Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a3a2f33362d3336203d3e20323637343230.roa
File:                     323830343a346433633a3a2f33362d3336203d3e20323637343230.roa (raw, json)
Hash identifier:          XDF7dqkscaHwCkC69FSd+qkpizNG71wk8PubXJcKvvU=
Subject key identifier:   C1:23:11:38:5F:5D:9A:00:75:86:BD:DF:DE:BE:BC:D6:1E:EF:6C:D2
Certificate issuer:       /CN=B2F685BA3B817D927E5EC7B38BBE08A5BD45EB47
Certificate serial:       317F2B52021CE36E4C35A4AABC3DA385A0CA8ACB
Authority key identifier: B2:F6:85:BA:3B:81:7D:92:7E:5E:C7:B3:8B:BE:08:A5:BD:45:EB:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2F685BA3B817D927E5EC7B38BBE08A5BD45EB47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a3a2f33362d3336203d3e20323637343230.roa
Signing time:             Tue 02 May 2023 21:58:06 +0000
ROA not before:           Tue 02 May 2023 21:53:06 +0000
ROA not after:            Tue 30 Apr 2024 21:58:06 +0000
asID:                     267420
IP address blocks:        2804:4d3c::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:7f:2b:52:02:1c:e3:6e:4c:35:a4:aa:bc:3d:a3:85:a0:ca:8a:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2F685BA3B817D927E5EC7B38BBE08A5BD45EB47
        Validity
            Not Before: May  2 21:53:06 2023 GMT
            Not After : Apr 30 21:58:06 2024 GMT
        Subject: CN=C12311385F5D9A007586BDDFDEBEBCD61EEF6CD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:4e:8f:1f:9a:5c:79:f0:39:62:b7:27:37:c9:
                    59:41:1a:c5:f0:63:e2:1c:b5:cd:21:a8:70:54:d3:
                    b5:22:55:c4:37:12:bd:93:de:cb:c7:a5:f5:aa:c7:
                    87:d2:29:be:56:6e:ed:66:dd:be:49:d9:4a:17:c4:
                    d2:3d:d7:fa:df:95:3b:03:f6:c0:2f:d6:f0:3c:e2:
                    81:71:f7:40:6f:93:53:c8:a0:32:2c:93:7f:1f:11:
                    26:2d:85:c8:16:3b:fa:4c:99:62:2c:42:f1:0e:a6:
                    82:a4:c0:9c:6c:a7:d8:fc:5e:0c:e6:59:51:6b:7c:
                    2b:5f:d4:e0:79:46:29:cb:e9:85:23:a6:b9:cf:96:
                    d0:e7:4e:94:90:f5:f3:02:ba:32:9f:66:52:8c:45:
                    52:ff:19:d0:20:04:74:61:bf:c7:3a:07:e1:d5:18:
                    a1:51:42:bb:c2:e3:f5:5f:36:bd:dc:57:de:42:da:
                    b5:7f:a1:00:8d:5e:53:eb:66:13:0d:e3:0f:3c:5b:
                    05:35:a7:24:23:5a:47:7d:9b:02:a2:ff:85:84:11:
                    9f:18:c9:92:d4:ce:04:e8:9d:82:76:70:93:d1:59:
                    6a:55:34:95:12:16:81:1e:2b:91:3f:f9:5f:77:28:
                    06:bd:b1:f2:36:3c:7c:e0:53:e3:41:02:67:c4:d0:
                    5c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:23:11:38:5F:5D:9A:00:75:86:BD:DF:DE:BE:BC:D6:1E:EF:6C:D2
            X509v3 Authority Key Identifier:
                keyid:B2:F6:85:BA:3B:81:7D:92:7E:5E:C7:B3:8B:BE:08:A5:BD:45:EB:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/B2F685BA3B817D927E5EC7B38BBE08A5BD45EB47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2F685BA3B817D927E5EC7B38BBE08A5BD45EB47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a3a2f33362d3336203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c::/36

    Signature Algorithm: sha256WithRSAEncryption
         56:48:65:b3:33:a5:db:5f:91:7e:d8:6f:71:cc:7b:ad:e4:29:
         ae:61:9d:29:4b:e2:4d:6d:9d:6a:45:22:56:88:2a:4c:e6:3a:
         8a:d8:f1:2f:5b:de:f0:87:36:22:39:b2:24:30:93:1d:86:8f:
         45:44:00:50:1b:5e:85:6d:02:3d:3f:8b:5d:9b:53:6c:c3:87:
         de:6e:c8:0a:10:d7:0d:f2:0d:9b:8b:0c:56:6d:72:a1:88:9b:
         4c:e9:dd:52:df:45:1d:88:ac:a6:21:b0:b0:31:0c:31:c5:1e:
         60:b1:41:37:59:de:b0:b1:28:c1:4f:44:10:e5:50:92:76:67:
         fa:99:ee:c8:25:9b:b6:da:a4:6b:2f:ab:33:0b:76:bf:cd:7c:
         3f:59:30:6d:06:7d:56:55:dd:84:5a:a8:a3:7b:a5:f7:2f:ca:
         7a:b0:45:ee:d5:7f:04:9a:30:7f:6f:82:5d:6c:22:51:5f:aa:
         c6:9f:4c:32:95:ae:ad:d5:68:46:0d:ae:3b:ca:21:5a:dd:54:
         9d:c7:4a:89:9d:1e:9f:25:1d:16:a8:a1:6d:42:c1:c8:db:db:
         85:4d:c7:a5:70:6c:a5:b4:02:27:34:ca:5a:14:e6:f9:3b:51:
         6b:5c:05:8a:19:aa:13:8c:b9:12:c9:f6:ed:77:1a:f6:e6:ea:
         2e:3a:78:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org