Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmzZf9GHkWkpxePeKTQDyuHHm7YhnrLQjD4QgCTzDn5Y/0/323830343a3430303a3a2f33322d3334203d3e20323632343039.roa
File:                     323830343a3430303a3a2f33322d3334203d3e20323632343039.roa (raw, json)
Hash identifier:          1PhX687eWD8I7fVFHf5ZULX6f5snP5fyMqPx8QR76co=
Subject key identifier:   D7:7A:5E:41:0E:04:C2:8C:42:1C:04:E8:FF:22:C0:44:D4:20:35:A1
Certificate issuer:       /CN=CDBB2AB6D632E955A756955729107E2352C882ED
Certificate serial:       2AEADCECF266D785CBDFD0D2AE9214BC36F2DA78
Authority key identifier: CD:BB:2A:B6:D6:32:E9:55:A7:56:95:57:29:10:7E:23:52:C8:82:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDBB2AB6D632E955A756955729107E2352C882ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmzZf9GHkWkpxePeKTQDyuHHm7YhnrLQjD4QgCTzDn5Y/0/323830343a3430303a3a2f33322d3334203d3e20323632343039.roa
Signing time:             Thu 04 Apr 2024 18:00:00 +0000
ROA not before:           Thu 04 Apr 2024 17:55:00 +0000
ROA not after:            Thu 03 Apr 2025 18:00:00 +0000
asID:                     262409
IP address blocks:        2804:400::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ea:dc:ec:f2:66:d7:85:cb:df:d0:d2:ae:92:14:bc:36:f2:da:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDBB2AB6D632E955A756955729107E2352C882ED
        Validity
            Not Before: Apr  4 17:55:00 2024 GMT
            Not After : Apr  3 18:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:14:c3:e3:ed:e5:57:70:9b:b4:da:74:58:22:
                    56:1c:38:c9:c9:0b:a3:52:72:3d:bd:78:31:62:b2:
                    7c:f1:ea:cb:e5:0f:d9:67:90:f3:07:21:b2:7b:92:
                    39:32:35:5f:60:7c:9f:0e:bc:2c:44:23:60:34:c9:
                    ea:d9:0d:6e:1c:54:1a:60:e3:12:00:f6:63:52:d2:
                    27:44:fa:b9:9f:3c:e2:37:e8:03:57:3e:5a:50:b0:
                    1d:fd:08:18:b4:fc:5a:7f:3e:6d:b5:b5:bd:f1:87:
                    3a:e8:fd:dd:e2:58:8f:1e:0b:ca:19:0e:4a:8f:3e:
                    25:ee:f9:d0:62:db:a1:c0:2f:44:3e:1f:d4:4b:0f:
                    6f:9d:e7:9b:4b:64:e0:6a:67:83:37:af:de:eb:e1:
                    88:1e:61:f0:03:1d:09:72:cc:ea:b1:70:51:e7:97:
                    b4:65:5f:09:e6:15:4b:1c:ab:07:c4:4f:90:0c:28:
                    f4:1b:3e:60:8b:00:8b:69:e2:67:49:dd:1f:31:03:
                    92:c9:39:b9:10:6d:07:2d:50:e9:32:0d:2f:0b:dd:
                    f1:ec:f8:e9:92:09:41:9c:d5:0a:c6:38:5b:f7:a7:
                    f2:10:23:38:56:b8:48:79:0f:be:1e:7e:24:75:2b:
                    85:b7:2f:3d:3e:c0:3a:37:e2:f1:78:2d:00:04:d6:
                    38:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:7A:5E:41:0E:04:C2:8C:42:1C:04:E8:FF:22:C0:44:D4:20:35:A1
            X509v3 Authority Key Identifier:
                keyid:CD:BB:2A:B6:D6:32:E9:55:A7:56:95:57:29:10:7E:23:52:C8:82:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmzZf9GHkWkpxePeKTQDyuHHm7YhnrLQjD4QgCTzDn5Y/0/CDBB2AB6D632E955A756955729107E2352C882ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDBB2AB6D632E955A756955729107E2352C882ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmzZf9GHkWkpxePeKTQDyuHHm7YhnrLQjD4QgCTzDn5Y/0/323830343a3430303a3a2f33322d3334203d3e20323632343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:400::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:0f:a0:9b:22:f0:a9:56:11:20:c8:5c:c9:e5:49:b3:fb:b0:
         be:05:1f:2c:92:b5:fc:0b:e2:97:9c:c5:8f:7d:9e:16:a4:f0:
         43:c4:42:a2:7e:e8:fa:d1:51:79:57:d5:ba:39:ec:f3:07:c7:
         a3:af:18:37:9f:4a:34:4b:c8:32:f2:08:9a:35:39:26:ae:76:
         5c:ca:9b:81:ac:62:db:6a:fb:54:b6:07:c1:b9:f8:46:32:43:
         e9:41:6a:4e:43:3f:60:7b:76:a7:55:29:20:3c:6c:00:3f:a8:
         27:ba:aa:5a:98:90:bc:b6:47:15:4b:e4:ad:9b:9f:56:a3:d2:
         16:33:27:cf:14:db:8c:41:4a:bf:ee:7d:94:e2:51:22:b5:83:
         be:1c:d4:73:3b:f8:aa:92:4a:eb:69:bc:f9:ec:da:77:ec:07:
         0b:62:55:1c:03:b0:e6:43:ea:3a:49:01:b8:d8:04:d4:d6:89:
         ba:79:67:13:f4:c1:fc:69:3c:95:9d:0e:dd:5b:30:62:6a:e9:
         77:6f:b2:3e:d6:81:11:e8:d3:3b:a5:d4:6b:e7:c4:56:c7:08:
         7f:65:1c:05:81:df:3e:c5:10:87:ec:ab:76:31:3d:d2:40:16:
         15:81:18:89:0e:4c:8f:b8:9a:b1:04:8e:96:1c:d8:f5:20:dc:
         b9:00:1e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org