Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/2/323830343a326437303a3130303a3a2f34312d3431203d3e20323635323832.roa
File:                     323830343a326437303a3130303a3a2f34312d3431203d3e20323635323832.roa (raw, json)
Hash identifier:          vXzVUSW8dZKFp0vi9PW4XQGWK3Vk3tkqJtjS/3rhfuw=
Subject key identifier:   B6:D2:AB:77:97:55:B9:74:4D:84:74:08:B5:76:B3:53:C1:E6:91:B4
Certificate issuer:       /CN=07F1FCBDB492E328D675670C0CD8C133C236145B
Certificate serial:       4CDB1861695B56961570765CD3089717117D9E8B
Authority key identifier: 07:F1:FC:BD:B4:92:E3:28:D6:75:67:0C:0C:D8:C1:33:C2:36:14:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07F1FCBDB492E328D675670C0CD8C133C236145B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/2/323830343a326437303a3130303a3a2f34312d3431203d3e20323635323832.roa
Signing time:             Fri 07 Jun 2024 20:54:06 +0000
ROA not before:           Fri 07 Jun 2024 20:49:06 +0000
ROA not after:            Fri 06 Jun 2025 20:54:06 +0000
asID:                     265282
IP address blocks:        2804:2d70:100::/41 maxlen: 41

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:db:18:61:69:5b:56:96:15:70:76:5c:d3:08:97:17:11:7d:9e:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07F1FCBDB492E328D675670C0CD8C133C236145B
        Validity
            Not Before: Jun  7 20:49:06 2024 GMT
            Not After : Jun  6 20:54:06 2025 GMT
        Subject: CN=B6D2AB779755B9744D847408B576B353C1E691B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1f:dd:55:70:46:5f:63:fa:f5:7d:41:7a:02:
                    62:54:41:75:8b:02:e0:de:6d:6c:a7:a5:ae:5a:9f:
                    b4:68:69:ed:de:5c:32:bd:7e:ba:0b:55:50:aa:db:
                    60:ae:38:ef:3f:8a:7e:84:3d:5f:c7:27:38:56:dc:
                    ba:d6:77:02:0b:bd:b3:7a:8e:0f:8a:f0:f6:dc:bd:
                    6f:3b:31:69:c7:20:a6:64:72:5c:33:af:4c:78:f4:
                    9a:12:44:4b:bb:38:91:ef:72:8d:50:a1:47:64:34:
                    7c:f2:bd:fd:61:27:d7:a9:b7:e9:21:4d:a5:40:4a:
                    fb:d1:cb:36:33:90:70:c3:fc:ef:ca:82:6c:98:e2:
                    f3:65:8f:0a:71:a2:30:6d:30:c1:dd:a1:62:32:e4:
                    e7:8b:15:58:36:6f:e4:15:57:e0:1a:5e:7a:67:74:
                    bf:55:4c:d8:07:2c:4a:71:f0:67:4d:37:34:2d:08:
                    60:4e:81:2e:db:55:e8:e4:4c:6f:51:1b:f3:12:5d:
                    85:78:ba:3d:b1:c2:f1:c7:6c:d9:93:d6:ec:d6:38:
                    88:a8:07:a6:a3:7a:69:a1:c7:e4:b4:a2:f6:c8:ba:
                    c5:9f:9c:2b:8e:3b:38:d1:c4:a8:4f:df:d8:cb:f9:
                    73:97:47:ed:83:6c:4b:47:b8:01:bf:93:e0:8a:aa:
                    b5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D2:AB:77:97:55:B9:74:4D:84:74:08:B5:76:B3:53:C1:E6:91:B4
            X509v3 Authority Key Identifier:
                keyid:07:F1:FC:BD:B4:92:E3:28:D6:75:67:0C:0C:D8:C1:33:C2:36:14:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/2/07F1FCBDB492E328D675670C0CD8C133C236145B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07F1FCBDB492E328D675670C0CD8C133C236145B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/2/323830343a326437303a3130303a3a2f34312d3431203d3e20323635323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d70:100::/41

    Signature Algorithm: sha256WithRSAEncryption
         2a:0c:d7:55:82:a3:83:ab:c3:63:ce:83:d6:1a:78:d5:a0:6a:
         61:ed:2d:2c:1e:e1:e8:cc:c2:8b:6b:4b:0d:26:c6:f4:a9:ba:
         90:ce:ff:95:0d:2a:6c:5d:59:1b:a6:03:3e:06:af:08:f6:f4:
         de:91:66:0d:a1:07:0c:9a:d9:55:02:2f:7f:99:37:61:1b:5a:
         6e:9e:57:ac:78:80:8c:a0:80:26:ce:28:38:79:b3:b7:3f:16:
         59:4e:1f:59:77:5b:aa:c0:9b:27:d5:30:5d:8a:f0:3b:8b:3b:
         0f:5f:2f:7f:1d:56:56:6e:84:36:1c:9b:2b:4f:69:a8:88:fe:
         73:43:e3:d8:d5:41:ee:d9:19:ff:f5:10:36:5d:5a:d7:42:0a:
         9f:03:d6:cb:66:67:55:fc:3f:bc:90:60:c6:4f:99:50:72:f0:
         21:03:0c:97:e7:e8:85:1c:64:12:51:71:a6:03:2f:f2:6f:6b:
         ec:1a:90:ec:82:96:34:47:f5:ff:38:9a:7b:ae:ad:52:bc:ff:
         c1:43:80:67:74:cd:e9:64:06:08:9a:b9:85:34:73:59:20:8b:
         f3:8f:d8:a7:4a:72:46:9b:18:59:d7:7d:19:2c:14:2e:d6:dd:
         bd:19:d2:6e:25:d8:e9:80:1d:06:bf:8c:82:22:3f:ea:fb:a0:
         60:85:e0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 18:47:32 2024 by rpki-client on console-fra.rpki-client.org