Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HvodGzqvvhsWEcxJ4wkp59uQqkmiZouMLLwJtb3DjRcp/0/323830343a326436343a3a2f3332203d3e20323635323739.roa
File:                     323830343a326436343a3a2f3332203d3e20323635323739.roa (raw, json)
Hash identifier:          bsxSTJ1+QMRjBGwlkYBGEK/pzgntlUxgm3DELxzcYsc=
Subject key identifier:   C5:C3:B9:90:FF:9B:F8:A1:79:81:A1:1C:95:FD:60:71:AB:09:E4:E0
Certificate issuer:       /CN=146B238EF6DAF2AE1CA8C3C2D6817537A21D2620
Certificate serial:       01AC64B23E1083B15EAEACEBF30C62C24619B6FC
Authority key identifier: 14:6B:23:8E:F6:DA:F2:AE:1C:A8:C3:C2:D6:81:75:37:A2:1D:26:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/146B238EF6DAF2AE1CA8C3C2D6817537A21D2620.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HvodGzqvvhsWEcxJ4wkp59uQqkmiZouMLLwJtb3DjRcp/0/323830343a326436343a3a2f3332203d3e20323635323739.roa
Signing time:             Sun 26 Mar 2023 21:00:00 +0000
ROA not before:           Sun 26 Mar 2023 20:55:00 +0000
ROA not after:            Tue 26 Mar 2024 21:00:00 +0000
asID:                     265279
IP address blocks:        2804:2d64::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ac:64:b2:3e:10:83:b1:5e:ae:ac:eb:f3:0c:62:c2:46:19:b6:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=146B238EF6DAF2AE1CA8C3C2D6817537A21D2620
        Validity
            Not Before: Mar 26 20:55:00 2023 GMT
            Not After : Mar 26 21:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:67:88:de:5e:66:2e:14:a3:20:4b:88:64:21:
                    22:3f:fc:0c:04:cd:ba:8b:d4:f0:5b:2e:be:fc:9f:
                    85:d1:c3:69:d5:ca:c4:27:3d:40:5c:b8:8d:11:29:
                    e4:9d:12:db:ae:38:e0:3f:3a:49:af:42:2d:36:23:
                    17:33:78:cb:19:eb:26:57:79:2a:34:43:8e:2e:0c:
                    bd:96:94:11:42:56:4d:78:ee:0c:51:b5:12:d9:74:
                    62:ab:5b:ba:6c:e0:58:5f:52:38:f6:46:30:a0:b1:
                    44:67:71:77:23:5f:14:e4:68:59:ac:2f:d9:d7:f4:
                    d9:30:40:78:c7:76:50:f9:b0:fc:55:43:94:31:50:
                    11:59:d2:f3:76:6f:b9:e6:ec:b0:e6:3b:d0:cd:ee:
                    bb:e8:a0:e8:45:61:26:20:02:5e:c4:e2:c5:a9:73:
                    d7:e1:3e:e3:a3:b4:0c:4f:6b:bb:79:28:a9:27:d3:
                    80:9b:47:c3:28:b6:af:a7:94:f5:08:f2:c6:8b:1b:
                    50:ca:25:02:40:82:8b:c1:6b:35:5e:05:d2:fe:9b:
                    7d:17:3b:6e:16:ef:27:8c:4d:90:c1:a4:21:41:2d:
                    6b:9a:43:82:57:8b:33:63:4b:46:7f:c4:93:ce:06:
                    26:a4:5b:0c:38:31:06:fe:8e:7b:70:c7:ec:f7:5a:
                    7b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C3:B9:90:FF:9B:F8:A1:79:81:A1:1C:95:FD:60:71:AB:09:E4:E0
            X509v3 Authority Key Identifier:
                keyid:14:6B:23:8E:F6:DA:F2:AE:1C:A8:C3:C2:D6:81:75:37:A2:1D:26:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HvodGzqvvhsWEcxJ4wkp59uQqkmiZouMLLwJtb3DjRcp/0/146B238EF6DAF2AE1CA8C3C2D6817537A21D2620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/146B238EF6DAF2AE1CA8C3C2D6817537A21D2620.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HvodGzqvvhsWEcxJ4wkp59uQqkmiZouMLLwJtb3DjRcp/0/323830343a326436343a3a2f3332203d3e20323635323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d64::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:f5:0b:ca:fb:be:3a:37:81:74:79:70:a1:46:7a:64:56:91:
         a1:51:16:61:20:02:6f:0f:e7:fc:9a:4d:20:54:50:42:37:3f:
         1e:8a:2b:dd:ea:70:33:7f:07:3a:ea:da:e5:fa:5e:d2:6e:a7:
         b7:ba:3b:7c:49:26:50:14:8e:9a:59:fa:42:32:ac:eb:db:73:
         43:98:ee:11:46:d5:5f:c9:80:03:83:b0:ed:dc:b2:53:f7:c4:
         72:db:d4:3f:c1:db:14:1c:5e:df:b4:90:ca:ed:7e:6a:53:c5:
         55:6e:4b:9a:d3:23:93:9e:db:68:e8:fc:07:5b:83:fe:5e:e8:
         2b:56:94:a6:e4:3d:e1:f2:f1:ec:52:9d:a2:a1:89:b7:d6:bc:
         a4:b6:93:37:fe:62:18:a6:40:70:01:00:10:7c:dc:c3:65:38:
         dc:f1:6c:ea:43:46:e9:84:d1:f9:7d:d7:8b:89:42:f2:db:df:
         90:42:53:1f:07:89:9f:89:ab:01:93:bf:c6:ea:9d:d9:08:68:
         da:00:cf:a2:e4:fd:33:c6:d2:35:cf:b9:f0:59:17:6b:4f:29:
         08:2f:f2:e8:fc:0a:b8:02:b7:a1:74:a1:13:b9:b4:97:7b:44:
         68:d8:8e:92:5c:7b:03:b7:9f:43:98:b1:25:4d:a7:0d:00:af:
         04:2d:c6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org