Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/323830343a333766383a383030303a3a2f33332d3333203d3e20323636343437.roa
File:                     323830343a333766383a383030303a3a2f33332d3333203d3e20323636343437.roa (raw, json)
Hash identifier:          qK2eeMQrwlEhwgtKprJMi/JVPC+rplMMDRXfPincw1Y=
Subject key identifier:   AE:BD:1F:D0:39:04:67:9C:2E:14:78:6E:65:8C:86:E1:F9:C8:CC:72
Certificate issuer:       /CN=77DFC580E6F8C352C451D04DDD8B9E42C5B25745
Certificate serial:       66044E6482A47D64CD3E956A14A5BEC72CE7E632
Authority key identifier: 77:DF:C5:80:E6:F8:C3:52:C4:51:D0:4D:DD:8B:9E:42:C5:B2:57:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77DFC580E6F8C352C451D04DDD8B9E42C5B25745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/323830343a333766383a383030303a3a2f33332d3333203d3e20323636343437.roa
Signing time:             Sat 10 Feb 2024 15:27:45 +0000
ROA not before:           Sat 10 Feb 2024 15:22:45 +0000
ROA not after:            Sat 08 Feb 2025 15:27:45 +0000
asID:                     266447
IP address blocks:        2804:37f8:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:04:4e:64:82:a4:7d:64:cd:3e:95:6a:14:a5:be:c7:2c:e7:e6:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77DFC580E6F8C352C451D04DDD8B9E42C5B25745
        Validity
            Not Before: Feb 10 15:22:45 2024 GMT
            Not After : Feb  8 15:27:45 2025 GMT
        Subject: CN=AEBD1FD03904679C2E14786E658C86E1F9C8CC72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:72:be:83:05:25:85:3d:a9:ee:29:70:af:0b:
                    12:ab:ff:a8:16:42:a1:14:cb:62:f1:7a:41:1c:0f:
                    18:69:a4:16:3d:17:c2:2f:23:03:b7:f3:9e:7e:66:
                    6e:70:36:f8:20:ed:5c:49:eb:48:b8:51:83:20:1e:
                    d1:eb:fc:d7:b8:08:a7:93:f2:40:87:e9:12:49:fb:
                    52:09:7b:7d:a6:5e:2c:3f:c8:25:57:c4:48:58:36:
                    cd:0c:06:c9:20:a0:84:10:68:d9:e3:ce:8b:73:52:
                    b8:f3:42:f8:7a:5a:52:95:20:67:21:ef:c1:a5:92:
                    94:0d:63:e8:50:0a:38:b4:42:03:92:bb:eb:c4:a8:
                    86:6a:a6:17:dd:dc:79:65:a2:43:b8:7a:c6:17:ee:
                    67:03:90:af:55:a0:4c:6c:eb:70:43:e3:d9:4b:ff:
                    1c:2a:07:03:cf:a0:88:0a:dd:48:77:89:c8:d0:7b:
                    e0:16:f2:1f:5c:e3:d2:93:e1:c2:e7:5c:06:63:77:
                    42:80:1f:5f:a1:1d:a3:12:d9:0a:a1:67:ab:cc:3d:
                    d3:09:ef:ba:4d:83:89:29:aa:dc:4a:b5:83:52:ca:
                    a0:32:3b:18:71:f0:26:82:68:5c:2a:3c:93:48:c7:
                    74:8e:eb:fb:4f:8c:38:c7:1a:01:f2:a7:26:bf:b1:
                    c5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:BD:1F:D0:39:04:67:9C:2E:14:78:6E:65:8C:86:E1:F9:C8:CC:72
            X509v3 Authority Key Identifier:
                keyid:77:DF:C5:80:E6:F8:C3:52:C4:51:D0:4D:DD:8B:9E:42:C5:B2:57:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/77DFC580E6F8C352C451D04DDD8B9E42C5B25745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77DFC580E6F8C352C451D04DDD8B9E42C5B25745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/323830343a333766383a383030303a3a2f33332d3333203d3e20323636343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37f8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         aa:01:0a:08:7d:9d:12:87:eb:53:d9:0c:7f:40:ed:c7:7e:0b:
         9a:98:4e:bc:6f:e7:15:8a:c0:f9:9c:43:4c:9d:75:3e:2a:86:
         7f:6e:93:61:40:18:b4:44:bd:35:9f:4d:0b:1a:88:07:b0:e5:
         07:b2:7e:60:d6:ac:d1:90:15:84:81:fc:86:dc:c8:8c:f8:e1:
         73:4e:51:e6:96:2f:9a:6e:1e:e1:cc:38:00:c1:02:c0:14:0c:
         09:ef:39:e8:42:29:de:d5:5e:37:40:e7:e5:e9:27:a2:5a:75:
         35:a9:ae:c6:1c:0a:fd:a6:99:70:f9:fc:54:c5:69:bb:68:db:
         dd:b2:f0:70:dd:b3:2e:4b:85:a5:23:94:a7:02:46:ce:52:e8:
         8a:bb:2d:bf:78:be:92:00:6b:15:e4:07:59:53:00:e8:ea:4b:
         a4:55:0f:64:32:fa:f2:31:8d:0c:e0:06:0e:1c:19:f9:5a:cb:
         41:08:8b:0a:cb:7c:b3:b7:8d:26:09:ed:3d:01:02:e6:f5:dc:
         81:a4:ed:54:c2:8e:f4:f2:2a:23:e1:3d:63:1f:21:b4:d1:0d:
         28:01:cd:76:01:d7:62:0f:fe:19:c5:14:ad:0e:df:c0:69:84:
         92:46:50:59:e6:75:22:e4:32:da:e2:e3:6d:c5:cc:23:e2:00:
         fd:1b:fe:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org