Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/323830343a343761343a3230303a3a2f3430203d3e20323637303637.roa
File:                     323830343a343761343a3230303a3a2f3430203d3e20323637303637.roa (raw, json)
Hash identifier:          X7O0+RyRVq8bzxEVPdVX4KRyHHwlEa7yNxcA1zaxavY=
Subject key identifier:   73:7E:66:4E:92:D2:12:AA:FD:C4:70:B3:D8:97:A3:C2:98:51:AA:7D
Certificate issuer:       /CN=ABE2B87282296266F69CE04223629CFC8BFD6354
Certificate serial:       1534F92771F31CA5F69A13F9EBF3A32524841C47
Authority key identifier: AB:E2:B8:72:82:29:62:66:F6:9C:E0:42:23:62:9C:FC:8B:FD:63:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ABE2B87282296266F69CE04223629CFC8BFD6354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/323830343a343761343a3230303a3a2f3430203d3e20323637303637.roa
Signing time:             Thu 02 Dec 2021 18:00:01 +0000
ROA not before:           Thu 02 Dec 2021 17:55:01 +0000
ROA not after:            Fri 02 Dec 2022 18:00:01 +0000
asID:                     267067
IP address blocks:        2804:47a4:200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:34:f9:27:71:f3:1c:a5:f6:9a:13:f9:eb:f3:a3:25:24:84:1c:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABE2B87282296266F69CE04223629CFC8BFD6354
        Validity
            Not Before: Dec  2 17:55:01 2021 GMT
            Not After : Dec  2 18:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:3e:d2:cc:d7:de:be:fb:e9:cd:f4:45:bc:e7:
                    22:9a:db:06:db:40:e5:9c:6d:b2:50:4c:ff:8c:4b:
                    3f:1e:82:b3:c7:91:0c:a9:83:09:91:02:28:6b:71:
                    ff:c8:5a:01:e7:da:55:af:3a:00:bf:16:60:1c:e1:
                    ff:17:f8:fa:4f:0c:0b:f5:4a:fe:dd:88:41:d3:70:
                    f6:e3:c0:86:33:dc:a4:74:66:ef:7d:c2:68:70:2c:
                    ed:ed:49:da:8e:ad:5c:f8:b3:81:8e:3a:78:4e:47:
                    cc:6c:4f:60:54:bd:38:dd:b4:f0:bf:c9:fe:58:30:
                    7e:28:8e:3b:20:23:53:51:32:81:f1:1d:7f:0e:dd:
                    8e:45:d5:f3:d8:f0:35:d5:a5:84:fd:61:20:51:58:
                    82:b4:a0:b1:7c:6d:89:a7:0d:99:5b:f1:6c:06:ce:
                    8d:1d:d0:29:02:9c:7b:c5:6d:ee:8c:9e:27:eb:2b:
                    09:19:f5:21:fe:99:c8:13:74:4d:7e:22:92:65:43:
                    ef:7c:b6:f8:72:8b:ac:b3:6a:0e:4d:44:5e:7a:99:
                    0f:5e:fe:08:58:14:08:b0:4a:81:4d:0e:6e:4e:2f:
                    2d:c3:12:50:91:64:68:be:67:e1:64:83:93:6a:c8:
                    47:91:8a:3e:8b:a1:91:7a:86:51:45:ce:d1:3c:9a:
                    55:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:7E:66:4E:92:D2:12:AA:FD:C4:70:B3:D8:97:A3:C2:98:51:AA:7D
            X509v3 Authority Key Identifier:
                keyid:AB:E2:B8:72:82:29:62:66:F6:9C:E0:42:23:62:9C:FC:8B:FD:63:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/ABE2B87282296266F69CE04223629CFC8BFD6354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ABE2B87282296266F69CE04223629CFC8BFD6354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/323830343a343761343a3230303a3a2f3430203d3e20323637303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47a4:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         4f:ff:e7:6b:3c:8e:f3:51:be:0a:f8:03:b2:82:6a:54:71:44:
         4a:04:46:84:54:81:9b:c0:02:d6:b8:eb:83:8a:66:43:df:c5:
         c4:f5:5d:b2:50:8d:d0:3b:c9:14:c6:e6:5f:c3:d0:8a:c5:5a:
         ce:9b:95:b9:3a:6b:ca:e1:39:03:7c:55:e6:64:77:84:02:58:
         67:e7:f6:a6:6a:4c:9c:7d:ff:26:a5:07:dc:fd:19:29:7c:38:
         95:5d:dc:c3:86:d7:03:cc:12:ca:be:47:82:e8:7a:4e:8c:f6:
         d6:6b:99:27:d8:73:dd:4d:20:34:4c:7a:3d:55:9d:14:c4:80:
         6e:46:44:72:ed:0f:75:93:33:7e:02:03:40:7d:68:31:60:1e:
         78:d2:c2:1a:c7:6b:7a:c3:56:36:2f:0b:e1:05:ac:dc:0f:60:
         f2:7d:a4:b3:ce:8f:54:be:2d:4f:87:28:a2:0e:95:a9:a3:98:
         f6:e1:c2:82:ae:f1:0c:b4:11:fa:88:42:91:96:73:e1:48:6e:
         a6:6e:8e:96:91:a7:d3:c6:fe:83:85:39:6b:8e:3e:7e:2b:e3:
         c7:f9:e3:a2:14:7f:89:f4:e2:17:47:85:1e:50:0e:56:bb:5f:
         4c:81:9f:0f:f3:39:e8:8e:5c:89:25:b7:0f:ef:33:27:ce:4c:
         48:95:95:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org