Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/1/323830343a336439303a3a2f33322d3438203d3e20323032.roa
File:                     323830343a336439303a3a2f33322d3438203d3e20323032.roa (raw, json)
Hash identifier:          NwxI26xxHmHquZVuHK49HO72Vti+FoS2XpPzU0mWWmM=
Subject key identifier:   81:34:DB:32:B1:A1:A3:E2:6F:DC:BB:69:CB:83:37:F0:97:C2:64:04
Certificate issuer:       /CN=A35FE798DF1B5FA90DF47D42B6BB552967B0395D
Certificate serial:       2DA71AF377D451D566074B8CFA07C09DE9960791
Authority key identifier: A3:5F:E7:98:DF:1B:5F:A9:0D:F4:7D:42:B6:BB:55:29:67:B0:39:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A35FE798DF1B5FA90DF47D42B6BB552967B0395D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/1/323830343a336439303a3a2f33322d3438203d3e20323032.roa
Signing time:             Wed 29 Nov 2023 10:55:36 +0000
ROA not before:           Wed 29 Nov 2023 10:50:36 +0000
ROA not after:            Wed 27 Nov 2024 10:55:36 +0000
asID:                     202
IP address blocks:        2804:3d90::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:a7:1a:f3:77:d4:51:d5:66:07:4b:8c:fa:07:c0:9d:e9:96:07:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35FE798DF1B5FA90DF47D42B6BB552967B0395D
        Validity
            Not Before: Nov 29 10:50:36 2023 GMT
            Not After : Nov 27 10:55:36 2024 GMT
        Subject: CN=8134DB32B1A1A3E26FDCBB69CB8337F097C26404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b9:20:32:bd:66:b2:48:02:e4:18:62:b9:3a:
                    ab:b9:d5:05:be:ab:ae:05:37:89:dd:30:6f:07:0f:
                    ac:20:cc:ae:fc:4e:6c:b8:54:a8:d4:8f:34:de:b5:
                    02:11:ec:a1:08:9d:92:ad:d9:f3:fc:c9:53:26:63:
                    6c:cd:1d:2c:04:dd:9c:7b:04:64:b8:36:a6:92:87:
                    b2:3d:14:72:2b:22:3a:a0:11:e0:f1:f1:f0:01:29:
                    69:d7:a8:29:0f:80:39:65:fc:a6:3b:ff:70:14:5e:
                    db:ca:da:83:fa:fd:4e:28:88:09:3b:98:e2:92:49:
                    ba:5a:fa:6f:ac:50:ec:6b:53:ab:3f:4a:16:89:76:
                    61:18:70:c5:18:ce:03:ba:df:d7:38:36:05:04:84:
                    f4:4b:a0:0e:db:6d:cf:8f:11:14:a1:4c:b4:74:71:
                    0a:73:6e:2d:7f:85:f0:e3:fa:10:49:35:c8:12:d8:
                    8c:38:05:33:db:89:3e:7c:a6:b0:78:5f:0d:df:c7:
                    de:a0:8d:5e:8a:db:a7:95:d9:f6:db:64:2d:80:ad:
                    0d:1d:b6:0f:4e:66:57:2e:cc:c5:7c:24:12:aa:bd:
                    a2:af:bf:72:35:31:0c:dc:b5:cc:ae:15:37:3e:e3:
                    76:31:29:87:86:74:e3:f0:9c:99:46:f8:b8:c6:74:
                    5f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:34:DB:32:B1:A1:A3:E2:6F:DC:BB:69:CB:83:37:F0:97:C2:64:04
            X509v3 Authority Key Identifier:
                keyid:A3:5F:E7:98:DF:1B:5F:A9:0D:F4:7D:42:B6:BB:55:29:67:B0:39:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/1/A35FE798DF1B5FA90DF47D42B6BB552967B0395D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A35FE798DF1B5FA90DF47D42B6BB552967B0395D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/1/323830343a336439303a3a2f33322d3438203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d90::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:4b:39:d8:ad:64:2c:dd:c2:d3:a2:54:c8:ce:5b:7e:26:6f:
         8c:68:f0:f2:19:ef:19:34:83:7c:92:54:b4:ad:a7:b0:b1:6e:
         9e:1a:b5:10:d2:cd:16:f1:fd:b0:2a:e2:e4:07:a6:89:0a:28:
         f6:94:80:2f:17:55:91:3e:44:94:7d:29:58:fb:33:a9:36:de:
         ff:2e:e5:69:df:4c:2d:ab:f2:77:da:ba:b7:c2:40:30:1a:7c:
         3e:7e:c4:fe:e8:bf:7c:e5:98:c4:77:20:bc:09:96:96:35:19:
         2b:2c:7b:79:5d:1b:5e:94:c9:4e:42:23:90:e7:a6:af:80:2f:
         99:83:81:1e:08:25:ef:2b:e4:48:6c:6c:d3:df:b5:c5:d9:3e:
         c7:96:1a:5d:2e:55:eb:47:8a:86:59:7d:a5:cb:ae:9e:bb:8a:
         39:22:f5:ad:39:de:54:8a:17:1d:58:dd:61:3b:84:9d:62:13:
         5b:fb:3b:c1:c3:c2:05:e5:d2:d0:b4:0b:80:da:33:03:37:47:
         5d:cd:4d:f8:42:4a:12:5e:11:e7:f7:23:9b:6e:52:db:f7:35:
         5b:a5:8f:ef:06:95:bf:f8:59:8f:e0:ec:9f:ef:c4:4e:18:a3:
         bf:c5:d8:d5:8d:8f:cf:fe:c8:60:0e:e0:f4:aa:ed:4c:a4:cb:
         e9:49:bd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org