Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/323830343a323463633a383130303a3a2f34302d3430203d3e20323634323432.roa
File:                     323830343a323463633a383130303a3a2f34302d3430203d3e20323634323432.roa (raw, json)
Hash identifier:          oqj9NXU9dQL++6aX6vTqKuuR7Z1TON4kjFeL9+1nh28=
Subject key identifier:   BB:20:A7:30:29:14:F5:4E:E2:36:3F:1A:74:AC:69:21:67:64:66:25
Certificate issuer:       /CN=2DDC7033B45D9754706D162D7FB2C8BEE1A29387
Certificate serial:       7A01E5523B675311592C1F653C8918D754792A87
Authority key identifier: 2D:DC:70:33:B4:5D:97:54:70:6D:16:2D:7F:B2:C8:BE:E1:A2:93:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/323830343a323463633a383130303a3a2f34302d3430203d3e20323634323432.roa
Signing time:             Sat 24 Sep 2022 00:46:39 +0000
ROA not before:           Sat 24 Sep 2022 00:41:39 +0000
ROA not after:            Sat 23 Sep 2023 00:46:39 +0000
asID:                     264242
IP address blocks:        2804:24cc:8100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:01:e5:52:3b:67:53:11:59:2c:1f:65:3c:89:18:d7:54:79:2a:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DDC7033B45D9754706D162D7FB2C8BEE1A29387
        Validity
            Not Before: Sep 24 00:41:39 2022 GMT
            Not After : Sep 23 00:46:39 2023 GMT
        Subject: CN=BB20A7302914F54EE2363F1A74AC692167646625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7e:16:2d:63:11:84:b8:2f:ba:81:71:cd:01:
                    b2:ce:2b:13:3f:1e:2e:7a:40:64:dd:23:3c:47:c1:
                    6d:88:70:1b:aa:9d:85:c5:68:f4:8a:73:fb:84:07:
                    d7:e3:f8:f2:e4:47:42:5e:87:73:6e:47:79:6f:01:
                    2f:d1:8b:67:11:92:3b:f2:6e:7e:d7:26:9d:70:af:
                    b9:3f:f1:85:20:48:87:92:5e:1d:5e:b6:e7:e3:f3:
                    34:a2:b9:6f:65:e1:d7:44:93:19:d7:14:46:6d:c7:
                    33:99:72:a4:e8:0a:51:ba:e5:dd:aa:6e:cc:6d:be:
                    18:0f:e8:75:b5:11:5e:c7:b9:1a:6b:5c:61:80:7c:
                    2d:3d:04:a7:a0:ad:f0:96:31:f7:88:15:4d:99:33:
                    ed:7b:6a:a2:4b:f0:c9:dd:2f:e1:e2:62:b9:a0:b5:
                    44:3a:4d:3f:a0:a0:59:4a:a8:8d:24:a1:1d:39:f7:
                    c7:11:01:08:c1:7f:6c:30:e3:43:b1:dd:1b:06:7b:
                    84:83:ee:49:14:aa:3b:9e:07:46:72:b6:53:7c:a5:
                    ec:b3:d5:68:07:d0:f0:77:4b:58:52:00:d5:17:4d:
                    57:9c:dc:36:cf:e7:94:6b:0d:04:12:b9:c9:08:24:
                    db:d1:70:bd:34:19:52:e5:25:c6:99:60:4d:fd:66:
                    fe:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:20:A7:30:29:14:F5:4E:E2:36:3F:1A:74:AC:69:21:67:64:66:25
            X509v3 Authority Key Identifier:
                keyid:2D:DC:70:33:B4:5D:97:54:70:6D:16:2D:7F:B2:C8:BE:E1:A2:93:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/323830343a323463633a383130303a3a2f34302d3430203d3e20323634323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24cc:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         5e:11:79:9a:05:a3:8f:ed:98:a3:87:a5:61:c6:fb:f5:b4:99:
         51:50:92:19:59:4f:bf:57:15:ba:71:c0:74:b7:d1:2b:10:9b:
         a1:11:4b:b9:85:70:d0:96:d8:da:d8:30:21:81:0c:c4:13:e6:
         a5:3d:3d:db:f3:de:96:c5:e5:22:f2:a4:52:71:94:2c:c5:6e:
         03:53:37:c4:4f:c1:76:ec:09:b7:27:fb:2c:f6:63:f2:03:ef:
         b0:f2:0d:c3:8c:92:70:a1:3e:f9:72:84:a0:16:8b:7c:97:7a:
         9b:44:56:dd:49:3c:88:79:1b:dd:bf:51:13:f8:76:98:84:79:
         91:25:a0:3a:71:16:da:a2:83:39:ad:cc:70:cb:f5:78:61:02:
         37:16:fb:a9:08:24:eb:35:d4:12:a8:3f:4f:de:dd:c2:bc:3b:
         ce:0e:ca:b1:81:c6:ac:28:f7:e1:7c:2d:f3:25:1e:1b:a8:6a:
         e7:4c:d9:df:fb:e5:89:32:86:4f:ad:7a:82:31:fb:52:06:6f:
         e1:d0:35:97:a8:8e:21:aa:03:5d:75:a0:cb:64:60:ce:57:d7:
         ba:54:bf:c0:8e:b5:0c:5c:da:8d:ea:7a:89:17:04:ef:1d:f0:
         fd:ea:47:84:0f:f0:42:03:98:bd:95:77:9f:bb:66:dd:51:35:
         32:b4:14:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org