Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/2/323830343a363435633a3a2f33332d3333203d3e20323639343233.roa
File:                     323830343a363435633a3a2f33332d3333203d3e20323639343233.roa (raw, json)
Hash identifier:          L8oGxg6hjgiMa7jZNOgT/gyoCtdr12eFwcuVsDsLxyY=
Subject key identifier:   1A:A2:C5:35:53:A0:61:E8:76:84:6F:7B:7F:00:B8:86:5A:72:4A:51
Certificate issuer:       /CN=D037231865C4494DAE0A707D2C8705DFEDDA26FF
Certificate serial:       7C54C23D02DA18CF46C783BE0C8F6EC7407CF7A5
Authority key identifier: D0:37:23:18:65:C4:49:4D:AE:0A:70:7D:2C:87:05:DF:ED:DA:26:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D037231865C4494DAE0A707D2C8705DFEDDA26FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/2/323830343a363435633a3a2f33332d3333203d3e20323639343233.roa
Signing time:             Wed 03 Apr 2024 22:27:39 +0000
ROA not before:           Wed 03 Apr 2024 22:22:39 +0000
ROA not after:            Wed 02 Apr 2025 22:27:39 +0000
asID:                     269423
IP address blocks:        2804:645c::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:54:c2:3d:02:da:18:cf:46:c7:83:be:0c:8f:6e:c7:40:7c:f7:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D037231865C4494DAE0A707D2C8705DFEDDA26FF
        Validity
            Not Before: Apr  3 22:22:39 2024 GMT
            Not After : Apr  2 22:27:39 2025 GMT
        Subject: CN=1AA2C53553A061E876846F7B7F00B8865A724A51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:86:9b:56:da:55:be:40:dc:4c:36:e9:be:c0:
                    3c:e5:ab:5f:e0:bb:ea:7e:86:83:ef:e1:ab:22:8e:
                    48:78:60:82:79:18:b4:da:ec:0b:23:fb:e2:60:85:
                    94:c5:6d:72:1f:6b:12:30:01:1d:6e:b4:fe:6f:eb:
                    25:9d:0a:84:f5:01:42:8f:80:35:4d:f0:8a:7f:b2:
                    a9:5a:ae:fe:a9:31:08:78:89:f3:f0:e8:e7:36:9c:
                    c6:0f:15:63:5b:1e:5a:27:bb:32:48:c3:08:a9:f7:
                    9e:5d:e1:d3:d6:68:0e:c3:9e:dd:f8:55:a8:0f:89:
                    67:88:ea:59:af:f4:95:17:10:8f:29:b7:ab:cd:c1:
                    a9:7d:37:63:0a:78:df:8f:2e:55:03:be:5e:c7:6d:
                    98:62:72:ed:e0:24:4f:75:0b:1a:1b:cf:37:a1:47:
                    b8:2d:7e:76:b5:2d:5b:7a:d7:c0:57:a6:92:14:dd:
                    e1:07:b2:05:c7:79:a8:1d:6e:29:46:93:37:c3:32:
                    94:b7:4b:a6:f4:89:03:20:34:35:97:be:72:9f:b7:
                    b9:f7:f7:96:7c:26:79:30:58:cd:3d:a6:62:f7:36:
                    70:e3:80:34:03:1f:53:b8:d3:85:44:e6:23:fb:2c:
                    e2:49:38:79:ef:26:94:e1:2c:c1:c3:49:25:5f:e8:
                    d6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A2:C5:35:53:A0:61:E8:76:84:6F:7B:7F:00:B8:86:5A:72:4A:51
            X509v3 Authority Key Identifier:
                keyid:D0:37:23:18:65:C4:49:4D:AE:0A:70:7D:2C:87:05:DF:ED:DA:26:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/2/D037231865C4494DAE0A707D2C8705DFEDDA26FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D037231865C4494DAE0A707D2C8705DFEDDA26FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/2/323830343a363435633a3a2f33332d3333203d3e20323639343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:645c::/33

    Signature Algorithm: sha256WithRSAEncryption
         29:5f:21:27:45:85:1f:13:c3:bb:b5:91:2a:6a:2d:56:42:a9:
         a2:ee:cf:37:dd:65:a2:87:38:e5:58:09:40:7d:52:57:3d:f2:
         5e:b8:3d:f0:3a:1a:3a:06:66:54:f4:46:8f:9f:1f:f8:b7:ef:
         01:db:b9:31:4b:c0:95:0e:fe:24:2c:22:8a:09:28:41:91:27:
         85:34:74:69:b9:37:57:60:ca:ce:0f:48:5f:0d:4d:a3:4a:e6:
         9d:87:0b:6e:21:18:48:a3:e1:83:9f:9b:48:8a:e3:d2:0a:9f:
         4b:c6:9e:9a:ea:f2:c1:21:87:e3:77:94:69:38:fa:02:36:09:
         77:33:a6:9f:e8:aa:d7:52:66:99:4b:dd:83:5e:a7:ef:f7:6e:
         79:f2:bb:18:0d:b6:4d:fb:16:d4:ad:1b:84:28:a9:8c:11:56:
         51:b1:05:9a:75:e5:0e:96:b5:73:6c:b4:73:18:26:7d:67:b7:
         30:2c:2a:ef:99:f5:82:13:30:67:16:69:de:46:e0:15:7c:d0:
         90:a3:33:06:3a:16:a7:11:82:90:f0:f9:09:ce:9e:79:30:3d:
         09:c7:c9:17:84:35:f5:26:97:9b:54:00:81:a4:63:ea:36:48:
         98:26:80:fe:7b:9d:ab:f1:f4:31:65:51:1c:c5:ca:51:5d:71:
         39:4f:e1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org