8:dc:19:82:1d:f8:ae:63:
                    d3:1f:b7:03:7c:b4:02:9d:04:96:da:12:24:7c:23:
                    91:d8:16:51:31:bd:bd:bf:e2:fb:a9:47:20:d0:fd:
                    05:f5:53:a7:c8:d0:ce:a3:93:94:70:c0:4e:47:7f:
                    61:a5:d6:a1:b1:16:e7:e8:b4:c5:b4:a1:44:c9:f6:
                    6d:e7:c6:d2:a0:19:0f:f6:06:75:7b:9a:9a:f0:57:
                    79:00:8d:1d:10:50:46:36:3f:0f:d2:5a:14:61:84:
                    16:7a:64:b4:df:11:ad:f0:0c:66:0d:d8:f2:f3:0c:
                    cc:de:e8:57:c4:e3:c2:f3:c3:94:44:6c:97:41:20:
                    ac:36:ee:c3:85:6a:3b:60:ed:85:4a:c2:72:4e:42:
                    d0:0f:54:c6:ef:c7:ff:04:c2:31:34:70:96:40:37:
                    be:1c:07:45:fa:14:e4:fe:97:13:c5:e8:a1:8d:ff:
                    14:2f:23:db:f9:4e:be:aa:76:67:75:cb:19:36:4a:
                    a2:7c:3b:99:b9:a0:f6:67:2e:9d:a9:31:3a:97:1d:
                    7b:a5:c9:44:7f:9c:bf:79:6a:d6:e0:86:34:99:96:
                    6b:02:43:e3:70:e3:4c:c2:88:e0:4d:4a:95:b9:a5:
                    a3:e9:52:b2:57:50:7b:e0:9e:0e:cf:87:62:e2:be:
                    20:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:DB:62:3F:E6:A1:5C:9D:5E:79:19:21:21:D5:DA:E4:C7:9D:A1:C6
            X509v3 Authority Key Identifier:
                keyid:2F:7C:F5:CC:C0:B9:BC:67:F4:6D:48:08:E4:9F:D2:81:B9:75:18:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/0/2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/0/323830343a323461633a3a2f33322d3332203d3e20323634323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:13:95:bb:39:4d:f6:89:8b:26:f7:3c:21:79:1f:c3:59:16:
         91:30:bf:b8:11:7f:2c:6f:6c:59:15:de:dc:0b:9a:e2:ab:fd:
         b1:a6:31:61:be:ae:44:be:a6:36:66:8a:18:21:2f:b7:0a:dc:
         5c:05:c5:58:b1:93:c4:56:2f:9f:c2:26:4e:82:e2:3d:8c:0b:
         3d:25:14:8d:de:4f:50:fb:f8:54:c6:b3:c6:85:24:38:a6:a6:
         06:d8:36:8a:bf:47:fa:38:72:72:e7:8a:c9:af:d3:b4:ad:5b:
         9a:1b:9b:c4:e1:de:92:e2:d2:1f:91:40:b1:3a:8c:d1:c0:73:
         ad:19:06:2d:fa:99:3c:30:f5:45:c5:e0:25:0c:f8:97:d3:2e:
         37:bf:57:a3:fb:2d:de:ef:90:41:a5:35:1d:b9:57:8b:3a:f7:
         96:34:d3:66:20:1f:79:72:ff:45:2b:cb:96:d5:ab:2e:a3:99:
         f2:a4:e5:3e:e6:9b:46:5c:48:a1:95:af:67:3e:21:32:81:90:
         0a:6d:d8:5a:da:4d:93:33:cc:24:55:4d:9f:7c:72:ba:3d:ca:
         00:a7:8a:bf:62:63:8f:e6:35:38:24:38:72:72:04:cb:54:70:
         b9:a1:61:bb:23:78:99:87:3d:ff:49:d5:9f:5e:e2:c8:4f:f1:
         38:1c:23:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:49 2024 by rpki-client on console-ams.rpki-client.org