Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/323830343a343761343a3530303a3a2f3430203d3e20323637303637.roa
File:                     323830343a343761343a3530303a3a2f3430203d3e20323637303637.roa (raw, json)
Hash identifier:          eNTjNGa8Nlwwm+hUx+e/l5UdAdsUaZBMPwFmTUBawj0=
Subject key identifier:   6B:71:67:CE:1B:9C:55:6D:BD:50:2C:3E:8D:8C:A1:F7:68:2B:DA:22
Certificate issuer:       /CN=ABE2B87282296266F69CE04223629CFC8BFD6354
Certificate serial:       3963F63FE28E5A964D0B0FCBB1D3B5674A12B509
Authority key identifier: AB:E2:B8:72:82:29:62:66:F6:9C:E0:42:23:62:9C:FC:8B:FD:63:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ABE2B87282296266F69CE04223629CFC8BFD6354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/323830343a343761343a3530303a3a2f3430203d3e20323637303637.roa
Signing time:             Wed 06 Jul 2022 19:00:00 +0000
ROA not before:           Wed 06 Jul 2022 18:55:00 +0000
ROA not after:            Thu 06 Jul 2023 19:00:00 +0000
asID:                     267067
IP address blocks:        2804:47a4:500::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:63:f6:3f:e2:8e:5a:96:4d:0b:0f:cb:b1:d3:b5:67:4a:12:b5:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABE2B87282296266F69CE04223629CFC8BFD6354
        Validity
            Not Before: Jul  6 18:55:00 2022 GMT
            Not After : Jul  6 19:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:33:42:1f:77:d3:05:62:b2:cd:6a:b7:e0:3c:
                    dc:24:b0:5a:99:cc:3a:2c:cd:39:49:1d:a5:bc:13:
                    9f:ff:e8:3f:19:e7:60:38:c2:c0:10:f5:6f:c4:75:
                    a0:ee:b3:d4:1d:35:2b:0c:ba:ec:96:1d:63:84:4b:
                    fd:77:08:59:14:2f:d5:a6:05:73:9c:d3:ca:49:a9:
                    34:b9:6d:0a:7b:2c:05:01:f6:9a:20:bd:85:88:1c:
                    8b:21:a6:bb:00:88:63:32:07:7b:14:d8:68:ec:2c:
                    9e:cb:d7:d2:5e:c3:e2:0c:21:91:b5:90:5e:58:35:
                    d0:a5:51:03:ea:9a:4f:3f:e9:36:47:92:1f:c2:20:
                    ca:4a:71:50:92:56:66:16:0b:1a:0e:b4:b8:1a:b4:
                    1e:95:5a:9e:f5:97:db:a4:2a:b6:e8:3b:1a:c6:6d:
                    1b:9d:ad:87:8c:f5:ab:66:0c:86:22:08:f1:36:b8:
                    44:9f:ec:17:ef:50:96:94:2b:0e:42:72:8b:8a:c5:
                    94:a9:d3:15:3c:09:a3:b2:87:15:42:2a:ed:58:5a:
                    36:d4:64:e1:a7:cb:b6:26:34:e4:10:31:ab:4b:57:
                    a8:4b:5e:eb:49:a3:26:89:c0:03:52:11:de:98:88:
                    3b:ed:14:1c:87:cd:77:2d:fd:c1:c6:f1:bc:48:ae:
                    d8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:71:67:CE:1B:9C:55:6D:BD:50:2C:3E:8D:8C:A1:F7:68:2B:DA:22
            X509v3 Authority Key Identifier:
                keyid:AB:E2:B8:72:82:29:62:66:F6:9C:E0:42:23:62:9C:FC:8B:FD:63:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/ABE2B87282296266F69CE04223629CFC8BFD6354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ABE2B87282296266F69CE04223629CFC8BFD6354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/323830343a343761343a3530303a3a2f3430203d3e20323637303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47a4:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         34:36:e6:2b:14:f9:c3:1b:cb:f1:2e:94:91:9a:18:87:98:cf:
         80:9b:cd:0f:1a:24:c3:b3:5e:c2:de:48:23:bb:20:1d:f9:34:
         d0:df:34:bc:16:26:a0:f8:ab:20:28:0c:d3:e0:63:5e:1b:7b:
         09:9c:0a:6c:31:64:09:a4:ff:67:95:5b:1b:d4:6e:d1:c7:9c:
         c7:26:da:93:fd:96:08:a7:78:6a:37:77:0e:3f:38:a0:9f:14:
         19:1e:ee:14:b1:c5:38:07:3f:61:2d:0d:b7:47:b2:13:5f:0e:
         aa:10:36:2a:bb:d5:e8:ba:81:77:26:f6:3e:2f:18:66:f3:a3:
         c8:77:46:10:4e:53:74:0e:e9:71:3b:5d:78:bb:1b:ae:b1:61:
         82:a2:ce:ba:a1:51:84:90:57:54:07:1d:17:15:a2:d1:a0:f2:
         ca:cc:cc:6d:6c:7e:8d:00:2a:52:c3:18:03:8a:fb:7b:8d:01:
         14:80:92:c6:4a:45:b7:37:a5:d7:a2:56:e2:14:d3:43:69:3c:
         b0:9a:60:20:ca:3d:05:eb:a9:70:9f:83:5e:2b:a2:89:76:b6:
         de:c0:70:80:67:d0:33:43:0e:3e:09:12:fc:ee:25:fd:0f:f0:
         5c:e3:16:79:bd:91:e7:b7:36:4b:36:bc:3d:ca:a8:74:62:5b:
         65:6c:88:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org