Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/323830343a323463633a383430303a3a2f34302d3430203d3e20323634323432.roa
File:                     323830343a323463633a383430303a3a2f34302d3430203d3e20323634323432.roa (raw, json)
Hash identifier:          Vsbm8cQ+AsqXAT52xsjFRcZh96bE5oCMOvB0sN2apFI=
Subject key identifier:   10:09:05:D3:78:A4:8F:A0:B5:22:8C:F2:B0:F2:AA:11:F8:09:E3:27
Certificate issuer:       /CN=2DDC7033B45D9754706D162D7FB2C8BEE1A29387
Certificate serial:       83A1BB2B33B08DD0DC2661CF6CB044ED096871
Authority key identifier: 2D:DC:70:33:B4:5D:97:54:70:6D:16:2D:7F:B2:C8:BE:E1:A2:93:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/323830343a323463633a383430303a3a2f34302d3430203d3e20323634323432.roa
Signing time:             Sat 24 Sep 2022 00:46:39 +0000
ROA not before:           Sat 24 Sep 2022 00:41:39 +0000
ROA not after:            Sat 23 Sep 2023 00:46:39 +0000
asID:                     264242
IP address blocks:        2804:24cc:8400::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            83:a1:bb:2b:33:b0:8d:d0:dc:26:61:cf:6c:b0:44:ed:09:68:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DDC7033B45D9754706D162D7FB2C8BEE1A29387
        Validity
            Not Before: Sep 24 00:41:39 2022 GMT
            Not After : Sep 23 00:46:39 2023 GMT
        Subject: CN=100905D378A48FA0B5228CF2B0F2AA11F809E327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bc:cd:71:b1:73:f3:4c:19:c4:22:d8:c3:86:
                    a4:f2:73:ea:21:83:a1:79:49:76:84:03:52:6a:a4:
                    ad:d3:26:3e:10:b1:fa:05:14:d4:7e:a1:dd:13:a5:
                    4f:f8:44:4b:02:45:f2:5c:63:48:f2:28:f8:94:f3:
                    0c:94:eb:34:ad:98:ae:85:60:d8:89:18:44:a8:b9:
                    60:30:5a:00:ce:81:57:91:f7:62:e9:f2:6f:8a:74:
                    6a:8c:76:ff:fc:f5:b5:61:16:a9:bd:a5:91:b5:cb:
                    2d:f3:6c:9e:51:ef:02:69:62:42:02:8e:6f:6f:d8:
                    b1:64:88:0c:5e:72:82:0c:43:f2:02:ee:92:5b:a9:
                    5d:79:a0:91:d8:cf:6e:d0:7e:8c:3f:a0:db:e5:9a:
                    94:8c:68:06:50:4a:96:0c:f8:ab:06:fc:21:5e:4e:
                    95:83:ff:49:cf:02:93:17:66:18:f7:f1:60:6a:86:
                    04:02:1c:e9:a4:51:b6:96:0b:7a:c7:5b:9d:1d:c9:
                    34:9b:f5:2c:3e:41:5e:e6:3b:48:ee:d6:39:d4:47:
                    37:7e:eb:75:61:5a:bc:ab:8d:18:18:06:4b:32:f2:
                    b5:50:69:28:93:1c:2e:87:cd:6e:cc:5b:12:51:30:
                    3f:51:31:c3:a2:7c:ea:12:c4:56:a7:87:d9:d1:72:
                    87:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:09:05:D3:78:A4:8F:A0:B5:22:8C:F2:B0:F2:AA:11:F8:09:E3:27
            X509v3 Authority Key Identifier:
                keyid:2D:DC:70:33:B4:5D:97:54:70:6D:16:2D:7F:B2:C8:BE:E1:A2:93:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/323830343a323463633a383430303a3a2f34302d3430203d3e20323634323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24cc:8400::/40

    Signature Algorithm: sha256WithRSAEncryption
         8d:6e:99:55:bc:7d:ff:5b:ef:6a:38:22:45:78:ec:ff:55:c5:
         8a:fd:2a:48:2a:1a:d2:12:cb:f7:3c:7e:64:97:84:8e:fc:85:
         5b:c4:f6:cf:1a:3c:89:2c:18:21:d9:93:33:aa:c2:6f:af:e7:
         a1:23:3b:19:45:d2:d1:24:e9:f3:d7:31:bc:fe:43:58:33:67:
         7a:e1:4f:04:38:72:90:05:0e:47:c3:e0:02:61:29:95:a8:41:
         9d:f8:24:50:5e:4a:a1:93:c9:3e:02:ba:5c:27:9a:a3:b2:9f:
         7a:a2:0a:16:cc:8c:af:88:24:5f:d8:7d:3b:c0:b7:b7:56:37:
         26:6e:3f:32:59:ce:f5:74:24:5a:ce:fb:20:67:7d:d9:07:5a:
         e6:33:ff:a5:95:d3:36:5f:36:96:4d:da:4d:1f:9a:73:44:9d:
         18:5d:6f:71:fa:7a:1f:8d:49:96:82:cf:38:71:3f:5b:5f:4f:
         37:ee:3b:04:81:3f:47:a0:87:53:88:6a:06:55:29:aa:f1:2a:
         02:ba:d9:27:1b:db:94:aa:1d:3e:b2:23:31:28:2c:59:a2:1a:
         c0:1c:28:8f:7b:6b:e5:aa:8a:8c:5c:9c:a7:06:78:ae:5d:d5:
         d9:49:e3:15:82:56:1b:1d:f1:34:55:b1:c1:83:4a:f8:b9:cf:
         c8:2d:13:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org