Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/323830343a373935383a3a2f33322d3332203d3e20323731333030.roa
File:                     323830343a373935383a3a2f33322d3332203d3e20323731333030.roa (raw, json)
Hash identifier:          225hhJMfZW6NZbH+gXmq7g+qI0njDYCtJQMRqsacvfk=
Subject key identifier:   3A:36:1F:A3:14:25:23:0B:17:10:32:39:F8:7B:50:C8:5F:A6:C8:44
Certificate issuer:       /CN=1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE
Certificate serial:       3F444A4122BEF984D49EAFCCCEE3C42BF129B405
Authority key identifier: 1F:4B:1E:0C:20:F0:C0:9B:8D:55:60:7B:8F:94:B6:D9:AD:15:67:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/323830343a373935383a3a2f33322d3332203d3e20323731333030.roa
Signing time:             Wed 09 Nov 2022 20:12:49 +0000
ROA not before:           Wed 09 Nov 2022 20:07:49 +0000
ROA not after:            Wed 08 Nov 2023 20:12:49 +0000
asID:                     271300
IP address blocks:        2804:7958::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:44:4a:41:22:be:f9:84:d4:9e:af:cc:ce:e3:c4:2b:f1:29:b4:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE
        Validity
            Not Before: Nov  9 20:07:49 2022 GMT
            Not After : Nov  8 20:12:49 2023 GMT
        Subject: CN=3A361FA31425230B17103239F87B50C85FA6C844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7b:6c:19:1e:a7:93:99:2c:0d:8b:72:14:62:
                    9d:64:12:3a:7c:95:07:e9:7c:4d:25:2d:8c:09:56:
                    f2:c4:08:ad:63:88:b6:1d:9a:f6:6a:5a:03:3f:41:
                    ad:a1:1b:2b:ff:77:12:f1:f2:36:dc:e6:09:58:6f:
                    19:91:f7:ee:68:49:7f:a5:27:a1:f7:48:db:8e:40:
                    e1:13:98:53:40:0d:76:d9:d6:f4:82:98:c5:a5:1c:
                    86:48:df:99:8a:32:a7:e6:13:ff:f7:36:5b:be:81:
                    f2:e4:ea:aa:c5:2e:9b:95:67:1b:8f:8e:23:26:50:
                    f1:5d:44:9a:42:11:b4:42:32:38:bf:17:3c:2f:24:
                    06:f3:b6:d2:c0:73:6b:3d:07:52:ff:5d:25:90:1c:
                    cd:ea:7c:51:22:c1:e1:4e:34:07:87:d8:cd:75:47:
                    0f:c1:f4:02:9e:48:2a:31:f3:34:66:56:0c:25:09:
                    1b:c6:13:52:70:aa:69:00:7d:64:56:56:1e:86:8d:
                    2f:34:5c:10:a5:e9:84:a1:ae:79:69:f5:aa:09:11:
                    ca:c8:48:ee:e5:1a:9a:7f:11:c2:d3:57:6f:53:e6:
                    1c:91:72:0d:d8:72:34:0f:f8:ea:aa:0c:b6:96:c5:
                    c0:ee:bb:fe:7f:d5:24:fd:e8:72:10:96:b6:9c:34:
                    49:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:36:1F:A3:14:25:23:0B:17:10:32:39:F8:7B:50:C8:5F:A6:C8:44
            X509v3 Authority Key Identifier:
                keyid:1F:4B:1E:0C:20:F0:C0:9B:8D:55:60:7B:8F:94:B6:D9:AD:15:67:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/323830343a373935383a3a2f33322d3332203d3e20323731333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7958::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:8a:3f:ae:f1:b3:2d:09:99:cc:78:2d:2e:de:70:0f:03:73:
         f3:ea:8d:88:0f:5f:0e:6f:51:38:35:f7:9d:cf:0b:85:1a:9e:
         44:ab:07:0b:9c:b9:d6:e7:9b:a4:84:e9:92:74:3a:ef:2b:51:
         9c:e8:6a:c0:41:81:30:23:ce:96:68:e7:91:89:46:06:bc:1d:
         cf:d5:91:1c:11:8c:13:82:83:94:20:23:45:f3:2e:0e:ef:9a:
         93:62:68:c9:33:16:de:77:31:ce:56:cb:81:e2:df:b4:21:25:
         c7:4c:64:dc:54:98:d3:df:af:f1:83:d5:40:9a:50:57:d1:01:
         72:31:6e:97:2d:51:2f:fc:7d:38:d6:c0:f2:91:3c:07:d2:0d:
         6d:eb:8e:d5:c2:0a:fd:a5:05:f3:64:fd:13:34:be:07:f0:bf:
         fa:c3:a8:78:d3:b0:b6:bb:3b:10:f9:9c:89:73:36:bf:27:b7:
         bf:9b:70:86:41:a0:7c:24:e5:28:5d:1a:3a:e1:8b:f7:07:81:
         4a:dc:77:cc:31:52:70:e3:17:dc:fe:6f:3e:d2:79:77:09:20:
         1a:72:e9:71:2c:eb:6c:6e:0c:50:eb:c7:fc:2c:4f:09:0c:0e:
         5d:33:b0:e3:14:84:50:e5:07:fd:03:8e:d4:c4:4b:5a:8d:1e:
         dc:b4:0c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org